Skip to content

AgentGuard v0.3.0

Latest
Latest

Choose a tag to compare

View all tags
@richinmrudul richinmrudul released this 11 Aug 23:09
v0.3.0
f19b545
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AgentGuard v0.3.0 makes configuration and adoption safer and more predictable while preserving the project's local-first, evidence-based security boundary.

Install from production PyPI:

pip install "agentguard-evals==0.3.0"
agentguard --version

The distribution is agentguard-evals; the Python import and console command remain agentguard. Python 3.9 through 3.12 are supported.

Highlights

  • Safely initialize existing projects with agentguard init, including dry-run planning, conflict-aware writes, strict path and symlink containment, and optional least-privilege GitHub Actions generation.
  • Choose and inspect the minimal, recommended, and strict post-execution CI presets.
  • Validate agentguard.yaml with the packaged Draft 2020-12 JSON Schema and configure editor autocomplete.
  • Produce baseline-aware pull-request reports that distinguish new, existing, and resolved findings with bounded summaries and safe annotations.
  • Conservatively initialize supported Node.js projects that use the exact native node --test command without running package managers, scripts, hooks, installs, or repository code during initialization.
  • Conservatively initialize supported Go modules with the fixed go test ./... command without running Go tooling, downloads, generators, or repository code during initialization.

Documentation

Security boundary and upgrade notes

Initialization only performs bounded inspection and file generation; it does not execute project tooling or repository code. The presets validate observable results after execution and do not contain agent or test execution. AgentGuard does not claim protection against arbitrary hostile code, and no untrusted-agent preset is included.

Generated Python, Node.js, and Go workflows now pin agentguard-evals==0.3.0. Existing users can upgrade with the installation command above; the distribution, import, and CLI identities otherwise remain unchanged.

See the v0.3.0 changelog for the complete list of changes.

Assets 2
Loading