Skip to content

string-audit v0.2.0 — real cas/anchored-chain + keyed Anthropic

Choose a tag to compare

View all tags
@bdelanghe bdelanghe released this 23 Jun 00:17
Immutable release. Only release title and notes can be modified.
v0.2.0
247152c

Wires up the real published bounded-systems packages and a live keyed CI path.

cas + anchored-chain are real now (from JSR)

  • @bounded-systems/cas — content addressing (sha256Hex/sha256BareHex); blobs by digest, get re-hashes + rejects corrupt.
  • @bounded-systems/anchored-chain — each cached result records a real in-toto derivation (digestManifest → derivationId, manifestToStatement → an in-toto.io/Statement/v1), serialized with canonicalJson.
  • STORE=cas (and STORE=socket, the room daemon) now produce canonical, in-toto provenance — verified in CI (the room step audits through the socket-mounted cas store).
  • (DSSE ed25519 signing — assembleEnvelope + ed25519Signer — is the small remaining follow-up.)

Live keyed Anthropic — in Actions

  • .github/workflows/anthropic.yml: manual + weekly live audit gated on the ANTHROPIC_API_KEY repo secret (real LLM only on cache-miss). Add the secret to enable.

Unchanged & green

fs / cas / socket-in-a-room stores · typed audits · grounding guard · spell + custom dictionary · grammar · overlap · extract+coverage · Anthropic path test. CI pipeline green.

Assets 3
Loading