v0.1.2

Changes in 0.1.2

Breaking: the broker refuses to start without an issuance policy. Set CAGE_ISSUANCE_SCOPES (for example llm.,sign.), or waive the policy with CAGE_BROKER_ALLOW_NO_POLICY=1 (allow_no_policy=True in spawn_broker). The waiver prints a warning and is recorded on the audit chain as issuance_policy_waived.

• An unknown variable starting with CAGE_ISSUANCE_ in any case, or a scope list that names no scope, stops the broker at start.
• spawn_broker never takes the policy waiver from the caller's environment, and it forwards CAGE_ names in any case so the broker can refuse a miscased one.

See the "Issuance policy" section in DEPLOY.md.

CAGE v0.1.2, Sigstore-signed. Also on PyPI as cage-ai.

Every wheel below is signed with Sigstore (keyless OIDC and Fulcio),
and the signature is recorded in the public Rekor transparency log.

Verify before installing:

cosign verify-blob \
  --certificate cage_ai-*.whl.cert \
  --signature   cage_ai-*.whl.sig \
  --certificate-identity-regexp \
    "https://github.com/derdelean/cage/\.github/workflows/release\.yml@.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  cage_ai-*.whl

A passing verification proves the wheel was built by this
repository's release workflow at the tagged commit, and the proof
is recorded in Rekor.