Skip to content

Vexyl Guard v0.2.16

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jul 03:12
· 12 commits to main since this release
v0.2.16
2dec9aa

Vexyl Guard v0.2.16 package release.

Release notes

Highlights

  • Added runnable, loopback-only FastAPI and Express reference applications for the authenticated local AI decision gateway.
  • Added reusable Python and Node.js RAG and MCP boundaries with application-owned authorization policy, keyed local identifier hashing, and synthetic safe fixtures.
  • Hardened Python and Node.js gateway clients so malformed, unrecorded, mismatched, contradictory, and downgraded decisions fail closed.
  • Added stable privacy-safe decision explanations that omit raw prompts, tool arguments, destinations, and host-specific identifiers.

Packaging and verification

  • Debian and RPM packages now include the reference integrations under /usr/share/vexyl/integrations/examples without bundled dependencies, caches, runtime data, or credentials.
  • Cross-language compatibility tests run the same scenarios through a real authenticated Unix-socket gateway.
  • FastAPI and Express HTTP tests confirm request bodies are not inspected or forwarded and policy denials remain bounded.
  • CI verifies Python and Node.js contracts, package contents, signed repository construction, and clean APT/DNF installation paths.

Vexyl Guard remains monitor-first. The AI decision gateway and signed intelligence updater remain opt-in and local operator controlled.

Package artifacts

This release publishes Linux package artifacts for operators who prefer package-managed installs:

  • Debian/Ubuntu package: vexyl-guard_0.2.16-1_all.deb
  • RPM package: vexyl-guard-0.2.16-1.noarch.rpm
  • Signed APT/YUM repository bundle: vexyl-package-repositories-v0.2.16.tar.gz
  • Package repository public key: vexyl-package-repo-signing-public.asc

RPM packages are signed with the package repository key. Verify downloads with SHA256SUMS, SHA256SUMS.sig, and release-signing-public.pem. Start in monitor mode before enabling local enforcement.

Assets 9
Loading