@tangle-network/agent-interface 0.35.0 → 0.37.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -5,8 +5,6 @@ agents, the sidecar, and provider adapters: capabilities, agent profiles,
5
5
  message parts, and harness descriptors. This is the canonical home for those
6
6
  shapes; higher-level packages import from here rather than redefining them.
7
7
 
8
- The only runtime dependency is `zod` (used for the schema exports).
9
-
10
8
  ## Install
11
9
 
12
10
  ```bash
@@ -77,6 +75,8 @@ For evaluator-owned task images, the protected runtime creates a separate plan f
77
75
  Instruction delivery is closed to one final argv element, exact stdin bytes followed by EOF, or a fixed file path exposed through `TANGLE_CANDIDATE_TASK_PATH`.
78
76
  That plan also binds the profile target workspace and every mounted path; benchmark adapters must restore or exclude task-targeted profile paths before capturing the submitted solution patch.
79
77
  Resources are embedded, addressed through closed S3/IPFS locators, or pinned to a full GitHub commit plus content digest.
78
+ An imported resource may also retain its immutable source identity and revision, exact source digest, validated SPDX expression or content-pinned custom license, attribution and notices, and an ordered normalization/transformation digest chain.
79
+ These provenance fields are part of the candidate digest; changing or omitting an obligation produces a different candidate identity.
80
80
  Candidate-authored process configuration is explicitly public; model authorization is evaluator-mediated and secret values never belong in the bundle.
81
81
  Because prompts and inline files are arbitrary text, producers must also run their normal secret scanner before persistence.
82
82
  Candidate bundles reject unregistered backend extensions instead of accepting an untyped behavior or credential channel.