swt3-ai 0.7.4 → 0.7.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +18 -0
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 2804165b1d97174addcb0a5b49b9c867d04fa9589ea74c3213d0eb5fbbff1cff
|
|
4
|
+
data.tar.gz: 13bc333cb8ad09e7bb6864bf0206df7cf3711388bab8ba620fe8b78e9a606aef
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: ff807620f255a338b0f73dd31d47f96324c179d7333870a7f0dddd84e10831c8f73966bd09e4b41cd325e108a9c5eb1736194534166cc4ff71f7b081ded8422a
|
|
7
|
+
data.tar.gz: 4ee9df202beb71987f96e6e35ae63469e966c2e9f6a55faa86f0d81501ab9bf3fc3315925f16576d8560d4d0d58e3012a8d691a6021ebb6bdf907c8f5030c5e1
|
data/README.md
CHANGED
|
@@ -13,6 +13,24 @@ EU AI Act GPAI transparency obligations enforced since **August 2, 2026**. High-
|
|
|
13
13
|
|
|
14
14
|
> **Protocol Spec:** [swt3.ai/spec](https://swt3.ai/spec) | **Registry:** [swt3.ai/registry](https://swt3.ai/registry) | **Verify:** [swt3.ai/verify](https://swt3.ai/verify)
|
|
15
15
|
|
|
16
|
+
## What's New in v0.7.6
|
|
17
|
+
|
|
18
|
+
Five standards bodies converged on agent governance requirements in Q3-Q4 2026. v0.7.6 adds three procedures -- delegation chain integrity, scope boundary attestation, and agent interrupt witnessing -- and aligns crosswalks to G7 AI-SBOM, DORA, Singapore Agentic MGF, and the upcoming NIST Agent Profile.
|
|
19
|
+
|
|
20
|
+
**Why this matters for Ruby:** All three new procedures verify with the existing `mint_fingerprint` function -- zero gem changes. Ruby API backends and Rails agent orchestrators gain delegation chain and interrupt evidence with the same fingerprint output as every other SDK language. DORA crosswalk coverage (20 mappings) is relevant to Ruby fintech backends at EU-regulated institutions. G7 AI-SBOM crosswalk maps supply chain transparency requirements to existing procedures.
|
|
21
|
+
|
|
22
|
+
### 3 New Procedures
|
|
23
|
+
|
|
24
|
+
- **AI-DEL.3** (Delegation Chain Integrity): Records delegation chain completeness -- hops, orphaned references, chain status.
|
|
25
|
+
- **AI-SAND.2** (Scope Boundary Attestation): Records the operator's boundary enforcement report -- actions attempted, out-of-scope flagged, response taken.
|
|
26
|
+
- **AI-SAFE.2** (Agent Interrupt Witnessing): Records interrupt events -- trigger source, actions suspended, state preservation.
|
|
27
|
+
|
|
28
|
+
### Updated Coverage
|
|
29
|
+
|
|
30
|
+
- 289 procedures across 10 namespaces
|
|
31
|
+
- 85 regulatory frameworks, 310 compliance guides
|
|
32
|
+
- [G7 AI-SBOM Crosswalk](https://sovereign.tenova.io/guides/g7-ai-sbom-minimum-elements-crosswalk.html) | [DORA + ECB Crosswalk](https://sovereign.tenova.io/guides/dora-ecb-ai-cyber-crosswalk.html)
|
|
33
|
+
|
|
16
34
|
## What's New in v0.7.4
|
|
17
35
|
|
|
18
36
|
NVIDIA shipped OpenShell to 120+ partners. Agent containment is now infrastructure. But containment without evidence is a black box -- an auditor cannot verify that a sandbox policy was enforced last Tuesday at 14:00 UTC by looking at enforcement logs alone. v0.7.4 adds runtime containment attestation (AI-SHELL.1), model distillation provenance (AI-DIST.1), MCP elicitation detection (AI-MCP.6), and incident lifecycle chains. Four governance gaps closed in one release.
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: swt3-ai
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.7.
|
|
4
|
+
version: 0.7.6
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- TeNova Labs
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2026-
|
|
11
|
+
date: 2026-10-13 00:00:00.000000000 Z
|
|
12
12
|
dependencies: []
|
|
13
13
|
description: Mint, verify, and sign SWT3 witness anchors for AI compliance. EU AI
|
|
14
14
|
Act, NIST AI RMF, CMMC, SR 11-7. Cross-language parity with Python and TypeScript
|