Vexyl Guard v0.2.17

Vexyl Guard v0.2.17 package release.

Release notes

Vexyl Guard 0.2.17 Release Notes

New Features & Enhancements

• Stateful Attack Chain Detection Support in Evaluation Runner: Added multi-event sequence support to the AI runtime evaluation runner (tests/run_ai_runtime_evaluation.py). The runner now supports a prior_events array for test cases, scoring and recording prior events into the per-case temporary database before scoring the final event. This enables deterministic testing of correlation and stateful attack chain patterns.
• Expanded Defensive AI Runtime Evaluation Corpus: Added 4 new synthetic cases to the evaluation fixture (tests/fixtures/evaluation/ai-runtime-evaluation.json):
  • 2 correlation sequence cases testing stateful attack chains (seq-external-rag-then-tool-call and seq-sensitive-read-then-external-write).
  • 2 benign near-miss cases testing false positive resilience (benign-near-miss-security-tutorial and benign-near-miss-sandbox-tool-call).
  • Updated regression thresholds to match the new 44-case corpus (28 TP, 16 TN, 100% accuracy).
• SOC / Security Operator Runbooks: Created comprehensive operator action runbooks at docs/security/operator-runbooks.md. The runbooks cover day-to-day event review, blocking and quarantine procedures, intelligence lifecycle management, gateway service operations, and incident response decision matrices.

Bug Fixes

• Flaky Test Resolution: Fixed a flaky signature tampering assertion in test_invalid_expired_and_revoked_bundles_are_rejected (tests/test_intel_updates.py) that would occasionally pass due to a ~1.6% chance of replacing the base64url signature's first character with the exact same character. The test now guarantees a mutated character.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.17-1_all.deb
• RPM package: vexyl-guard-0.2.17-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.17.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.16

Vexyl Guard v0.2.16 package release.

Release notes

Highlights

• Added runnable, loopback-only FastAPI and Express reference applications for the authenticated local AI decision gateway.
• Added reusable Python and Node.js RAG and MCP boundaries with application-owned authorization policy, keyed local identifier hashing, and synthetic safe fixtures.
• Hardened Python and Node.js gateway clients so malformed, unrecorded, mismatched, contradictory, and downgraded decisions fail closed.
• Added stable privacy-safe decision explanations that omit raw prompts, tool arguments, destinations, and host-specific identifiers.

Packaging and verification

• Debian and RPM packages now include the reference integrations under /usr/share/vexyl/integrations/examples without bundled dependencies, caches, runtime data, or credentials.
• Cross-language compatibility tests run the same scenarios through a real authenticated Unix-socket gateway.
• FastAPI and Express HTTP tests confirm request bodies are not inspected or forwarded and policy denials remain bounded.
• CI verifies Python and Node.js contracts, package contents, signed repository construction, and clean APT/DNF installation paths.

Vexyl Guard remains monitor-first. The AI decision gateway and signed intelligence updater remain opt-in and local operator controlled.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.16-1_all.deb
• RPM package: vexyl-guard-0.2.16-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.16.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.15

Vexyl Guard v0.2.15 package release.

Release notes

Vexyl Guard v0.2.15 adds an authenticated, signed update channel for defensive AI threat intelligence.

• Verifies RSA signatures, key revocation, freshness, record integrity, and monotonic bundle versions before activation.
• Activates verified intelligence atomically while preserving redacted runtime history.
• Adds last-known-good status, explicit rollback, and corruption recovery controls.
• Installs a hardened, opt-in systemd update timer without creating or exposing credentials.
• Keeps the public offline baseline available when hosted updates are not enabled.
• Adds package, CLI, recovery, permission, and production endpoint contract coverage.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.15-1_all.deb
• RPM package: vexyl-guard-0.2.15-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.15.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.14

Vexyl Guard v0.2.14 package release.

Release notes

Vexyl Guard v0.2.14 adds application framework guards for the authenticated local AI decision gateway.

• Adds dependency-free ASGI/FastAPI and Express request-scoped policy guards that do not inspect request bodies.
• Adds MCP tool and model gateway authorization helpers with fail-closed decisions.
• Adds shared Python and Node.js conformance checks against the real local gateway.
• Packages integration documentation and middleware for APT and DNF installs.

The AI gateway remains disabled by default until an operator explicitly enables it.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.14-1_all.deb
• RPM package: vexyl-guard-0.2.14-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.14.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.13

Vexyl Guard v0.2.13 package release.

Release notes

Vexyl Guard v0.2.13 adds an opt-in authenticated local AI decision gateway.

Highlights:

• Scores redacted AI runtime events synchronously over a Unix socket, with no TCP listener.
• Adds strict event validation, request limits, local bearer authentication, fail-closed policy codes, and stateful correlation.
• Includes Python adapters and a dependency-free Node.js client for RAG, memory, agent plans, MCP/tool calls, model APIs, and AI supply-chain changes.
• Packages a hardened, disabled-by-default systemd service and a locally generated token for Debian and RPM hosts.
• Expands CI and package smoke tests across authentication, privacy boundaries, signed APT/DNF installs, and clean shutdown.

Start the gateway only on hosts that need this integration:

sudo systemctl enable --now vexyl-ai-gateway
sudo vexyl gateway health

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.13-1_all.deb
• RPM package: vexyl-guard-0.2.13-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.13.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.12

Vexyl Guard v0.2.12 package release.

Release notes

Vexyl Guard v0.2.12 adds stateful runtime defense for AI applications and agent systems.

• Correlate redacted runtime events across external content, persistent memory, tool use, sensitive-data egress, model identity, and bounded resource use.
• Require independent task, user-scope, and tool-policy authorization before tool actions can proceed.
• Cover OWASP Top 10 for Agentic Applications 2026 ASI01 through ASI10 in the local defensive taxonomy.
• Keep raw prompts, tool arguments, destinations, tenant identifiers, and arbitrary context out of runtime history; retention defaults to 24 hours with status and purge controls.
• Add process-gate exit codes that distinguish approval-required decisions from hard blocks.
• Add Python quality checks and current Node 24 GitHub Actions runtimes.

Start with redacted application events and preserve monitor-first deployment practices.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.12-1_all.deb
• RPM package: vexyl-guard-0.2.12-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.12.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.11

Vexyl Guard v0.2.11 package release.

Release notes

Vexyl Guard v0.2.11 improves configuration safety for monitor-first Linux deployments.

• Add IPv4 and IPv6 CIDR support to trusted-source allowlists.
• Add vexyl-guard validate-config and run it automatically before the systemd service starts.
• Reject invalid configuration with actionable errors instead of entering a restart loop.
• Strengthen public AI-runtime contracts for untrusted content, tool scope, human approval, and redaction.
• Include required OpenSSL package dependencies for verification workflows.

Start in monitor mode, validate configuration, and keep provider-console access available during evaluation.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.11-1_all.deb
• RPM package: vexyl-guard-0.2.11-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.11.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.10

Vexyl Guard v0.2.10 package release.

Release notes

Adds a redacted support-report command for safer public preview install feedback.

Operators can run sudo vexyl-guard support-report to share OS, service, policy, release, log-source, and local counter summaries without posting raw logs, tokens, API URLs, hostnames, IP addresses, usernames, or custom local paths.

Updates the public install feedback form to include the redacted support report.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.10-1_all.deb
• RPM package: vexyl-guard-0.2.10-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.10.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.9

Vexyl Guard v0.2.9 package release.

Release notes

Adds package install status reporting for APT and DNF installs.

Package installs now send minimal install-status events so broken package paths are visible in the growth console. Operators can disable reporting with VEXYL_INSTALL_REPORT=off.

Also tightens package install canaries to verify the reporting helper is present without sending canary install events.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.9-1_all.deb
• RPM package: vexyl-guard-0.2.9-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.9.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Vexyl Guard v0.2.8

Vexyl Guard v0.2.8 package release.

This release publishes Linux package artifacts for operators who prefer package-managed installs:

• Debian/Ubuntu package: vexyl-guard_0.2.8-1_all.deb
• RPM package: vexyl-guard-0.2.8-1.noarch.rpm
• Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.8.tar.gz
• Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.