attenu-guard 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -6,6 +6,11 @@ Versions follow semantic versioning.
 
 ## [Unreleased]
 
+## [0.9.0] - 2026-09-06
+
+### Added
+- Vendored observer-envelope corpus moved to revision `envelope_vectors_v1.2`, nineteen cases, still copied byte for byte from the Python repository (sha256 `a8be5ff764a86122ca09e94340416b7169531bf5d0cc76a0b1fc87f8272eb16e`, 197,346 bytes). The new row, `reject_duplicate_subject_defective_second`, is row 17 with one hex nibble of the SECOND envelope's signature flipped. It is the only row that separates a verifier which claims the entry as soon as `subject.seq` finds it from one which judges the envelope first: on row 17 both envelopes are sound, so both verifiers reach the duplicate rule and both reject. Here, claiming first reports `envelope_duplicate_subject` and seq 1 falls back to `process-asserted`; judging first stops at the signature, never reaches the duplicate rule, and leaves seq 1 reporting `witness-signed` on the first envelope alone. `envelope_bad_signature` at that seq is a permitted extra, not a required failure. This implementation already claims first — the duplicate rule is sited before the entry_hash comparison, canonicality, the witness check and the signature — and returns a report identical to Python's on the new bundle, so the row pins existing behaviour. No new reason name. Rows 1 to 18 are byte-identical and `version` stays `envelope_vectors_v1`. Proposed by Xuebin Ma (@XuebinMa, agent-guard) on a2aproject/A2A#1575
+
 ## [0.8.0] - 2026-09-03
 
 ### Added

package/dist/cjs/version.d.ts

@@ -6,5 +6,5 @@
  * itself imported BY index.ts, so index.ts cannot be the source: `guard.ts -> index.ts ->
  * guard.ts` would be circular. A one-constant leaf module has nothing to be circular with.
  */
-export declare const VERSION = "0.8.0";
+export declare const VERSION = "0.9.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/cjs/version.js

@@ -9,5 +9,5 @@ exports.VERSION = void 0;
  * itself imported BY index.ts, so index.ts cannot be the source: `guard.ts -> index.ts ->
  * guard.ts` would be circular. A one-constant leaf module has nothing to be circular with.
  */
-exports.VERSION = "0.8.0";
+exports.VERSION = "0.9.0";
 //# sourceMappingURL=version.js.map

package/dist/esm/version.d.ts

@@ -6,5 +6,5 @@
  * itself imported BY index.ts, so index.ts cannot be the source: `guard.ts -> index.ts ->
  * guard.ts` would be circular. A one-constant leaf module has nothing to be circular with.
  */
-export declare const VERSION = "0.8.0";
+export declare const VERSION = "0.9.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/esm/version.js

@@ -6,5 +6,5 @@
  * itself imported BY index.ts, so index.ts cannot be the source: `guard.ts -> index.ts ->
  * guard.ts` would be circular. A one-constant leaf module has nothing to be circular with.
  */
-export const VERSION = "0.8.0";
+export const VERSION = "0.9.0";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "attenu-guard",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Attenu Guard for TypeScript: enforces per-agent permissions on every tool call and sub-agent handoff — a sub-agent never holds more than its parent — and writes a hash-chained audit log you verify offline. Same bundle format as the Python library.",
   "license": "Apache-2.0",
   "author": "Attenu",