Skip to content

Agentic Security Harness v1.1.0

Choose a tag to compare

View all tags
@krivonosoff161 krivonosoff161 released this 22 Aug 08:39
· 21 commits to main since this release
v1.1.0
eb044ef
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Agentic Security Harness v1.1.0

Agentic Security Harness v1.1.0 adds the first shipped provider-neutral Agent Host
workflow contour while preserving the stable trace schema 1.0 and corpus 1.0.0
contracts.

Highlights

  • Canonical, authority-free Agent Host recordings with per-event and whole-record
    commitments.
  • Deterministic evaluation of all 24 frozen corpus patterns into pass, finding,
    inconclusive, or adapter_error.
  • An explicit privacy-minimized Python instrumentation API for an owned workflow.
  • ash agent-host-quickstart, producing 48 protected/vulnerable cases in one atomic,
    content-bound bundle.
  • Shared validation, closed JSON schemas, adversarial topology/tamper tests, and
    installed-wheel Linux Python 3.11-3.13 coverage with Windows compatibility.
  • Hash-locked TestPyPI/PyPI smoke installs that verify the exact published universal
    wheel digest without resolving package dependencies from TestPyPI.

Start here

Install from PyPI:

python -m pip install agentic-security-harness==1.1.0
ash agent-host-quickstart --out reports/agent-host-quickstart
ash validate reports/agent-host-quickstart

The built-in workflow is deterministic, synthetic, and no-network. Public evidence
contains safe metadata and digest references rather than raw prompts, tool arguments,
tool results, credentials, endpoints, exception text, or local paths.

Evidence and limitations

The release workflow reproducibly builds and smoke-installs the wheel and sdist, produces
SHA-256 checksums and an exact-subject CycloneDX 1.6 SBOM, and creates independently
verified GitHub/Sigstore attestations before package-index promotion.

This release does not dynamically load or execute an arbitrary external agent host. It
does not add native OpenAI, Anthropic, or Google SDK collectors, authenticate an evidence
producer, certify a deployed system, enforce policy, or claim complete protection. A
clean result is not a production safety certification.
Independent standards validation and independent maintainer review remain unclaimed.

Full changes: CHANGELOG.md. Release procedure:
release-checklist.md and
release-to-pypi.md.

Assets 6
Loading