Skip to content

v1.2.0-rc.1 - Trust Plane Proof

Pre-release
Pre-release

Choose a tag to compare

@PetrefiedThunder PetrefiedThunder released this 19 May 09:57
· 222 commits to 3bec7a9966cbd00468d2a7463a6462089190c07b since this release

Trust Plane Release Candidate

This prerelease packages the governed MCP trust-plane proof on main.

Verified from a clean origin/main worktree at 3bec7a9966cbd00468d2a7463a6462089190c07b.

Proof Loop

discover -> authenticate -> permit -> invoke -> meter -> receipt -> audit -> replay -> deny

Verification

  • scripts/trust_release_gate.sh passed.
  • Focused trust-plane suite: 55 passed.
  • Trust-core coverage gate: 60 passed, 85.12% coverage over trust-plane control modules.
  • Executable trust-plane demo proof passed.
  • Discovery drift checks passed.
  • OpenAPI parity passed.
  • Simulation inventory parity passed.

Demo Proof Highlights

  • Signed permit scoped to one MCP tool.
  • Governed MCP invoke charged the wallet once.
  • Signed receipt linked to ledger and audit artifacts.
  • Replay returned the original receipt without a duplicate debit.
  • Out-of-scope MCP call returned a denial receipt.
  • Denial replay returned the same denial receipt.
  • Cross-wallet read was denied with 403.

Caveat

This is a production-beta release candidate for the control-plane proof, not a claim of complete production settlement, full IAM replacement, or universal policy coverage.