MoonPermit v0.1.1 adds a deterministic guarded Agent Host reference integration.
Highlights
- Routes recognized typed tool calls through Runtime::check_with_proof before execution.
- Retains the atomic Receipt and AuthorizationProof for later inspection.
- Demonstrates allow-once execution with a deterministic in-memory fake executor.
- Demonstrates zero executor side effects for scope denial, expiry, budget exhaustion, duplicate invocation, and unsupported tools.
- Demonstrates NeedsApproval for requested authority expansion and deterministic offline receipt audit.
- Adds the guarded-host smoke test to Ubuntu, macOS, and Windows CI.
Verification
- 65 tests pass under --deny-warn.
- Core coverage: 528/550 (96.0%).
- All instrumented source: 639/890 (71.8%).
- Release commit 5545c44 passed check, test, format, public API drift, build, CLI, examples, coverage, and benchmark jobs.
Security boundary
The guarded-host example uses an in-memory fake executor and performs no real filesystem, process, network, or secret operation. MoonPermit demonstrates application-level host mediation; it is not an operating-system sandbox or a cryptographic authorization credential.