Endor Labs Agent Kit 2.2.2

Agent Kit 2.2.2 hardens the SCA remediation workflow's dependency-graph safety across all 13 supported package managers, building on the deterministic remediation gates introduced in 2.2.x.

Added

• Dependency Graph Safety Audit for SCA remediation: every selected remediation carries a structured, mechanism-driven audit of manifest and lockfile manipulations (exclusions, overrides, substitutions, native version controls) validated per package-manager family — Maven, Gradle, npm, yarn, pnpm, pip, poetry, pipenv, uv, Go, NuGet, Bundler, and Cargo — with fail-closed status forcing and risk-decision coupling.

Fixed

• Audit-manifest anchoring: the audited manifest is now required for every content-bearing audit status and must match a selected remediation or change-request inventory manifest.
• Selections with no detectable package manager fail closed demanding the audit; managers without an audit profile report an explicit unavailable audit and remediate with certification capped at approved_with_validation_required.
• The dependency-graph audit skeleton now lists all 13 supported managers, with generation-time drift protection against the supported-profile registry.

Changed

• Refreshed the pinned Endor OpenAPI context to the current platform surface (v1.7.1128-era spec) with zero registry drift.