Fixed
- Missing
tessera_rs.labelshim file. The PyO3PyProvenanceLabelclass (Wave 4B in the v0.12-to-v1.0 plan) is annotated withmodule = "tessera_rs.label"so its__module__resolves correctly, but the matchingtessera_rs/label.pyre-export shim was never added to the wheel. As a resultfrom tessera_rs import labelandfrom tessera_rs.label import ProvenanceLabelboth raisedImportErroragainst shipped wheels. AgentMesh'sRustProvenanceLabelAdapter(in agentmesh-mesh v0.10.0) lazy-imports this submodule and silently fell back to Python without it, defeating the v1.0 fast-path goal. Adds the missing one-line shim mirroring the audit/context/cel/ratelimit pattern. - Refreshed
tessera_rs/__init__.pydocstring to list every v1.0-frozen submodule (cel,ratelimit,label).
Companion release
AgentMesh v0.10.0 ships the RustProvenanceLabelAdapter that depends on this shim.
Verified
- 2045 Python tests passing, 16 skipped, 0 failures.
- Wheel rebuilt locally via
maturin develop --release; smoke test confirmsProvenanceLabel.trusted_user.join(untrusted_tool_output) → integrity 2 (UNTRUSTED).