Skip to content

v0.34.0 — cross-principal verified tier (fact-bound attestation)

Choose a tag to compare

View all tags
@amitpatole amitpatole released this 23 Jun 13:52
· 22 commits to main since this release
v0.34.0
fa13e0b

Roadmap item 1 of 3. Closes the last brain trust residual: a peer's belief can now earn the verified tier (not just candidate) — but only via a fact-bound attestation, so trust still never travels by say-so.

Highlights

  • verdict.fact_commitment(subject,predicate,text) — a 256-bit commitment to a claim's content; attest_fact() mints a portable signed GateReceipt whose signed subject IS that commitment; verify_fact_attestation() accepts it iff it verifies, attests verdict=PASS, AND is bound to THIS exact claim (an unrelated valid receipt can't launder a different fact).
  • authenticated_remember(evidence=…) earns the cross-principal verified tier only with a publicly-verifiable ed25519 attestation (a peer verifies without the producer's secret); RemoteMemory.remember_signed(evidence=…) threads it; the MCP verel_remember also promotes on a fact-bound attestation (local = single-principal, hmac accepted).
  • Reserved-key + non-FACT guards run before promotion; local and remote write paths now share one is_reserved_key source of truth.

Security

Shipped through a 4-round adversarial red-team (the 4th came back clean): 256-bit commitment, local non-FACT backstop, local reserved-key guard, and proven local↔remote guard parity. 446-test suite; ruff + mypy clean. pip install "verel[attest]".

Assets 2
Loading