Skip to content

v0.3.0 — Deep-Advance Hardening

Latest
Latest

Choose a tag to compare

View all tags
@piyushptiwari1 piyushptiwari1 released this 25 May 10:27
· 2 commits to main since this release
v0.3.0
9dcd987
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MCPKernel v0.3.0 — Deep-Advance Hardening

A major hardening release across six dimensions: trust model, hot path, protocol, operations, supply chain, and compliance. See CHANGELOG.md for the full list.

Highlights

A. Trust & taint

  • Post-execution taint scanning on tool responses (not just inputs) — closes the canonical exfiltration vector.
  • Causal trust graph: per-input trust score decays through tool calls, gates write/send operations.

B. Hot path

  • Async-safe lock-free taint propagation; non-blocking audit append.
  • Connection-pooled DEE trace store.

C. Protocol hardening

  • RFC 8707 Resource Indicators required by default in OAuth flows.
  • Sigstore Bundle v0.3 spec enforcement (rejects v0.1/v0.2).
  • DSSE / in-toto attestations on audit logs (cryptographic chain-of-custody).

D. Operations

  • Policy linter (mcpkernel lint policy.yaml) — static analysis, conflict detection, ReDoS guard.
  • Grafana dashboard (deploy/grafana/) — 12-panel overview.
  • Helm chart (deploy/helm/mcpkernel/) — production-ready with HPA, NetworkPolicy, ServiceMonitor, Ingress.

E. Supply chain

  • CycloneDX SBOM (spec 1.6, JSON + XML) — attached below.
  • Committed uv.lock for reproducible builds (131 packages pinned).
  • Native CodeQL workflow (replaces deprecated CodeQL Action v2 paths).
  • Hypothesis-based fuzz tests for proxy interceptor (~1200 cases per run).
  • Reproducible Builds guide (docs/contributing/reproducible-builds.md).

F. Compliance & threat model

  • OWASP LLM Top-10 (2025) mapping with status, controls, and policy snippets.
  • STRIDE threat model (THREAT_MODEL.md) — 6 trust boundaries, 8 data flows, 30+ threats.
  • Taint overhead benchmark (benchmarks/taint_overhead.py) — reproducible perf data.

Install

pip install mcpkernel==0.3.0
# or
uv pip install mcpkernel==0.3.0

Artifacts

File Purpose
mcpkernel-0.3.0-py3-none-any.whl Python wheel
mcpkernel-0.3.0.tar.gz Source distribution
mcpkernel-sbom.cdx.json CycloneDX SBOM v1.6 (JSON)
mcpkernel-sbom.cdx.xml CycloneDX SBOM v1.6 (XML)

Verification

# PyPI version
pip index versions mcpkernel

# SBOM components
python -c "import json; print(len(json.load(open('mcpkernel-sbom.cdx.json'))['components']))"
# -> 149

What's next (v0.4)

  • Embedding-similarity outlier detection (LLM08).
  • Cryptographic signature on policy bundles (T-2).
  • Corpus-level integrity scanning for long-running agents (LLM04).

Documentation: https://piyushptiwari1.github.io/mcpkernel/
Issues: https://github.com/piyushptiwari1/mcpkernel/issues

Assets 6
Loading