Skip to content

v1.1.0 — Agent Identity, multi-tenancy & server-side approval gates

Choose a tag to compare

@cryxnet cryxnet released this 17 Jul 20:48
· 3 commits to main since this release
4802dff

Promptise Foundry v1.1.0 — the release that makes agents ready for real users: verifiable identity, multi-tenant isolation, and human approval enforced where the tool lives.

Highlights

Agent Identity — every agent gets a stable, verifiable identity. Local, or backed by Microsoft Entra ID, AWS IAM, Google Cloud, SPIFFE/SPIRE, or generic OIDC, with per-resource credentials and token caching. Wired through build_agent(identity=...), cross-agent calls, MCP server auth, the runtime, and observability.

First-class multi-tenancytenant_id as a structural isolation invariant across cache, memory, conversations, rate limits, and audit. RequireTenant/HasTenant guards and MCPServer(require_tenant=True). Two tenants that share a user_id can never see each other's data.

Server-side approval gates (HITL)@server.tool(requires_approval=True) + ApprovalGateMiddleware enforce human approval for any MCP client. Fail-closed on timeout, four-eyes separation of duties, denied on modified arguments; an ungated declaration refuses to build.

Reasoning engine — automatic context handling by default (context_scope="auto"), plus the code-action, verify, and managed patterns, and scoped/ledger context lifecycle for deep tool loops.

Fixed

  • promptise serve CLI now ships (stdio / HTTP / SSE, --dashboard, --reload).
  • Declared per-tool rate limits (@server.tool(rate_limit="100/min")) are enforced.
  • CallerContext survives cross-agent delegation — peers stay attributed to the original principal.
  • Dict-form server specs carry every field; stdio cwd is honored end-to-end; agent state history is an immutable snapshot; delegation stamping is snapshotted.

Full changelog: https://docs.promptise.com/resources/changelog/
Docs: https://docs.promptise.com/ · Install: pip install -U promptise