agent_os_kernel 3.2.0__tar.gz → 3.2.2__tar.gz

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent_os_kernel
-Version: 3.2.0
+Version: 3.2.2
 Summary: Public Preview — A kernel architecture for governing autonomous AI agents with Nexus Trust Exchange
 Project-URL: Homepage, https://github.com/microsoft/agent-governance-toolkit
 Project-URL: Documentation, https://github.com/microsoft/agent-governance-toolkit/tree/master/docs

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/amb/amb_core/__init__.py

@@ -61,7 +61,7 @@ For more information, see: https://github.com/microsoft/agent-governance-toolkit
 
 from __future__ import annotations
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __license__ = "MIT"
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/amb/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "amb_core"
-version = "3.2.0"
+version = "3.2.2"
 description = "A lightweight, broker-agnostic message bus designed specifically for AI Agents"
 license = {text = "MIT"}
 readme = "README.md"

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/atr/atr/__init__.py

@@ -156,7 +156,7 @@ from atr.schema import (
 if TYPE_CHECKING:
     from typing import Any
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 
 __all__ = [

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/atr/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent_tool_registry"
-version = "3.2.0"
+version = "3.2.2"
 description = "A decentralized marketplace for agent capabilities - The Hands of AI Agents"
 readme = "README.md"
 requires-python = ">=3.9"

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/caas/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "caas_core"
-version = "3.2.0"
+version = "3.2.2"
 description = "A pure, logic-only library for routing context, handling RAG fallacies, and managing context windows. Layer 1 Primitive - no agent dependencies."
 readme = "README.md"
 requires-python = ">=3.8"
@@ -48,7 +48,7 @@ dependencies = [
     "tiktoken>=0.5.1,<1.0",
     "numpy>=1.26.2,<2.0",
     "scikit-learn>=1.6.1,<2.0",
-    "aiofiles>=23.2.1,<24.0",
+    "aiofiles>=23.2.2,<24.0",
 ]
 
 [project.optional-dependencies]

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/caas/src/caas/__init__.py

@@ -9,7 +9,7 @@ A pure, logic-only library for routing context and managing context windows.
 
 from typing import TYPE_CHECKING
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __email__ = "agentgovtoolkit@microsoft.com"
 __license__ = "MIT"

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/cmvk/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cmvk"
-version = "3.2.0"
+version = "3.2.2"
 description = "Mathematical drift detection library for calculating drift/hallucination scores between outputs"
 readme = "README.md"
 license = { text = "MIT" }

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/cmvk/src/cmvk/__init__.py

@@ -82,7 +82,7 @@ from __future__ import annotations
 
 from typing import Any
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __email__ = "agentgovtoolkit@microsoft.com"
 __license__ = "MIT"

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/control-plane/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent_control_plane"
-version = "3.2.0"
+version = "3.2.2"
 description = "Layer 3: The Framework - A deterministic kernel for zero-violation governance in agentic AI systems with POSIX-style signals, VFS, and kernel/user space separation"
 readme = "README.md"
 requires-python = ">=3.8"

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/control-plane/src/agent_control_plane/__init__.py

@@ -350,7 +350,7 @@ try:
 except ImportError:
     _HF_AVAILABLE = False
 
-__version__ = "3.2.0"  # Bump for kernel architecture features
+__version__ = "3.2.2"  # Bump for kernel architecture features
 __author__ = "Microsoft Corporation"
 
 __all__ = [

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/emk/emk/__init__.py

@@ -21,7 +21,7 @@ Example:
 
 from typing import TYPE_CHECKING, List
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __license__ = "MIT"
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/emk/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "emk"
-version = "3.2.0"
+version = "3.2.2"
 description = "Public Preview — Episodic Memory Kernel for AI agent experience storage"
 authors = [
     { name = "Microsoft Corporation", email = "agentgovtoolkit@microsoft.com" }

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/iatp/iatp/__init__.py

@@ -72,7 +72,7 @@ Example:
 
 from __future__ import annotations
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __license__ = "MIT"
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/iatp/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "inter_agent_trust_protocol"
-version = "3.2.0"
+version = "3.2.2"
 description = "Inter-Agent Trust Protocol (IATP) - The Envoy for AI Agents. A sidecar architecture with typed IPC pipes for preventing cascading hallucinations in autonomous agent networks."
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/mcp-kernel-server/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mcp_kernel_server"
-version = "3.2.0"
+version = "3.2.2"
 description = "MCP Server for Claude Desktop - Agent OS kernel primitives including code safety verification, CMVK multi-model review, and IATP trust"
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/mcp-kernel-server/src/mcp_kernel_server/__init__.py

@@ -18,7 +18,7 @@ from mcp_kernel_server.tools import (
 )
 from mcp_kernel_server.resources import VFSResource
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __all__ = [
     "KernelMCPServer",
     "CMVKVerifyTool",

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/mute-agent/mute_agent/__init__.py

@@ -13,7 +13,7 @@ Consolidated Stack:
 - caas: Context-as-a-Service layer
 """
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 
 # Core components
 from .core.reasoning_agent import ReasoningAgent

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/nexus/__init__.py

@@ -24,7 +24,7 @@ from .exceptions import (
     DisputeError,
 )
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __all__ = [
     # Client
     "NexusClient",

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/nexus/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nexus_trust_exchange"
-version = "3.2.0"
+version = "3.2.2"
 description = "Agent Trust Exchange - viral registry and communication board for AI agents (RESEARCH PROTOTYPE)"
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/observability/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent_os_observability"
-version = "3.2.0"
+version = "3.2.2"
 description = "Production observability for Agent OS - OpenTelemetry traces, Prometheus metrics, Grafana dashboards"
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/observability/src/agent_os_observability/__init__.py

@@ -15,7 +15,7 @@ from agent_os_observability.metrics import KernelMetrics, metrics_endpoint
 from agent_os_observability.dashboards import get_grafana_dashboard
 from agent_os_observability.server import MetricsServer, create_fastapi_router
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __all__ = [
     "KernelTracer",
     "trace_operation",

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/primitives/agent_primitives/__init__.py

@@ -7,7 +7,7 @@ This is a Layer 1 primitive package providing foundational models
 used across the Agent OS stack.
 """
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 
 from .failures import (
     FailureType,

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/primitives/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent_primitives"
-version = "3.2.0"
+version = "3.2.2"
 description = "Shared primitive data models for Agent OS - failure types, severity levels, and base structures"
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/modules/scak/agent_kernel/__init__.py

@@ -16,7 +16,7 @@ Reference Implementations:
 - memory_manager.py: Lesson lifecycle management
 """
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 
 from .kernel import SelfCorrectingAgentKernel
 from .models import (

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agent_os_kernel"
-version = "3.2.0"
+version = "3.2.2"
 description = "Public Preview — A kernel architecture for governing autonomous AI agents with Nexus Trust Exchange"
 readme = "README.md"
 license = {text = "MIT"}

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/__init__.py

@@ -46,7 +46,7 @@ Installation:
 
 from __future__ import annotations
 
-__version__ = "3.2.0"
+__version__ = "3.2.2"
 __author__ = "Microsoft Corporation"
 __license__ = "MIT"
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/agents_compat.py

@@ -278,7 +278,7 @@ def discover_agents(root_dir: str = ".") -> list[AgentConfig]:
     if agents_dir.exists():
         try:
             configs.append(parser.parse_directory(str(agents_dir)))
-        except Exception:
+        except Exception:  # noqa: S110 — best-effort config loading
             pass
 
     # Check root agents.md
@@ -288,7 +288,7 @@ def discover_agents(root_dir: str = ".") -> list[AgentConfig]:
             try:
                 config = parser._parse_agents_md(agents_md)
                 configs.append(config)
-            except Exception:
+            except Exception:  # noqa: S110 — best-effort config loading
                 pass
 
     return configs

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/cli/__init__.py

@@ -239,7 +239,7 @@ def cmd_check(args: argparse.Namespace) -> int:
     if staged and not files:
         import subprocess as _sp
         result = _sp.run(
-            ["git", "diff", "--cached", "--name-only", "--diff-filter=ACM"],
+            ["git", "diff", "--cached", "--name-only", "--diff-filter=ACM"],  # noqa: S607 — known CLI tool path
             capture_output=True, text=True,
         )
         files = [f for f in result.stdout.strip().split("\n") if f]

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/cli/mcp_scan.py

@@ -11,6 +11,7 @@ import argparse
 import json
 import logging
 import sys
+import tempfile
 from pathlib import Path
 from typing import Dict, List, Optional
 
@@ -73,7 +74,7 @@ def scan_config(config_path: Path, single_server: Optional[str] = None) -> List[
         cmd = server.get("command", "")
         if "sudo" in cmd.lower():
             findings.append(SecurityFinding(name, "critical", "Server runs with sudo privileges", "privilege"))
-        if "/tmp/" in cmd.lower():
+        if tempfile.gettempdir() in cmd.lower():
             findings.append(SecurityFinding(name, "warning", "Server binary path in /tmp is risky", "execution"))
 
         # 3. Arguments Check

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/cli/policy_checker.py

@@ -313,7 +313,7 @@ class PolicyChecker:
         """Check all staged git files for violations."""
         try:
             result = subprocess.run(
-                ['git', 'diff', '--cached', '--name-only'],
+                ['git', 'diff', '--cached', '--name-only'],  # noqa: S607 — known CLI tool path
                 capture_output=True, text=True, check=True
             )
             files = [f for f in result.stdout.strip().split('\n') if f]

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/content_governance.py

@@ -24,7 +24,7 @@ class ContentDimension(str, Enum):
 
 class QualityGate(str, Enum):
     """Content quality gate decisions."""
-    PASS = "pass"
+    PASS = "pass"  # noqa: S105 — not a password, evaluation result constant
     WARN = "warn"
     FAIL = "fail"
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/context_budget.py

@@ -301,5 +301,5 @@ class ContextScheduler:
         for handler in self._signal_handlers[signal]:
             try:
                 handler(agent_id, signal)
-            except Exception:
+            except Exception:  # noqa: S110 — best-effort signal handler invocation
                 pass

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/integrations/escalation.py

@@ -255,7 +255,7 @@ class WebhookApprovalBackend(ApprovalBackend):
                 },
                 default=str,
             ).encode()
-            req = urllib.request.Request(
+            req = urllib.request.Request(  # noqa: S310 — webhook URL from configuration
                 self._webhook_url,
                 data=payload,
                 headers={**self._headers, "Content-Type": "application/json"},

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/integrations/openai_adapter.py

@@ -115,7 +115,7 @@ def retry_with_backoff(
             if not _is_transient(exc) or attempt == max_retries:
                 raise
             last_exc = exc
-            delay = min(base_delay * (2 ** attempt) + random.uniform(0, 1), max_delay)
+            delay = min(base_delay * (2 ** attempt) + random.uniform(0, 1), max_delay)  # noqa: S311 — non-cryptographic use for request jitter
             logger.warning(
                 "Retry %d/%d for %s after %s (delay=%.2fs)",
                 attempt + 1,

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/integrations/scope_guard.py

@@ -95,8 +95,8 @@ def _get_diff_stats(
         Tuple of (file paths, total insertions, total deletions).
     """
     try:
-        result = subprocess.run(
-            ["git", "diff", "--numstat", base_branch],
+        result = subprocess.run(  # noqa: S603 — trusted subprocess in scope guard
+            ["git", "diff", "--numstat", base_branch],  # noqa: S607 — known CLI tool path
             cwd=repo_path,
             capture_output=True,
             text=True,

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/integrations/webhooks.py

@@ -90,10 +90,10 @@ class WebhookNotifier:
 
         for attempt in range(config.retry_count):
             try:
-                req = urllib.request.Request(
+                req = urllib.request.Request(  # noqa: S310 — webhook URL from configuration
                     config.url, data=payload, headers=headers, method="POST"
                 )
-                with urllib.request.urlopen(req, timeout=config.timeout) as resp:
+                with urllib.request.urlopen(req, timeout=config.timeout) as resp:  # noqa: S310 — webhook URL from configuration
                     last_status = resp.status
                     record = DeliveryRecord(
                         url=config.url,

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/mcp_security.py

@@ -608,7 +608,7 @@ class MCPSecurityScanner:
                             if keyword in decoded_lower:
                                 is_suspicious = True
                                 break
-                    except Exception:
+                    except Exception:  # noqa: S110 — best-effort base64 decode check
                         pass
                     if not is_suspicious:
                         # Long base64 in a tool description is suspicious regardless

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/policies/backends.py

@@ -172,14 +172,14 @@ class OPABackend:
         )
         url = f"{self._opa_url}/v1/data/{path_parts}"
         payload = json.dumps({"input": context}).encode()
-        req = urllib.request.Request(
+        req = urllib.request.Request(  # noqa: S310 — OPA server URL from configuration
             url,
             data=payload,
             headers={"Content-Type": "application/json"},
             method="POST",
         )
         try:
-            with urllib.request.urlopen(req, timeout=self._timeout) as resp:
+            with urllib.request.urlopen(req, timeout=self._timeout) as resp:  # noqa: S310 — OPA server URL from configuration
                 body = json.loads(resp.read().decode())
                 result_value = body.get("result", False)
                 allowed = bool(result_value)
@@ -231,7 +231,7 @@ class OPABackend:
             self._query,
         ]
         try:
-            proc = subprocess.run(
+            proc = subprocess.run(  # noqa: S603 — trusted subprocess for OPA policy engine
                 cmd,
                 input=input_json,
                 capture_output=True,
@@ -547,7 +547,7 @@ class CedarBackend:
                 cmd.extend(["--schema", self._schema_path])
 
             try:
-                proc = subprocess.run(
+                proc = subprocess.run(  # noqa: S603 — trusted subprocess for Cedar policy engine
                     cmd,
                     capture_output=True,
                     text=True,

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/prompt_injection.py

@@ -601,8 +601,8 @@ class PromptInjectionDetector:
                             f"base64_payload:{keyword}",
                         ))
                         break
-            except Exception:
-                pass  # Not valid base64 — skip
+            except Exception:  # noqa: S110 — Not valid base64, skip
+                pass
 
         return findings
 

{agent_os_kernel-3.2.0 → agent_os_kernel-3.2.2}/src/agent_os/sandbox_provider.py

@@ -87,7 +87,7 @@ class SubprocessSandboxProvider(SandboxProvider):
 
         start = time.time()
         try:
-            result = subprocess.run(
+            result = subprocess.run(  # noqa: S603 — trusted subprocess in sandbox provider
                 command,
                 capture_output=True,
                 text=True,