Skip to content

VEIL v1.0.0

Choose a tag to compare

View all tags
@tuzuminami tuzuminami released this 11 Jul 22:52
v1.0.0
389068c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

VEIL v1.0.0 is the first product-level release of the fail-closed policy decision point for AI agent model calls and tool execution.

Highlights

  • Typed model_call and tool_call decisions for agent, resource, classification, model, attributes, and cost.
  • Tamper-evident decision receipts with deterministic verification.
  • AuthZEN Authorization API 1.0-compatible single evaluation.
  • OIDC/JWT authentication and trusted PEP assertion scopes.
  • PostgreSQL persistence with tenant-scoped, atomic decision and evidence writes.
  • Active policy binding and rollback that cannot be bypassed by caller-selected versions.
  • Production fail-closed configuration, migrations, runbooks, package checks, dependency audit, and SBOM.

Verification

  • Main CI passed on release commit 389068c.
  • All 72 tests passed in CI, including PostgreSQL upgrade, rollback, and concurrency integration tests.
  • Production dependency audit reported no known vulnerabilities.
  • Independent Sol correctness and security reviews reported GO with no release blockers.
  • Review issues #6-#12 and #14-#19 were closed through PR #13.

The attached veil-sbom.cdx.json is the CycloneDX SBOM generated by the release commit CI.

Licensed under Apache-2.0.

Assets 4
Loading