AgentGuard v0.2.2

AgentGuard v0.2.2

AgentGuard v0.2.2 is the first intended production PyPI release. The published
distribution is named agentguard-evals; the product name, Python import
package, and console command remain AgentGuard, agentguard, and
agentguard.

Install from production PyPI with:

pip install agentguard-evals
agentguard --version

Python 3.9 through 3.12 are supported.

Highlights

• Adopted the publishable agentguard-evals distribution identity without
  changing import agentguard or the agentguard CLI.
• Hardened configuration schemas, suite-relative path resolution, local
  subprocess isolation, bounded output capture, and malformed event handling.
• Improved report, history, export, browser, rename, static-site, and
  path-containment behavior.
• Strengthened output sanitization, Markdown and CSV safety, credential
  redaction, artifact containment, Docker image validation, and bounded event
  ingestion.
• Added a protected, build-once PyPI Trusted Publishing pipeline using GitHub
  OIDC and the pypi environment.

Validation evidence

• Full suite: 1,157 passed, 15 skipped.
• Statement coverage: 91.45%.
• Branch coverage: 80.45%.
• Combined coverage: 88.83% (88.00% required).
• Release-artifact validation, isolated package smoke checks, adversarial and
  showcase metrics checks, and Ruff all passed.

AgentGuard v0.2.1 remains a valid GitHub-only release. PyPI rejected its
original distribution identity before any package upload, so v0.2.2 uses
agentguard-evals.

Known limitations

AgentGuard is local-first. Local-agent execution is not inherently sandboxed
and should not be treated as a host security boundary; use the documented
Docker-backed controls where stronger isolation is required. AgentGuard does
not provide syscall-level interception, a hosted service, or a broad benchmark
leaderboard.