OpenWorkProof 1.6.0 — SOC reference MCP and Agent Skill

OpenWorkProof 1.6.0 adds a bounded AI-SOC reference integration and an installable Agent Skill.

New MCP tools (32 total):

• owp_soc_sample_alerts: synthetic Slips JSONL for an installation check.
• owp_soc_analyze_slips: supplied-alert review, source-window cases and signed evidence bundle.
• owp_soc_verify_bundle: shared offline proof checks with explicit external trust pins.

Investigation remains a deterministic stub and actions are simulated in memory. MCP case summaries distinguish simulated acceptance from independent evidence verification. Missing separately acquired expected public keys or witnessed checkpoints returns UNKNOWN. Connecting MCP or installing the Skill does not activate Guard or protect other Agent tools.

Install MCP: uv tool install 'openworkproof==1.6.0'.

Install Skill: npx skills add dengyier/OpenWorkProof --skill openworkproof-soc-review.

Guide and trust formats · Skill · Release PR

Includes fixes for order-bound investigation scope, grant budgets/expiry, signed authorization linkage and receipt reconciliation, checkpoint coverage and external trust requirements, source-window deduplication, malformed inputs and approval connection failures. The existing schema writer now inspects mutable directory contents only after acquiring its transaction locks.

The aisoc package comes from Tim / alphatin123's contribution, with its MIT notice retained; Core remains Apache-2.0. The immutable container candidate is bound to source commit 791927efce63f5ddaeff46c7aac951422fec959e.

This release does not establish real SOC deployment, production model accuracy, OS isolation, hardware-protected signing, human/customer acceptance or payment. The SOC extension verifier does not reconstruct original work-order/policy payloads, evidence meaning, wall-clock truth or frozen Core semantics; inspect its returned verification_scope.

Compatibility: the existing frozen Core pytest-population collector supports the pre-9.2 collection layout. Development/test installations use pytest>=8,<9.2; pytest9.2 collection is indeterminate/fail-closed and is not asserted as supported. The SOC tools do not use that collector.

Validation: final PR CI 41419608401 passed with 4,753 passed and 23 skipped; the fixture check passed. Local compatible SOC/docs/CLI checks passed 246/246, including 14 CLI paths skipped by CI. Immutable candidate container checks passed 190/190 and the required live supply-chain check passed. Clean-wheel MCP checks passed on SDK 1.30.0 and 2.3.0. These are software verification results, not deployment or customer acceptance.

Container packaging correction: PR #10 corrects the Dockerfile to copy the Apache and contributed MIT notice before package installation, and corrects the OCI license label. The container tags 1.6.0, 1.6 and latest were rebuilt from packaging correction commit 628394a. For container source builds use this correction commit. The immutable Git release tag and PyPI artifacts were not changed; Python runtime source and package version are unchanged.

Packaging correction validation: PR CI and merged main CI each passed with 4,753 passed and 23 skipped. The fixture check passed 28 tests. Branch/main container builds, the public image rebuild, and Pages completed successfully. An offline incremental container check verified both notice files and installed license metadata against source hashes.