Aegis 0.2.1 — Public Preview

Aegis 0.2.1 is a public-preview presentation and distribution release for the Aegis developer surface.

What changed

• Rebuilt the Visual Studio Marketplace presentation around Aegis's evidence-first trust workflow.
• Added the official aegistrustlayer.com website across the public product surfaces.
• Aligned the Marketplace identity with aegis-security.aegis-security.
• Added clearer local-first trust-boundary, verification, policy, and Fix & Prove documentation.
• Refreshed extension packaging metadata and search terms.
• Remediated the extension development toolchain to 0 known npm audit vulnerabilities.

Release verification

• Extension tests: 66 passed / 0 failed
• VSIX verification: PASS
• Production dependency audit: 0 vulnerabilities
• Full extension toolchain audit: 0 vulnerabilities
• Packaged artifact: aegis-security-0.2.1.vsix

Scope

The core 0.2.0 analysis semantics, authorization boundaries, and evidence requirements are unchanged. 0.2.1 improves the public product surface and release metadata around the same evidence-first trust model.

Aegis remains a preview. Evaluate the current release on local or non-production repositories first.

Website: https://aegistrustlayer.com
Marketplace: https://marketplace.visualstudio.com/items?itemName=aegis-security.aegis-security

Aegis 0.2.0 — Trusted Analysis Preview

Aegis 0.2.0

This is the first release that connects the complete Aegis trust workflow.

What changed

Trusted Analysis now runs one production task graph from deterministic evidence to a final policy decision. The report keeps scanner coverage, model provenance, verifier independence, consensus, threat context, project memory, audit events, and integrity hashes together.

Secure fixes now have an explicit transaction boundary. Aegis binds a patch to the reviewed source, applies it atomically, runs project checks, rescans the target, and replays the authorized baseline. It reports PARTIAL when complete proof is unavailable instead of upgrading an incomplete run to VERIFIED.

Dynamic validation remains opt-in. It runs locally with read-only mounts, networking disabled by default, dropped capabilities, an unprivileged user, and bounded resources.

The GitHub Action and CLI expose the deterministic policy path without executing repository code. They produce ALLOW, REVIEW, or BLOCK together with JSON and SARIF evidence.

Release artifacts

• aegis-security-0.2.0.vsix
• aegis_security_backend-0.2.0-py3-none-any.whl
• RELEASE-MANIFEST.json
• SHA256SUMS

The manifest records the release commit, artifact sizes, and SHA-256 digests.

Install

Start the local backend:

python -m venv .venv
source .venv/bin/activate
pip install aegis_security_backend-0.2.0-py3-none-any.whl

export AEGIS_FINGERPRINT_KEY="$(
  python -c 'import secrets; print(secrets.token_urlsafe(48))'
)"

uvicorn aegis.main:app --host 127.0.0.1 --port 8000

Install the VSIX from the Extensions view with Install from VSIX…, or run:

code --install-extension aegis-security-0.2.0.vsix

For pull requests:

- uses: lemkyz/Aegis@v0.2.0
  with:
    base: ${{ github.event.pull_request.base.sha }}
    head: ${{ github.event.pull_request.head.sha }}

Known limits

• The VS Code extension requires the local backend; it is not a standalone scanner.
• Dynamic proof depends on an explicitly authorized validation plan and a locally available container image.
• Model-backed review depends on configured providers. Deterministic workflows remain available without them.
• 0.2.0 is a preview release. Public schemas may change before 1.0.

Aegis v0.1.0-alpha.1

Aegis follows a security finding beyond detection.

This first public alpha establishes the evidence-first fix verification chain:

• source, workspace, and Git change analysis
• scanner evidence correlation
• attack-surface mapping and threat modeling
• reviewable secure patch application
• syntax, test, and build verification
• static before-and-after comparison
• explicit authorization for dynamic validation
• isolated Podman or Docker execution
• read-only repository mounts
• restricted networking and resource limits
• dynamic evidence evaluation
• before-and-after validation replay
• unified VERIFIED, PARTIAL, or FAILED verdicts
• persistent verification reports in VS Code

The repository includes a deterministic local smoke fixture demonstrating authorized sandbox execution and exploit evidence capture.

Current verification status:

• 133 backend tests passing
• VS Code extension compiles successfully
• real Podman validation smoke test completed successfully

This is an early development release. Interfaces, schemas, setup steps, and extension behavior may change before the first stable version.