v0.1.0

First public release of CAGE: capability tokens, structural refusal and an append-only audit chain for AI agents, with a Rust core and a Python client. Pre-1.0, the API may change. Read the known limitations and DEPLOY.md before running the broker in production.

Wheels: Linux x86_64 (manylinux_2_28) and macOS arm64, CPython 3.11 to 3.14.

Every wheel below is signed with Sigstore (keyless OIDC and Fulcio), and the signature is recorded in the public Rekor transparency log.

Verify before installing:

cosign verify-blob \
  --certificate cage-*.whl.cert \
  --signature   cage-*.whl.sig \
  --certificate-identity-regexp \
    "https://github.com/derdelean/cage/\.github/workflows/release\.yml@.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  cage-*.whl

A passing verification proves the wheel was built by this repository's release workflow at the tagged commit, and the proof is recorded in Rekor.