CAGE-lite v0.1.2 product preview

CAGE-lite v0.1.2 product preview

CAGE-lite is an open-source reference implementation of CAGE Prebind Assurance at the business consequence boundary.

Agent platforms govern how agents run. CAGE governs whether agent actions are allowed to become business consequences.

This release prepares CAGE-lite for public evaluation with a hosted demo, public package distribution, clearer project positioning, and automatic demo-artifact bootstrap.

What this release includes

• Hosted Streamlit product demo
• Python package published on PyPI
• CAGE Warrant schema 0.4
• HELD, ADMITTED, and NARROWED boundary outcomes
• NO_BIND, BOUND, and narrowed-effect proof
• Replay linkage between original and replayed actions
• CAGE Warrant digest verification
• Automatic generation of demonstration artifacts in hosted environments
• Public project links and package metadata
• 102 passing tests
• Verified wheel and source distribution
• Trusted Publishing through GitHub Actions

Demonstration scenario

The included replay demonstration evaluates a USD 75,000 vendor payment against an agent standing limit of USD 50,000.

Without the required approval:

• Boundary outcome: HELD
• Effect disposition: NO_BIND
• Effect executed: No
• System of record: NOT_WRITTEN

After the required approval is supplied through replay:

• Boundary outcome: ADMITTED
• Effect disposition: BOUND
• Effect executed: Yes
• System of record: WRITTEN

The replay Warrant remains linked to the original held Warrant.

Version identifiers

CAGE-lite uses separate version identifiers:

• Product: CAGE-lite v1 product preview
• Python package: 0.1.2
• CAGE Warrant schema: 0.4

Validation

• 102 tests passed
• Wheel and source distribution built successfully
• Package metadata checks passed
• Clean wheel installation passed
• Production PyPI installation passed
• Packaged payment replay completed successfully

Links

• Live demo: https://cage-lite.streamlit.app/
• GitHub: https://github.com/roopamwsure/cage-lite
• PyPI: https://pypi.org/project/cage-lite/
• CAGE-1 paper: https://arxiv.org/abs/2607.03510
• Changelog: https://github.com/roopamwsure/cage-lite/blob/main/CHANGELOG.md

CAGE-lite is an early product preview and reference implementation. It is intended for evaluation, experimentation, and discussion rather than production deployment.

CAGE-lite v0.1.1

CAGE-lite v0.1.1

CAGE-lite v0.1.1 is a patch release focused on PyPI presentation and release hardening.

Agent platforms govern how agents run. CAGE governs whether agent actions are allowed to become business consequences.

Fixed

• Corrected README image rendering on PyPI by using absolute HTTPS image URLs.

Changed

• Added a direct PyPI installation path to the Quick Start.
• Reworked the release workflow to build and verify immutable tagged distributions.
• Added TestPyPI validation before production publication.
• Enabled Trusted Publishing attestations for release artifacts.

Install and run

CAGE-lite requires Python 3.10 or later.

python -m pip install cage-lite==0.1.1
python -m cage_lite.demo.payment_replay

CAGE-lite v0.1.0 product preview

CAGE-lite v0.1.0 product preview

CAGE-lite is an open-source reference implementation of the CAGE framework for prebind assurance of AI-agent actions.

Agent platforms govern how agents run. CAGE governs whether agent actions are allowed to become business consequences.

What this release includes

• CAGE Warrant schema 0.4
• durable boundary-decision, evidence, and effect records
• HELD, ADMITTED, and NARROWED boundary outcomes
• durable NO_BIND, BOUND, and narrowed-effect proof
• replay linkage between an original held Warrant and an admitted replay
• independent Warrant digest verification
• modular Streamlit interface with:
  • Overview
  • Boundary Runs
  • Warrants
  • Replay
  • Architecture
• public examples for held, approved, and narrowed payments
• GitHub Actions validation on Python 3.10 and Python 3.13
• packaged Streamlit application and CAGE logo
• contribution guidelines, security policy, and changelog

Demonstration scenario

The flagship demonstration proposes a USD 75,000 vendor payment by an agent whose standing limit is USD 50,000.

Without the required approval:

• boundary outcome: HELD
• effect disposition: NO_BIND
• protected API executed: no
• system of record written: no

After approval is supplied and the action is replayed:

• boundary outcome: ADMITTED
• effect disposition: BOUND
• protected API executed: yes
• system of record written: yes
• replay Warrant links to the original held Warrant

Version labels

• Product: CAGE-lite v1 product preview
• Python package: 0.1.0
• CAGE Warrant schema: 0.4

These version labels are intentionally separate.

Validation

• 95 tests passed
• CI passed on Python 3.10 and Python 3.13
• wheel and source-distribution builds passed
• clean wheel installation passed outside the source repository
• installed replay demonstration completed successfully
• packaged application assets, LICENSE, and NOTICE were verified

Scope

CAGE-lite does not replace agent runtimes, IAM, policy engines, guardrails, MCP or API gateways, observability platforms, agent evaluation frameworks, or hyperscaler governance services.

CAGE consumes signals from those systems and evaluates whether a proposed action may cross the business consequence boundary and become binding.

See CHANGELOG.md for the complete release summary.