Skip to content

v0.3.0

Choose a tag to compare

View all tags
@imran-siddique imran-siddique released this 25 Sep 20:42
v0.3.0
8c4e601
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Breaking changes

  • Offline delegation verification requires an explicit trusted root. verify_chain fails closed when the trust set is omitted, and ca2a verify-dag --chain requires --trusted-root-issuer (#132).
  • ca2a verify-dag reports unsigned structure as verified: false and exits 1 unless --structural-only is given. Use verify-lineage for authenticated lineage (#198).

Added

  • Delegation revocation. An issuer, or any issuer above it in the chain, can sign a RevocationStatement; verifiers given a RevocationSnapshot refuse the revoked hop and everything beneath it with CREDENTIAL_REVOKED (#189).
  • require_hardware on outbound peer appraisal, a pinned SEV-SNP verifier (sev_snp_verifier) with platform, DEBUG, VMPL and guest SVN checks, and a two-host acceptance harness (#186).
  • SEV-SNP PLATFORM_INFO appraisal through require_platform, forbid_platform and reject_unrecognized_platform_bits. Opt in; nothing is appraised by default (#139).
  • ca2a start can demand caller attestation from config via require_caller_attestation (#161).
  • Opt-in live response authentication through require_authenticated_response (#187).
  • Agent Card extension helpers for the official A2A SDK (#130).

Security

  • cross_check_trace_dag binds each record's signing key to the chain's named delegate (#185).
  • TPM verification honours the declared TPMT_SIGNATURE scheme and digest (#149).

Fixed

  • Canonical JSON refuses integers above 2**53 - 1, matching RFC 8785 and agent-manifest (#159).
  • A reused SDK Message no longer carries an earlier task's sealed payload, caller offer or holder proof (#167).
  • The reference wire codec carries hardware attestation evidence (#143).
  • A parent link naming an unimplemented digest is TRACE_DIGEST_UNSUPPORTED, not a tampering finding (#119).
  • The inbound peer path verifies the delegation chain once (#120).

Requires agent-manifest 0.11.1 or later. Full list in CHANGELOG.md.

Assets 5
Loading