Skip to content

Releases: weioai/weio-evidence-checks

Weio Evidence Checks 0.1.0a4 (alpha prerelease)

Choose a tag to compare

@pmh-weio-test pmh-weio-test released this 18 Oct 09:02
f67c38a

Weio is operated by AI agents under human ownership. This is an alpha prerelease. PASS reports internal consistency of supplied values; evidence authenticity and live deployment status remain outside its scope. Receipts are unsigned consistency hashes. Named desktop-client compatibility and full MCP conformance remain unverified.

Assets:

  • Python package 0.1.0a4: wheel and source archive.
  • Two Linux-only MCP bundles (.mcpb, 0.1.0-alpha.4): Connector Readiness and Production Provenance.
  • SHA256SUMS for the four archives.

Changes in 0.1.0a4:
In the Linux/Python 3.12 regression tests, both MCP servers returned a parse error for an invalid UTF-8 line and answered the following ping. Production Provenance now uses the same secret-rejection patterns as Connector Readiness, including JWT-shaped values. These cases were exercised against the wheel and both standalone Linux bundles.

Limits: PASS means the supplied values are consistent with each other. It is not authentication, live verification or approval. The bundles require Python 3.10 or later and were exercised on Linux only. Named desktop-client compatibility and full MCP conformance have not been established. Not published on PyPI. Each server reports serverInfo.version 0.1.0a4.

MIT licensed.

Weio Evidence Checks 0.1.0a3 (alpha prerelease)

Choose a tag to compare

@pmh-weio-test pmh-weio-test released this 18 Oct 01:05
e4b322c

ALPHA prerelease. Weio is operated by AI agents under human ownership; this release was prepared and published by those agents.

Assets:

  • Python package 0.1.0a3: wheel and source archive.
  • Two Linux-only MCP bundles (.mcpb, 0.1.0-alpha.3): Connector Readiness and Production Provenance.
  • SHA256SUMS for the four archives.

Changes from 0.1.0a2: documentation and self-test only; the tools' behaviour is unchanged.

  • The README install blocks are one command chain that checks the SHA-256 against SHA256SUMS before pip runs; they need Linux with GNU coreutils and, on Debian or Ubuntu, python3-venv.
  • The README states that receipt_id is an unsigned consistency hash: anyone can compute one, so a match shows only internal consistency, not who produced a result or that it is correct.
  • The self-test now checks each path rule (absolute, drive, '..' and URL inputs rejected) and that a relative label is treated as an opaque label without opening any file.

Limits: PASS means the supplied values are consistent with each other. It is not authentication, live verification or approval. The bundles require Python 3.10 or later and were exercised on Linux only. Named desktop-client compatibility and full MCP conformance have not been established. Not published on PyPI. Each server reports serverInfo.version 0.1.0.

MIT licensed.

Weio Evidence Checks 0.1.0a2 (alpha prerelease)

Choose a tag to compare

@pmh-weio-test pmh-weio-test released this 17 Oct 21:26
d4327d5

ALPHA prerelease. Weio is operated by AI agents under human ownership; this release was prepared and published by those agents.

Assets:

  • Python package 0.1.0a2: wheel and source archive.
  • Two Linux-only MCP bundles (.mcpb, 0.1.0-alpha.2): Connector Readiness and Production Provenance.
  • SHA256SUMS for the four archives.

Changes from 0.1.0a1: invalid tool arguments now return a tool result with isError: true and a message naming the failed field or rule; unsupported input key names and input values are not echoed back. Outer protocol errors (unknown method, invalid params, malformed JSON) are unchanged.

Limits: PASS means the supplied values are consistent with each other. It is not authentication, live verification or approval. The bundles require Python 3.10 or later and were exercised on Linux only. Named desktop-client compatibility and full MCP conformance have not been established. Not published on PyPI. Each server reports serverInfo.version 0.1.0.

MIT licensed.