v0.1.2

Changes in 0.1.2

Breaking: the broker refuses to start without an issuance policy. Set CAGE_ISSUANCE_SCOPES (for example llm.,sign.), or waive the policy with CAGE_BROKER_ALLOW_NO_POLICY=1 (allow_no_policy=True in spawn_broker). The waiver prints a warning and is recorded on the audit chain as issuance_policy_waived.

• An unknown variable starting with CAGE_ISSUANCE_ in any case, or a scope list that names no scope, stops the broker at start.
• spawn_broker never takes the policy waiver from the caller's environment, and it forwards CAGE_ names in any case so the broker can refuse a miscased one.

See the "Issuance policy" section in DEPLOY.md.

CAGE v0.1.2, Sigstore-signed. Also on PyPI as cage-ai.

Every wheel below is signed with Sigstore (keyless OIDC and Fulcio),
and the signature is recorded in the public Rekor transparency log.

Verify before installing:

cosign verify-blob \
  --certificate cage_ai-*.whl.cert \
  --signature   cage_ai-*.whl.sig \
  --certificate-identity-regexp \
    "https://github.com/derdelean/cage/\.github/workflows/release\.yml@.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  cage_ai-*.whl

A passing verification proves the wheel was built by this
repository's release workflow at the tagged commit, and the proof
is recorded in Rekor.

v0.1.1

CAGE v0.1.1, Sigstore-signed. Also on PyPI as cage-ai.

Every wheel below is signed with Sigstore (keyless OIDC and Fulcio),
and the signature is recorded in the public Rekor transparency log.

Verify before installing:

cosign verify-blob \
  --certificate cage_ai-*.whl.cert \
  --signature   cage_ai-*.whl.sig \
  --certificate-identity-regexp \
    "https://github.com/derdelean/cage/\.github/workflows/release\.yml@.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  cage_ai-*.whl

A passing verification proves the wheel was built by this
repository's release workflow at the tagged commit, and the proof
is recorded in Rekor.

v0.1.0

First public release of CAGE: capability tokens, structural refusal and an append-only audit chain for AI agents, with a Rust core and a Python client. Pre-1.0, the API may change. Read the known limitations and DEPLOY.md before running the broker in production.

Wheels: Linux x86_64 (manylinux_2_28) and macOS arm64, CPython 3.11 to 3.14.

Every wheel below is signed with Sigstore (keyless OIDC and Fulcio), and the signature is recorded in the public Rekor transparency log.

Verify before installing:

cosign verify-blob \
  --certificate cage-*.whl.cert \
  --signature   cage-*.whl.sig \
  --certificate-identity-regexp \
    "https://github.com/derdelean/cage/\.github/workflows/release\.yml@.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  cage-*.whl

A passing verification proves the wheel was built by this repository's release workflow at the tagged commit, and the proof is recorded in Rekor.