Skip to content

v2.0.1 — Security hardening & paradigm-feature close-out

Latest

Choose a tag to compare

@AmitoVrito AmitoVrito released this 04 Aug 17:25
· 127 commits to main since this release
fad8630

A security and close-out patch. No public API changedpip install --upgrade synapsekit.

🔒 Security — 8 dependencies patched, 0 known vulnerabilities

An OSV audit of the full resolved dependency graph (all extras + groups, 534 packages) flagged 8 packages with active advisories; their floors are now pinned to patched releases and the lockfile re-resolves to 0 known vulnerabilities:

  • cryptography>=50.0.0 (PYSEC-2026-3552)
  • pillow>=12.3.0 · pyasn1>=0.6.4
  • aiohttp>=3.14.3 · gitpython>=3.1.57 · mcp>=1.28.1
  • httplib2>=0.32.0 and setuptools>=83.0.0 (transitive; also pinned via [tool.uv] constraints)

✅ Paradigm features closed out

  • Self-Evolving Agents (#732) — added the offline, CI-tested self_evolving_agent.ipynb (held-out accuracy 40% → 100% over 3 cycles, decoys blocked by the eval gate, live rollback). RolloutPolicy already at 100% branch coverage.
  • Neuro-Symbolic layer (#733) — verified feature-complete (Z3 / SymPy / MiniZinc / Prolog backends, verify round-trip, CI benchmark gate).

🖥 SynapseKit Live

The self-evolving loop is no longer a black box: SelfImprovingAgent.evolve()/.rollback() now stream to the Live dashboard as agent.evolve / agent.rollback events with dedicated icons and story lines.

🧪 Testing

Full suite + all benchmark gates green across Python 3.11–3.13, real testcontainers integration, and z3 on Linux. make release-check passes (core-import with no extras, export-surface, functional smoke).

Full changelog: CHANGELOG.md