0.2.0 — installed document onboarding

Action Authority 0.2.0 — installed document onboarding

Published on TestPyPI and PyPI. Install in a new Python 3.11 environment:

python -m pip install "agentic-action-authority[harness]==0.2.0"
python -m pip check

Omit [harness] for the standalone approval core. The optional create-only file writer is Harness 1.14.2.

What changed

• DocumentHost composes prepare, exact review transfer, separately signed decision, content-only callback and recovery without delivery.
• Setup requires an independently received expected public-key fingerprint and an explicit host repository/revision.
• Installed-package onboarding and migration instructions replace branch-candidate guidance.

One document guide · Integration · Upgrade from 0.1.1.

Exact publication evidence

Tag v0.2.0: d5462692c2e4788364788ebc3fc11458c5abaf1c.

Original wheel SHA-256: e4e87e764bca9232bae74b66cef78d45d8c0eb03809442e0bc9bb2bd3955e328.

• Exact tag build39116791967:5/5 jobs.
• Tag secret scan39116791928: passed.
• TestPyPI publication39203686111:7/7 jobs.
• PyPI publication39203940701:7/7 jobs, same build and staging receipt.

Each platform matrix passed core29 and adapter93 tests on Windows/Linux with no skips, errors or failures. Adapter93 includes core checks. Both index downloads matched the original wheel and UTF-8 metadata description. Release assets below are the original tag artifacts, not a rebuild.

Compatibility and limits

Existing0.1.1 task state is not automatically migrated or overwritten. Preserve old evidence and resolve uncertain actions with their original recovery route before considering a separate new task. Do not carry an old approval into a new task.

The host does not sign for the operator. This is not a content filter, model-truth guarantee, arbitrary-agent sandbox or universal exactly-once claim. Host repository/revision fields are declarations, not remote provenance attestation. Tests use disposable synthetic approvals; independent human acceptance and external user adoption are not claimed.

Action Authority 0.1.1 — exact-action approval component

Action Authority 0.1.1

Published on PyPI
and TestPyPI.

An experimental, separately installable exact-action approval component. The host
binds one action to exact content and dependencies; an operator signs that request.
The core installs without Harness. The optional [harness] adapter reuses Harness
1.14.2 to create one UTF-8 file, retaining spent attempts and recovery without
blind replay. Installation alone does not approve an action.

python -m pip install "agentic-action-authority[harness]==0.1.1"

Start with the one-document guide.
Keep operator private keys and passphrases outside the agent and chat.

Exact publication evidence

Source/tag: 281d4cb9c4620697f33005c6e0d628e41ff20fa0 / v0.1.1.
Wheel SHA-256: ca9df74f7c935f210cf0d787bde97723d9980f600388e034f29f8dbc93fc3caf.

• Tag build and installed acceptance: five jobs passed.
• Tag secret scan: passed.
• TestPyPI publication/readback: seven jobs passed.
• PyPI publication/readback: seven jobs passed, promoting the same wheel.

Each platform matrix verified installed core 28 and adapter 72 checks on Linux
and Windows, with zero failures, errors or skips. Index hashes and UTF-8 long
description match the original tag artifact. Uploaded release assets below are
that original artifact, not a local rebuild.

Preserved correction and scope

The first 0.1.0 TestPyPI upload succeeded but its verifier mishandled UTF-8 in wheel
metadata. Failed run 39107195232
and tag v0.1.0 remain unchanged; 0.1.0 was not promoted to production PyPI.
The 0.1.1 correction adds strict UTF-8 parsing and regression checks without
changing approval/effect runtime or dependency versions. No verification gate
was disabled.

This is not a content-truth filter, arbitrary-tool/OS sandbox, universal
exactly-once delivery guarantee or independent human review. Fixed test
signatures are not operator consent; historical operator exercises remain
separate from the extracted package's automated acceptance.