NexusAegis v1.0.0 — Proof-Carrying Agent Execution (PCAE) Kernel & RFC 6962 Merkle PR Attestation Engine

🛡️ NexusAegis v1.0.0 — Proof-Carrying Agent Execution (PCAE)

First stable flagship release unifying all 7 deterministic verification engines of the Codesphere Agentic Stack (agentshield, synapse-router, swarmweaver, agentflight, patchpilot, truthgate, and cortex-mcp) into an RFC 6962 domain-separated binary SHA-256 Merkle tree certificate (AegisAttestationBundle).

Highlights

• 7-Gate Deterministic PCAE Pipeline (SevenGatePipeline): Executes security, budget/routing, multi-agent glob lock leases, trajectory loop health, Python AST anti-reward-hacking, clause-local citation grounding, and bi-temporal memory freshness checks in 0.27 ms P50 (0.46 ms P95) with zero external runtime dependencies.
• RFC 6962 Second-Preimage Resistant Merkle Proofs (MerkleTreeEngine): Uses 0x00 leaf domain separation and 0x01 internal node domain separation with O(log N) selective-disclosure inclusion proofs (verify_merkle_inclusion_proof).
• Verified 35-Scenario Multi-Agent Benchmark Suite: 100.00% adversarial recall (25/25), 0.00% clean false-positive rate (0/10), 100.00% selective-disclosure proof accuracy (245/245), and 100.00% tampered proof rejection (245/245).
• GitHub Pull Request Attestation Markdown Card (render_pr_attestation_markdown) & JSON-RPC 2.0 Stdio MCP Server (nexus-aegis mcp).