Skip to content

v0.4 — governed agent runtime

Choose a tag to compare

View all tags
@rrrozhd rrrozhd released this 06 Jul 13:28
· 460 commits to main since this release
v0.4
62ba8f5

First public release of zeroth-core as the governed agent runtime.

Build multi-agent graphs in code or on canvas and deploy them as multi-tenant API services where audit trails, human approval gates, and per-tenant budget caps are enforced by the runtime itself.

Security hardening (v0.4)

  • Econ-plane open token issuer (POST /regulus/**/auth/token) blocked at the gate — unreachable over HTTP even with a valid key; self-calls mint tokens in-process.
  • Fails closed at startup when the bundled Regulus control plane is mounted with the placeholder ECP_JWT_SECRET.
  • RBAC enforced on the studio (workflow authoring) and cost (admin-only) APIs.
  • Budget fail-open is now logged so evaporated cap enforcement is observable.

See SECURITY.md for deployment hardening notes.

Assets 2
Loading