Skip to content

v0.5.2 — Security Remediations & Repository Stabilization

Choose a tag to compare

View all tags
@Julio-Patron Julio-Patron released this 15 Sep 01:36
· 52 commits to main since this release
v0.5.2
95e792b

Tempus DDB v0.5.2 — Security Remediations & Repository Stabilization

Security & Invariants Hardening

  • Delegation Chain & Trusted Root Verification (Finding 1): Added trusted_roots enforcement with single-root constraint; enforce recursive delegation chain checks ensuring all registered identities trace to an established root authority (src/b2a.rs).
  • Signed Policy Activation & Strict Fallback (Finding 2): Added active_policy_attestations table storing cryptographic attestations over active policies; retired tenant policies fail closed instead of falling back to unconstrained wildcards; SSRF protection and destination domain allowlisting in http_executor (src/phase3.rs, python/tempus_ddb/http_executor.py).
  • Segregation of Duties & Role Enforcement (Finding 3): Prohibit proposing agents from executing their own permits (executor_id != agent_id); reject proposer roles from executor duty; enforce executor tenant scope matching (src/b2a.rs, src/phase3.rs, python/tempus_ddb/mcp_server.py).
  • Durability & Replay Defense Across Gate/Executor (Findings 4 & 6): Upgraded SQLite persistence to PRAGMA synchronous = FULL; across gate and executors; executors cross-verify revocation and consumption state against Gate DB before effectuating actions (src/b2a.rs, src/executor.rs).
  • Financial Policy Beneficiary Validation (Finding 5): Enforce allowed_beneficiaries pattern matching in both policy evaluation and payment execution (src/phase3.rs, python/tempus_ddb/payment_executor.py).
  • Untrusted Signer Rejection in Checkpoint Verification (Finding 7): Checkpoint stream verifier requires trusted public key and rejects checkpoints signed by arbitrary keys with ERR_UNTRUSTED_SIGNER (src/events.rs, src/lib.rs).
  • Atomic State and Stream Mutations (Finding 8): Wrapped policy installations, authorizations, and outcome commits in immediate atomic SQLite transactions to eliminate race conditions between mutation and audit event logging (src/b2a.rs, src/events.rs).
  • Workflow Hardening (Finding 9): Pinned all GitHub Actions in .github/workflows/release.yml to immutable commit SHAs; added automated wheel testing and cargo test gates prior to release publication.

Platform & Stability Improvements

  • Windows CP1252 Compatibility: Replaced all console and comment non-ASCII symbols with clean ASCII characters to prevent encoding crashes on Windows consoles (python/tempus_ddb/cli.py, python/tempus_ddb/mcp_server.py).
  • CI Test Matrix: Expanded CI test matrix to include Python 3.10, 3.11, and 3.12 across Ubuntu, macOS, and Windows.
  • Documentation & Site Synchronization: Synchronized compatibility matrices, security policies, documentation references, and demo scripts to v0.5.2.
Assets 2
Loading