Skip to content

signet-eval v3.11.0

Choose a tag to compare

View all tags
@jmcentire jmcentire released this 16 May 00:04
· 7 commits to main since this release
v3.11.0
640230b

signet-eval v3.11.0

Adds advisory INJECT rules for probabilistic behavior nudges near tool-call time, without changing deterministic authorization semantics.

Added

  • INJECT decision variant evaluated in a separate post-auth pass.
  • Recency-weighted trigger modes: constant, step, linear, and exponential.
  • Payload sources: inline text, text_file under ~/.signet/injections/, and HMAC-signed allowlisted from_command output.
  • Template substitutions: {tool_name}, {cwd}, {date}, {matched_param.X}.
  • signet-eval injections and signet-eval inject-test <rule>.
  • examples/inject_examples.yaml.

Fixed

  • block_rm no longer false-positives on words/paths containing rm as a substring, such as drone_swarm or firmware.
  • matches(parameters, ...) now evaluates against serialized parameters, matching contains(parameters, ...) semantics.

Verification

  • cargo fmt --check
  • cargo test (199 tests)
  • cargo package --allow-dirty
  • cargo publish --dry-run --allow-dirty
  • mcp-publisher validate server.json
Assets 2
Loading