Skip to content

Agentic Security Harness v1.0.0

Choose a tag to compare

View all tags
@krivonosoff161 krivonosoff161 released this 14 Aug 18:11
· 27 commits to main since this release
v1.0.0
7129592
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Agentic Security Harness v1.0.0

Agentic Security Harness v1.0.0 freezes the first stable public benchmark contract for
synthetic agentic AI boundary testing.

Highlights

  • Trace schema 1.0 with a bounded legacy 0.1 read and migration window.
  • Corpus 1.0.0 with 24 ordered synthetic patterns and a canonical semantic digest.
  • Linux-first installed-package quickstart on Python 3.11-3.13, with Windows 3.11
    compatibility coverage.
  • Reproducible wheel and sdist builds, SHA-256 checksums, GitHub/Sigstore attestations,
    and an exact-subject CycloneDX 1.6 SBOM.
  • A manual OIDC-only promotion path that reuses verified tag artifacts for TestPyPI and
    PyPI instead of rebuilding them.

Start here

After package-index publication:

python -m pip install agentic-security-harness==1.0.0
ash quickstart --out reports/quickstart

Before PyPI publication, install from the exact GitHub release wheel or source checkout.
The deterministic quickstart compares the vulnerable and protected demo agents on the
same corpus and produces the expected 24 -> 0 synthetic result.

Evidence and limitations

The tag workflow must build and independently verify the exact wheel, sdist, SBOM, and
checksums before this release is published. A clean benchmark result is not a production safety certification.
Native provider/tool-host adapters, deployment, enforcement,
independent standards validation, and independent maintainer review are not claimed.

Full changes: CHANGELOG.md. Release procedure:
release-checklist.md and
release-to-pypi.md.

Assets 6
Loading