Skip to content

TRACE SDK 0.5.0

Choose a tag to compare

View all tags
@imran-siddique imran-siddique released this 09 Aug 04:00
· 240 commits to main since this release
v0.5.0
38f5842
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

TRACE v0.2: the EAT profile URI moves to tag:agentrust-io.com,2026:trace-v0.2 (was tag:agentrust.io,2026:trace-v0.1).

agentrust.io was never a domain this project controlled; it resolves to third-party parked addresses. RFC 4151 permits a tag URI only where the minting authority controlled the named domain on the stated date, so the v0.1 identifier was invalid rather than merely misspelled: it asserted authority over a name someone else could stand up a conflicting definition at.

Cutover, not coexistence. A v0.2 verifier requires the new URI and rejects the old one. Dual acceptance would keep the invalid identifier live indefinitely, which is the thing being fixed. Records issued under v0.1 stay verifiable against spec/trace-v0.1.md and the published agentrust-trace 0.4.x releases, which remain on PyPI.

Nothing else in the record format changed. Migration for a producer is the profile string and a dependency bump.

This release was tagged and published to PyPI on 2026-07-27 but never given a GitHub release, and it has no CHANGELOG.md section of its own. These notes were written on 2026-08-09 from the commit range v0.4.0..v0.5.0 and from the 0.5.1 changelog entry, which describes the same profile change. Backfilled so the release history reads straight rather than skipping from 0.4.0 to 0.7.0.

Assets 3
Loading