Skip to content

v0.8.55 — Positioning: the contract layer beneath your gateway

Choose a tag to compare

View all tags
@sattyamjjain sattyamjjain released this 24 Jul 06:10
v0.8.55
e800427

v0.8.55 — Positioning: the contract layer beneath your gateway

A positioning + credibility pass. No functional or behavioral change — documentation, the agent_airlock module docstring, and a version bump only. Runtime, presets, and public API are byte-for-byte unchanged; the full suite (3,538 passed, 85.92% coverage) passes untouched.

Reframed onto the wedge

  • The README one-liner and the package docstring drop the old "The Pydantic-based Firewall for MCP Servers" line for the wedge: "a deny-by-default type-checker and contract layer for AI agent tool calls — the in-process check that runs beneath your MCP gateway." "Firewall" now collides with what native MCP gateways and WAFs do; the distinct value is the payload contract, one layer in.

New "Where this sits" section

  • Positions airlock against the 2026 gateway / agent-identity landscape — Microsoft Entra Agent ID, Databricks Unity AI Gateway, Docker MCP Gateway, Cloudflare, AWS, plus the MCP spec's OAuth resource-server mandate. They route + authenticate; airlock validates the actual tool-call payload in-process, zero-dep, so a malformed or out-of-contract call is denied before it executes.
  • Cites the real category-shift stat as the reason the boundary matters: Gartner — 40% of enterprise apps will ship a task-specific AI agent by end-2026, up from < 5% in 2025. (The earlier "75%" figure is Deloitte's, not Gartner's — corrected here rather than repeated.)

Placeholder-CVE audit: already clean, kept guarded

  • Re-swept the tree for placeholder / reserved / example CVE ids. The one synthetic id the repo ever carried (CVE-2026-99999) was removed back in v0.8.36 and replaced with a real disclosed CVE. The only two remaining references — the CHANGELOG history entry and the regression guard's own parametrized detector cases (tests/test_no_placeholder_cves.py) — are credibility assets and are kept intentionally. No preset references a placeholder id. No code change required.

Full diff: v0.8.54...v0.8.55

Assets 2
Loading