@coderifts/agent-guard 17.3.1 → 17.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
|
|
32
32
|
# ── THE RECEIPT-VERIFIER CORE IS PINNED TO A RELEASED TAG ───────────────────────────────────
|
|
33
33
|
#
|
|
34
|
-
# The shared verification core here comes from receipt-verifier **v1.0.
|
|
34
|
+
# The shared verification core here comes from receipt-verifier **v1.0.1**, peeled commit
|
|
35
35
|
# 51a8224439959a5b46c0b09e9a2cd67117f05d56.
|
|
36
36
|
#
|
|
37
37
|
# It was pinned to a WORKING TREE and to per-file commits. Both are honest about where the bytes
|
|
@@ -43,7 +43,26 @@
|
|
|
43
43
|
# The hash lines below are UNCHANGED by the re-pin. Where a file already matched the tag this is
|
|
44
44
|
# prose only; where it did not, it was re-copied from the tag and that is recorded below.
|
|
45
45
|
#
|
|
46
|
-
#
|
|
46
|
+
#
|
|
47
|
+
# ── AND THE TAG IS SIGNED, WHICH IS THE PART A STRANGER CAN CHECK ───────────────────────────
|
|
48
|
+
#
|
|
49
|
+
# v1.0.0 was an unsigned tag: a name anyone can check out, and also a name anyone with push access
|
|
50
|
+
# can move. v1.0.1 is annotated and SSH-signed, so the pin now resolves to an identity and not
|
|
51
|
+
# only to bytes.
|
|
52
|
+
#
|
|
53
|
+
# tag object 06dd74f36f60e0b4d22dd4667732fe0a27575287
|
|
54
|
+
# peeled commit 51a8224439959a5b46c0b09e9a2cd67117f05d56
|
|
55
|
+
# signer zsobpeter@gmail.com
|
|
56
|
+
# fingerprint SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
57
|
+
#
|
|
58
|
+
# Verify it yourself, in a checkout of receipt-verifier:
|
|
59
|
+
#
|
|
60
|
+
# git tag -v v1.0.1
|
|
61
|
+
# -> Good "git" signature for zsobpeter@gmail.com with ED25519 key SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
62
|
+
#
|
|
63
|
+
# The peeled commit is UNCHANGED from v1.0.0 — the core is byte-identical and this re-pin moves no
|
|
64
|
+
# hash line. What it adds is who stands behind the bytes.
|
|
65
|
+
# source_commit: 51a8224439959a5b46c0b09e9a2cd67117f05d56 (receipt-verifier v1.0.1, signed)
|
|
47
66
|
#
|
|
48
67
|
|
|
49
68
|
verify.js 348d3f851cd79bf63298b51da422d11be980820576ab0bf0a2990b9f007d6249
|
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
|
|
32
32
|
# ── THE RECEIPT-VERIFIER CORE IS PINNED TO A RELEASED TAG ───────────────────────────────────
|
|
33
33
|
#
|
|
34
|
-
# The shared verification core here comes from receipt-verifier **v1.0.
|
|
34
|
+
# The shared verification core here comes from receipt-verifier **v1.0.1**, peeled commit
|
|
35
35
|
# 51a8224439959a5b46c0b09e9a2cd67117f05d56.
|
|
36
36
|
#
|
|
37
37
|
# It was pinned to a WORKING TREE and to per-file commits. Both are honest about where the bytes
|
|
@@ -43,7 +43,26 @@
|
|
|
43
43
|
# The hash lines below are UNCHANGED by the re-pin. Where a file already matched the tag this is
|
|
44
44
|
# prose only; where it did not, it was re-copied from the tag and that is recorded below.
|
|
45
45
|
#
|
|
46
|
-
#
|
|
46
|
+
#
|
|
47
|
+
# ── AND THE TAG IS SIGNED, WHICH IS THE PART A STRANGER CAN CHECK ───────────────────────────
|
|
48
|
+
#
|
|
49
|
+
# v1.0.0 was an unsigned tag: a name anyone can check out, and also a name anyone with push access
|
|
50
|
+
# can move. v1.0.1 is annotated and SSH-signed, so the pin now resolves to an identity and not
|
|
51
|
+
# only to bytes.
|
|
52
|
+
#
|
|
53
|
+
# tag object 06dd74f36f60e0b4d22dd4667732fe0a27575287
|
|
54
|
+
# peeled commit 51a8224439959a5b46c0b09e9a2cd67117f05d56
|
|
55
|
+
# signer zsobpeter@gmail.com
|
|
56
|
+
# fingerprint SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
57
|
+
#
|
|
58
|
+
# Verify it yourself, in a checkout of receipt-verifier:
|
|
59
|
+
#
|
|
60
|
+
# git tag -v v1.0.1
|
|
61
|
+
# -> Good "git" signature for zsobpeter@gmail.com with ED25519 key SHA256:7yRXTm9zKGicfFpzL+7lpwFoPaoSwxAJlabB3jwxw2Y
|
|
62
|
+
#
|
|
63
|
+
# The peeled commit is UNCHANGED from v1.0.0 — the core is byte-identical and this re-pin moves no
|
|
64
|
+
# hash line. What it adds is who stands behind the bytes.
|
|
65
|
+
# source_commit: 51a8224439959a5b46c0b09e9a2cd67117f05d56 (receipt-verifier v1.0.1, signed)
|
|
47
66
|
#
|
|
48
67
|
|
|
49
68
|
verify.js 348d3f851cd79bf63298b51da422d11be980820576ab0bf0a2990b9f007d6249
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@coderifts/agent-guard",
|
|
3
|
-
"version": "17.3.
|
|
3
|
+
"version": "17.3.2",
|
|
4
4
|
"description": "Fail-closed guard for AI agent tool calls — preflight contract changes before they execute. Security core frozen (agent-guard-api v1.0); v1.1 adds client-side enforcement: receipt→envelope binding, decision↔action reconciliation, safe_for_agent + degraded fail-closed, and enforced⟺executed (P0 client-enforcement pack).",
|
|
5
5
|
"main": "./dist/cjs/index.js",
|
|
6
6
|
"module": "./dist/esm/index.js",
|