Skip to content

Releases: smallthinkingmachines/harombe

Release list

v0.3.1-paper: Reference implementation for whitepaper (Feb 2026)

v0.3.1-paper: Reference implementation for whitepaper (Feb 2026) Latest
Latest

Choose a tag to compare

View all tags
@Ricoledan Ricoledan released this 11 Feb 19:02
v0.3.1-paper
a42df3f

Reference Implementation for Whitepaper

This release corresponds to the benchmarked reference implementation described in the whitepaper: The Capability-Container Pattern: Infrastructure-Level Security for Autonomous AI Agents.

What's Included

  • All six defense-in-depth layers implemented (container isolation, network egress filtering, credential vaults, audit logging, secret scanning, HITL gates)
  • 1,534-sample benchmark corpus (900 synthetic secrets, 514 benign samples, 120 adversarial evasion samples)
  • Cross-run reproducibility results (benchmarks/multi_run_results.json)
  • Compiled whitepaper PDF (paper/main.pdf)

Key Metrics

  • Gateway logic overhead: ~0.025 ms (cross-run 95% CI: [0.022, 0.028])
  • Secret detection rate: 100% (CI: [0.996, 1.000])
  • F1 score: 0.991 vs. 0.779 for detect-secrets
  • False positive rate: 0.19% (CI: [0.000, 0.011])
  • Breach scenario coverage: 6/7 reconstructed 2025 MCP vulnerability scenarios

Changes Since v0.3.1

  • Added 9 new citations (IsolateGPT, Deng et al., MAESTRO, Google, SAFE-MCP, E2B, Daytona, GitGuardian, CVE-2024-1086 PoC)
  • Added related work section covering agent isolation and industry frameworks
  • Fixed breach rhetoric (vulnerability vs. breach, proper attribution)
  • Fixed imprecise numerical claims (gVisor overhead range, Firecracker memory, KernelCTF qualifier)
  • Added statistical methodology notes
  • Fixed stale documentation (SECURITY.md, security-quickstart.md)
Assets 3
Loading

v0.3.1

v0.3.1

Choose a tag to compare

View all tags
@Ricoledan Ricoledan released this 11 Feb 04:24
v0.3.1
3b14d6f

Post-publish patch

Bug fix

  • Remove Python <3.14 version cap — requires-python upper bound blocked installation on Python 3.14+, even though only ChromaDB (an optional dep) is incompatible. Core harombe works fine on 3.14.

Improvements

  • Rename TestResult → CheckResult — eliminates PytestCollectionWarning: cannot collect test class 'TestResult' on every test run.
  • Obfuscate test credentials — build fake AWS/GitHub/Stripe keys at runtime via string concatenation so GitHub push protection doesn't flag them.

Full changelog: v0.3.0...v0.3.1

Loading

v0.3.0

v0.3.0

Choose a tag to compare

View all tags
@Ricoledan Ricoledan released this 11 Feb 03:42
v0.3.0
9a9f1d7

Harombe v0.3.0

Self-hosted agent framework for distributed AI workloads.

Highlights

  • ReAct agent loop with tool execution in sandboxed containers
  • Defense-in-depth security: MCP gateway, audit logging, credential vault, network isolation, HITL gates
  • Privacy-preserving inference routing (local/cloud hybrid)
  • Persistent memory with semantic search (RAG)
  • Voice I/O (Whisper STT + Piper/Coqui TTS)
  • Multi-node cluster coordination with smart routing
  • 90%+ test coverage, strict mypy, Python 3.11-3.13

Install

pip install harombe

Full documentation: https://smallthinkingmachines.github.io/harombe/

Loading