Skip to content

v0.10.0 - LangGraph.js runtime eval adapter

Choose a tag to compare

View all tags
@lindixu6-hash lindixu6-hash released this 16 Aug 22:02
v0.10.0
a4c1e4f

What shipped

  • External runtime integration with @langchain/langgraph@1.4.10, pinned by an isolated lockfile.
  • A real two-node StateGraph executes all eight malicious and benign prompt-injection fixtures.
  • Trusted instructions and source-labeled untrusted content remain separate graph-state fields.
  • External evaluation emits v0.7 results plus node-linked response, assertion, tool-trace, and policy-trace artifacts.
  • CI installs the locked dependency on a clean runner, validates generated results with public @v0, and retains 34 files as langgraph-eval-evidence.
  • Root CLIs remain zero-dependency; the npm package stays 347 KB and excludes nested node_modules.
  • Dependency audit: 0 known vulnerabilities. Test suite: 100/100 passing.
  • English and Simplified Chinese docs state that this is orchestration evidence, not an LLM benchmark or proof that arbitrary LangGraph apps are safe.

中文说明

  • 新增外部 Runtime 集成：独立锁定 @langchain/langgraph@1.4.10。
  • 使用真实双节点 StateGraph 执行全部 8 条恶意与良性提示注入 Fixture。
  • 可信指令与带来源标签的不可信内容保持为独立 Graph State 字段。
  • 外部评估器生成 v0.7 Result，以及带节点来源的回答、断言、工具 Trace 与策略 Trace。
  • CI 在干净 Runner 安装锁定依赖，使用公开 @v0 校验结果，并保留 34 个证据文件。
  • 根 CLI 继续零依赖，npm 包保持 347 KB，不包含嵌套 node_modules。
  • 依赖审计 0 漏洞，100/100 测试通过。
  • 中英文文档明确：这是编排 Runtime 证据，不是 LLM Benchmark，也不能证明任意 LangGraph 应用都安全。

CI evidence: https://github.com/lindixu6-hash/awesome-agentic-engineering/actions/runs/31975175069

Assets 2
Loading