MAIP v2.1.0 — maintained integrations and reproducible verification

MAIP v2.1.0 — maintained integrations and reproducible verification

This is a release of the public MAIP source collection. It is not a new protocol wire version and does not change every package's version number. The eleven Python integration packages remain at their already-published 1.1.0 versions; the npm compatibility package @truthlocks/maip has its own version history.

Start without an account

git clone --branch v2.1.0 --depth 1 https://github.com/truthlocks/maip.git
cd maip
node examples/developer-validation/verify.mjs

Node 18+ runs five synthetic checks: a valid signed receipt and expected key/agent binding, changed action, altered signature, unrelated key, and substituted displayed identity. The Python walkthrough reproduces the same checks. No credentials or hosted writes are needed for this example.

Install a hosted integration

python -m pip install maip-ai-connectors==1.1.0
# Add the integration used by your application, for example:
python -m pip install truthlocks-langchain==1.1.0

Versioned integration guides cover Anthropic, AutoGen, Bedrock, CrewAI, LangChain, LlamaIndex, OpenAI, Delta Lake, DVC and MLflow. Register your own workspace and agent, and use matching sandbox credentials. Framework/provider credentials are separate.

Validation and downloads

• 270 tests passed across the four Python integration suites: core connectors 94, Delta Lake 74, DVC 68, MLflow 34. Tests include local HTTP fixtures and local framework/storage behavior; provider accounts were not exercised live in this release pass.
• All eleven integration README examples passed with network connections blocked (22 code blocks), including the thin provider/framework adapters.
• Node and Python offline verification walkthroughs each passed all five checks.
• The attached 22 wheel/source files are the exact already-published PyPI artifacts. Their SHA-256 values were checked against PyPI; Python wheel source matches this tag after line-ending normalization. SHA256SUMS covers the downloads.

Scope and migration

Use the maintained integrations/ clients and current hosted API documentation. The older reference/, verifier/, sdk/ and spec/ directories remain historical protocol material, not the current hosted API contract. The legacy Go modules compile but contain no test files; this release does not publish new legacy verifier binaries or claim their hosted compatibility.

A valid signature is not proof that the stated action happened. Current authorization, lifecycle state and transparency-log inclusion require separate checks. This source release is not an independent audit, production reliability claim, or completed end-to-end acceptance of all providers. Apache-2.0 applies to this public repository; the managed platform has separate terms.

MAIP v2.0.0 - 10 Algorithms + Developer Signup

Merged into @truthlocks/sdk. Install: npm install @truthlocks/sdk. 10 signing algorithms, in-integration developer signup, free tier. See README for details.

MAIP v1.0.0

Machine-Actionable Integrity Protocol (MAIP) v1.0.0

Initial release of the Machine-Actionable Integrity Protocol — an open standard for machine identity, delegation chains, and cryptographic receipts in AI/ML systems.

What's Included

Core Specification

• Machine identity registration and lifecycle management
• Trust score framework with configurable policies
• Delegation chain protocol with depth limits and scope constraints
• Cryptographic receipt format (CBOR + COSE Sign1)
• Receipt verification and chain-of-custody validation

Reference Implementation

• Go microservice with PostgreSQL storage
• REST API (v1) with OpenAPI documentation
• Auto-migration system (8 migration files)
• Health and readiness endpoints

SDKs & Integrations

• JavaScript SDK (@truthlocks/sdk-maip) — npm published
• Python SDK (truthlocks-maip) — PyPI published
• Go SDK (github.com/truthlocksinc/maip/sdk-go) — tagged
• MLflow Plugin (mlflow-maip) — tracking store integration
• Kafka Connector (kafka-maip-connector) — producer/consumer middleware

Infrastructure

• ECS Fargate task definition (256 CPU / 512 MiB)
• Cloud Map service discovery
• CloudWatch dashboard (10 widgets)
• Platform admin console (11 pages, 12 API routes)

License

Apache 2.0 — zero proprietary dependencies