agent_os_kernel 3.5.0__tar.gz → 3.6.0__tar.gz

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/.gitignore

@@ -465,3 +465,4 @@ _site/
 
 # Code Security Assessment artifacts
 .security-assessment/
+*.tgz

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent_os_kernel
-Version: 3.5.0
+Version: 3.6.0
 Summary: Public Preview — A kernel architecture for governing autonomous AI agents with Nexus Trust Exchange
 Project-URL: Homepage, https://github.com/microsoft/agent-governance-toolkit
 Project-URL: Documentation, https://github.com/microsoft/agent-governance-toolkit/tree/master/docs
@@ -25,7 +25,6 @@ Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
 Requires-Python: >=3.9
-Requires-Dist: agentmesh-primitives<4.0,>=3.2.0
 Requires-Dist: pydantic<3.0,>=2.4.0
 Requires-Dist: rich<16.0,>=13.0.0
 Provides-Extra: amb
@@ -36,7 +35,7 @@ Requires-Dist: numpy<3.0,>=1.20.0; extra == 'cmvk'
 Provides-Extra: dev
 Requires-Dist: aiohttp<4.0,>=3.13.4; extra == 'dev'
 Requires-Dist: anyio<5.0,>=3.0.0; extra == 'dev'
-Requires-Dist: cryptography<48.0,>=46.0.7; extra == 'dev'
+Requires-Dist: cryptography<49.0,>=46.0.7; extra == 'dev'
 Requires-Dist: eval-type-backport>=0.2.0; (python_version < '3.10') and extra == 'dev'
 Requires-Dist: fastapi<1.0,>=0.115.0; extra == 'dev'
 Requires-Dist: httpx<1.0,>=0.27.0; extra == 'dev'
@@ -57,7 +56,7 @@ Provides-Extra: full
 Requires-Dist: aiofiles<26.0,>=23.0.0; extra == 'full'
 Requires-Dist: aiohttp<4.0,>=3.13.4; extra == 'full'
 Requires-Dist: anyio<5.0,>=3.0.0; extra == 'full'
-Requires-Dist: cryptography<48.0,>=46.0.7; extra == 'full'
+Requires-Dist: cryptography<49.0,>=46.0.7; extra == 'full'
 Requires-Dist: fastapi<1.0,>=0.115.0; extra == 'full'
 Requires-Dist: httpx<1.0,>=0.27.0; extra == 'full'
 Requires-Dist: mcp<2.0,>=1.0.0; extra == 'full'
@@ -72,7 +71,7 @@ Requires-Dist: uvicorn<1.0,>=0.27.0; extra == 'full'
 Provides-Extra: hypervisor
 Requires-Dist: agentmesh-runtime<2.0,>=1.0.0; extra == 'hypervisor'
 Provides-Extra: iatp
-Requires-Dist: cryptography<48.0,>=46.0.7; extra == 'iatp'
+Requires-Dist: cryptography<49.0,>=46.0.7; extra == 'iatp'
 Requires-Dist: fastapi<1.0,>=0.115.0; extra == 'iatp'
 Requires-Dist: httpx<1.0,>=0.27.0; extra == 'iatp'
 Requires-Dist: pynacl<2.0,>=1.5.0; extra == 'iatp'
@@ -81,7 +80,7 @@ Provides-Extra: mcp
 Requires-Dist: mcp<2.0,>=1.0.0; extra == 'mcp'
 Provides-Extra: nexus
 Requires-Dist: aiohttp<4.0,>=3.13.4; extra == 'nexus'
-Requires-Dist: cryptography<48.0,>=46.0.7; extra == 'nexus'
+Requires-Dist: cryptography<49.0,>=46.0.7; extra == 'nexus'
 Requires-Dist: fastapi<1.0,>=0.115.0; extra == 'nexus'
 Requires-Dist: httpx<1.0,>=0.27.0; extra == 'nexus'
 Requires-Dist: pynacl<2.0,>=1.5.0; extra == 'nexus'

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/docs/index.md

@@ -30,6 +30,7 @@ Learn by doing with our Jupyter notebooks:
 
 - [Using Message Bus Adapters](tutorials/message-bus-adapters.md) - Connect agents with Redis, Kafka, NATS
 - [Creating Custom Tools](tutorials/custom-tools.md) - Build safe tools for agents
+- [Intent-Based Authorization](tutorials/48-intent-based-authorization.md) - Declare, approve, and verify agent actions with drift detection
 
 ### 🏗️ Architecture
 

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/docs/tutorials/30-minute-deep-dive.md

@@ -278,7 +278,7 @@ else:
     print(f"Disagreement detected: {result.drift_scores}")
 ```
 
-**See:** [Jupyter Notebook: Verification](../../notebooks/04-verification.ipynb)
+**See:** [Jupyter Notebook: Verification](../../notebooks/04-cross-model-verification.ipynb)
 
 ---
 

agent_os_kernel-3.6.0/docs/tutorials/48-intent-based-authorization.md

@@ -0,0 +1,353 @@
+# Tutorial 48: Intent-Based Authorization
+
+> **Declare what your agent will do before it does it, and automatically detect when it strays.**
+
+Intent-Based Authorization is a governance layer that sits between an agent and its actions. Before execution begins, the agent declares a *plan* (`declare_intent`). A reviewer or system approves it (`approve_intent`). Each action is checked against that plan (`check_action`). When the session ends, the system compares planned vs. actual (`verify_intent`) and surfaces any drift.
+
+This tutorial covers:
+
+1. [The core lifecycle](#1-core-lifecycle-declare-approve-execute-verify)
+2. [Drift detection: SOFT_BLOCK vs HARD_BLOCK](#2-drift-detection-policies)
+3. [Child intent scope narrowing for multi-agent systems](#3-child-intent-scope-narrowing)
+4. [Running the complete demo](#4-running-the-demo)
+
+---
+
+## Prerequisites
+
+```bash
+pip install agent-os-kernel
+```
+
+Python 3.9+ required.
+
+---
+
+## 1. Core Lifecycle: Declare, Approve, Execute, Verify
+
+### Step 1: Declare Intent
+
+The agent announces what it plans to do. Nothing runs yet.
+
+```python
+import asyncio
+from agent_os.intent import DriftPolicy, IntentAction, IntentManager
+from agent_os.stateless import MemoryBackend
+
+async def main():
+    manager = IntentManager(backend=MemoryBackend())
+
+    intent = await manager.declare_intent(
+        agent_id="payment-agent",
+        planned_actions=[
+            IntentAction(action="read_balance"),
+            IntentAction(action="transfer_funds", params_schema={"max_amount": 1000}),
+        ],
+        drift_policy=DriftPolicy.SOFT_BLOCK,
+        ttl_seconds=300,
+    )
+
+    print(f"Intent ID: {intent.intent_id}")
+    print(f"State:     {intent.state.value}")        # declared
+    print(f"Actions:   {intent.planned_action_names}")
+```
+
+`IntentAction` accepts an optional `params_schema`, a dict of parameter constraints the action must satisfy. `ttl_seconds` sets an expiry; the intent is rejected if approval or execution happens after it expires.
+
+### Step 2: Approve Intent
+
+Approval moves the intent from `declared` to `approved`, signalling that a human reviewer or automated policy gate has signed off.
+
+```python
+    intent = await manager.approve_intent(intent.intent_id)
+    print(f"State: {intent.state.value}")   # approved
+```
+
+In production this step would be wired to a human-in-the-loop approval queue or a policy engine.
+
+### Step 3: Check Actions at Runtime
+
+Before each action executes, call `check_action`. The manager records the result and transitions the intent to `executing` on the first call.
+
+```python
+    # Planned action - allowed
+    check = await manager.check_action(
+        intent.intent_id,
+        "read_balance",
+        {},
+        "payment-agent",
+        "req-001",
+    )
+    print(f"read_balance:   {'ALLOWED' if check.allowed else 'BLOCKED'}")
+    print(f"  was_planned:  {check.was_planned}")
+
+    # Unplanned action - drift detected
+    check = await manager.check_action(
+        intent.intent_id,
+        "delete_account",
+        {},
+        "payment-agent",
+        "req-002",
+    )
+    print(f"delete_account: {'ALLOWED' if check.allowed else 'BLOCKED'}")
+    if check.drift_policy_applied:
+        print(f"  policy:  {check.drift_policy_applied.value}")
+        print(f"  penalty: -{check.trust_penalty} trust points")
+```
+
+`IntentCheckResult` fields:
+
+| Field | Type | Description |
+|---|---|---|
+| `allowed` | `bool` | Whether the action may proceed |
+| `was_planned` | `bool` | Whether the action was in the declared plan |
+| `drift_policy_applied` | `DriftPolicy \| None` | Policy triggered on drift |
+| `trust_penalty` | `float` | Trust score deduction (default 50.0) |
+| `reason` | `str` | Human-readable explanation |
+
+### Step 4: Verify Intent
+
+`verify_intent` closes the session and produces a structured audit report comparing planned vs. actual.
+
+```python
+    verification = await manager.verify_intent(intent.intent_id)
+
+    print(f"Final state:   {verification.state.value}")    # violated or completed
+    print(f"Planned:       {verification.planned_actions}")
+    print(f"Executed:      {verification.executed_actions}")
+    print(f"Unplanned:     {verification.unplanned_actions}")
+    print(f"Missed:        {verification.missed_actions}")
+    print(f"Drift events:  {verification.total_drift_events}")
+    print(f"Trust penalty: {verification.total_trust_penalty}")
+
+asyncio.run(main())
+```
+
+The intent transitions to `completed` when there are no drift events, or `violated` when drift was detected.
+
+`IntentVerification` fields:
+
+| Field | Description |
+|---|---|
+| `planned_actions` | Actions declared before execution |
+| `executed_actions` | Actions that ran and succeeded |
+| `unplanned_actions` | Executed actions not in the plan |
+| `missed_actions` | Planned actions that never ran |
+| `total_drift_events` | Count of drift detections |
+| `total_trust_penalty` | Cumulative trust score deducted |
+| `duration_seconds` | Seconds from approval to verification |
+
+---
+
+## 2. Drift Detection Policies
+
+There are three `DriftPolicy` values. Set the policy at `declare_intent` time.
+
+### SOFT_BLOCK (default)
+
+Unplanned actions are *allowed* but flagged. A trust penalty is applied and a `DriftEvent` is recorded. Use this when continuity matters more than strict enforcement.
+
+```python
+intent = await manager.declare_intent(
+    agent_id="payment-agent",
+    planned_actions=[IntentAction(action="read_balance")],
+    drift_policy=DriftPolicy.SOFT_BLOCK,
+)
+intent = await manager.approve_intent(intent.intent_id)
+
+check = await manager.check_action(
+    intent.intent_id, "send_notification", {}, "payment-agent", "req-003"
+)
+print(check.allowed)               # True - action proceeds
+print(check.trust_penalty)         # 50.0 - penalty recorded
+```
+
+### HARD_BLOCK
+
+Unplanned actions are *denied outright*. Use this for compliance-critical agents where no deviation is acceptable.
+
+```python
+from agent_os.intent import DriftPolicy, IntentAction, IntentManager
+from agent_os.stateless import MemoryBackend
+
+async def hard_block_demo():
+    manager = IntentManager(backend=MemoryBackend())
+
+    intent = await manager.declare_intent(
+        agent_id="compliance-agent",
+        planned_actions=[IntentAction(action="generate_report")],
+        drift_policy=DriftPolicy.HARD_BLOCK,
+    )
+    intent = await manager.approve_intent(intent.intent_id)
+
+    # Planned - allowed
+    check = await manager.check_action(
+        intent.intent_id, "generate_report", {}, "compliance-agent", "req-010"
+    )
+    print(f"generate_report: {'ALLOWED' if check.allowed else 'BLOCKED'}")  # ALLOWED
+
+    # Unplanned - blocked
+    check = await manager.check_action(
+        intent.intent_id, "send_email", {}, "compliance-agent", "req-011"
+    )
+    print(f"send_email:      {'ALLOWED' if check.allowed else 'BLOCKED'}")  # BLOCKED
+```
+
+### RE_DECLARE
+
+Unplanned actions are denied, and the agent must declare a new intent before continuing. Use this when scope changes require a full re-review cycle.
+
+```python
+intent = await manager.declare_intent(
+    agent_id="my-agent",
+    planned_actions=[IntentAction(action="read_config")],
+    drift_policy=DriftPolicy.RE_DECLARE,
+)
+```
+
+---
+
+## 3. Child Intent Scope Narrowing
+
+In multi-agent orchestration, an orchestrator declares a broad intent and delegates sub-tasks to specialist agents. Child intents must be a *subset* of the parent's planned actions; they cannot expand scope.
+
+```python
+from agent_os.intent import IntentAction, IntentManager, IntentScopeError
+from agent_os.stateless import MemoryBackend
+
+async def multi_agent_demo():
+    manager = IntentManager(backend=MemoryBackend())
+
+    # Orchestrator declares the full scope
+    parent = await manager.declare_intent(
+        agent_id="orchestrator",
+        planned_actions=[
+            IntentAction(action="read_balance"),
+            IntentAction(action="transfer_funds"),
+            IntentAction(action="generate_report"),
+        ],
+    )
+    parent = await manager.approve_intent(parent.intent_id)
+    print(f"Parent scope: {parent.planned_action_names}")
+
+    # Sub-agent gets only the actions it needs
+    child = await manager.declare_intent(
+        agent_id="report-agent",
+        planned_actions=[IntentAction(action="generate_report")],
+        parent_intent_id=parent.intent_id,
+    )
+    print(f"Child scope:  {child.planned_action_names}")   # {'generate_report'}
+
+    # A rogue agent trying to exceed parent scope is rejected
+    try:
+        await manager.declare_intent(
+            agent_id="rogue-agent",
+            planned_actions=[IntentAction(action="delete_everything")],
+            parent_intent_id=parent.intent_id,
+        )
+    except IntentScopeError as e:
+        print(f"Scope violation blocked: {e}")
+```
+
+`IntentScopeError` is raised at `declare_intent` time, before the intent is stored, so there is no window in which the child intent exists with excess scope.
+
+You can also use the convenience method `create_child_intent`, which inherits the parent's drift policy by default:
+
+```python
+child = await manager.create_child_intent(
+    parent_intent_id=parent.intent_id,
+    agent_id="report-agent",
+    planned_actions=[IntentAction(action="generate_report")],
+)
+```
+
+---
+
+## 4. Running the Demo
+
+A complete, runnable script is included in the repository:
+
+```bash
+pip install agent-os-kernel
+python examples/intent-auth/intent_auth_demo.py
+```
+
+Expected output:
+
+```
+============================================================
+  Intent-Based Authorization Demo
+============================================================
+
+--- Step 1: Declare Intent ---
+  Intent ID:  intent:...
+  State:      declared
+  Actions:    {'read_balance', 'transfer_funds'}
+
+--- Step 2: Approve Intent ---
+  State:      approved
+
+--- Step 3: Execute Actions ---
+  read_balance:   ALLOWED (planned)
+  delete_account: ALLOWED (DRIFT!)
+    policy:  soft_block
+    penalty: -50.0 trust points
+
+--- Step 4: Verify Intent ---
+  Final state:   violated
+  Planned:       ['read_balance', 'transfer_funds']
+  Executed:      ['read_balance', 'delete_account']
+  Unplanned:     ['delete_account']
+  Missed:        ['transfer_funds']
+  Drift events:  1
+  Trust penalty: 50.0
+...
+```
+
+---
+
+## Intent Lifecycle States
+
+```
+DECLARED --approve--> APPROVED --first action--> EXECUTING
+                                                     |
+                                    +----------------+
+                                    v                v
+                               COMPLETED         VIOLATED
+                            (no drift)         (drift found)
+
+Any state --ttl expired--> EXPIRED
+```
+
+| State | Description |
+|---|---|
+| `declared` | Intent created, awaiting approval |
+| `approved` | Approved, ready for execution |
+| `executing` | First `check_action` call received |
+| `completed` | `verify_intent` called, no drift |
+| `violated` | `verify_intent` called, drift detected |
+| `expired` | TTL elapsed before completion |
+
+---
+
+## Key Classes
+
+| Class / Function | Purpose |
+|---|---|
+| `IntentManager(backend)` | Main entry point; all methods are async |
+| `IntentAction(action, params_schema)` | Declares one planned action |
+| `DriftPolicy` | Enum: `SOFT_BLOCK`, `HARD_BLOCK`, `RE_DECLARE` |
+| `IntentCheckResult` | Return value of `check_action` |
+| `IntentVerification` | Return value of `verify_intent` |
+| `IntentScopeError` | Raised when child intent exceeds parent scope |
+| `MemoryBackend` | In-process backend for development and testing |
+
+For production deployments, replace `MemoryBackend` with `RedisBackend` to share intent state across multiple agent replicas.
+
+---
+
+## Next Steps
+
+- **[5-Minute Quickstart](5-minute-quickstart.md)** - set up your first governed agent
+- **[30-Minute Deep Dive](30-minute-deep-dive.md)** - trust scoring, policy engines, and receipts
+- **[Custom Tools Tutorial](custom-tools.md)** - register tools that are checked against intent at runtime

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/docs/tutorials/5-minute-quickstart.md

@@ -101,17 +101,20 @@ Analysis complete: Summarize Q4 sales data
 
 ## Add an LLM (Optional)
 
+> **Requires:** `pip install openai` and the `OPENAI_API_KEY` environment variable set.
+
 ```python
+import os
 from agent_os import KernelSpace
 from openai import OpenAI
 
 kernel = KernelSpace(policy="strict")
-client = OpenAI()
+client = OpenAI(api_key=os.environ["OPENAI_API_KEY"])
 
 @kernel.register
 async def smart_agent(task: str):
     response = client.chat.completions.create(
-        model="gpt-4",
+        model=os.environ.get("OPENAI_MODEL", "gpt-4"),
         messages=[{"role": "user", "content": task}]
     )
     return response.choices[0].message.content
@@ -154,7 +157,7 @@ The kernel blocked the action **before** it executed.
 |------|----------|-------------------|
 | 10 min | [30-Minute Deep Dive](30-minute-deep-dive.md) | Policies, signals, VFS |
 | 15 min | [Episodic Memory](../../notebooks/02-episodic-memory-demo.ipynb) | Agent memory that persists |
-| 15 min | [Verification](../../notebooks/04-verification.ipynb) | Detect hallucinations |
+| 15 min | [Verification](../../notebooks/04-cross-model-verification.ipynb) | Detect hallucinations |
 | 20 min | [Time-Travel Debugging](../../notebooks/03-time-travel-debugging.ipynb) | Replay and debug decisions |
 
 ---

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/amb/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_message_bus"
-version = "3.5.0"
+version = "3.6.0"
 description = "A lightweight, broker-agnostic message bus designed specifically for AI Agents"
 license = {text = "MIT"}
 readme = "README.md"

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/atr/atr/registry.py

@@ -59,6 +59,13 @@ def parse_version(version: str) -> Tuple[int, int, int]:
     return (0, 0, 0)
 
 
+_PROTOCOL_PREFIXES = (
+    "git+", "file:", "http:", "https:", "ssh:", "npm:", "workspace:",
+)
+
+_NON_SEMVER_WILDCARDS = {"latest", "next", "canary", "nightly"}
+
+
 def version_matches(version: str, constraint: str) -> bool:
     """Check if a version matches a constraint.
 
@@ -72,6 +79,9 @@ def version_matches(version: str, constraint: str) -> bool:
     - "~1.0.0" - approximately (same major.minor)
     - "*" - any version
 
+    Protocol specifiers (git+, file:, http:, etc.) and non-semver
+    tags (latest, next, canary) are rejected as non-matching.
+
     Args:
         version: The version to check.
         constraint: The version constraint.
@@ -82,6 +92,13 @@ def version_matches(version: str, constraint: str) -> bool:
     if constraint == "*" or constraint == "":
         return True
 
+    # Reject protocol specifiers and non-semver tags
+    constraint_lower = constraint.lower()
+    if any(constraint_lower.startswith(p) for p in _PROTOCOL_PREFIXES):
+        return False
+    if constraint_lower in _NON_SEMVER_WILDCARDS:
+        return False
+
     v = parse_version(version)
 
     # Handle comparison operators

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/atr/atr/tools/safe/text_tool.py

@@ -428,8 +428,8 @@ class TextTool:
         """
         try:
             algorithms = {
-                "md5": hashlib.md5,
-                "sha1": hashlib.sha1,
+                "md5": lambda: hashlib.md5(usedforsecurity=False),
+                "sha1": lambda: hashlib.sha1(usedforsecurity=False),
                 "sha256": hashlib.sha256,
                 "sha512": hashlib.sha512
             }

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/atr/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_tool_registry"
-version = "3.5.0"
+version = "3.6.0"
 description = "A decentralized marketplace for agent capabilities - The Hands of AI Agents"
 readme = "README.md"
 requires-python = ">=3.9"

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/atr/tests/test_registry.py

@@ -272,6 +272,60 @@ def test_clear_registry():
     assert len(registry) == 0
 
 
+# --- version_matches tests ---
+
+from atr.registry import version_matches, parse_version
+
+
+class TestVersionMatches:
+    """Tests for version_matches constraint checking."""
+
+    def test_exact_match(self):
+        assert version_matches("1.2.3", "1.2.3") is True
+
+    def test_exact_mismatch(self):
+        assert version_matches("1.2.3", "1.2.4") is False
+
+    def test_wildcard(self):
+        assert version_matches("9.9.9", "*") is True
+
+    def test_empty_constraint(self):
+        assert version_matches("1.0.0", "") is True
+
+    def test_gte(self):
+        assert version_matches("2.0.0", ">=1.0.0") is True
+        assert version_matches("0.9.0", ">=1.0.0") is False
+
+    def test_caret(self):
+        assert version_matches("1.5.0", "^1.0.0") is True
+        assert version_matches("2.0.0", "^1.0.0") is False
+
+    def test_tilde(self):
+        assert version_matches("1.0.5", "~1.0.0") is True
+        assert version_matches("1.1.0", "~1.0.0") is False
+
+    @pytest.mark.parametrize("specifier", [
+        "git+https://github.com/evil/repo.git",
+        "file:../local-pkg",
+        "http://example.com/pkg.tar.gz",
+        "https://registry.npmjs.org/pkg",
+        "ssh://git@github.com/evil/repo.git",
+        "npm:@scope/pkg",
+        "workspace:*",
+    ])
+    def test_protocol_specifiers_rejected(self, specifier: str):
+        """Protocol specifiers must never match any version."""
+        assert version_matches("0.0.0", specifier) is False
+        assert version_matches("1.0.0", specifier) is False
+
+    @pytest.mark.parametrize("tag", ["latest", "next", "canary", "nightly"])
+    def test_non_semver_tags_rejected(self, tag: str):
+        """Non-semver distribution tags must not match."""
+        assert version_matches("0.0.0", tag) is False
+        assert version_matches("1.0.0", tag) is False
+
+
+
 def test_contains_operator():
     """Test 'in' operator for registry."""
     registry = Registry()

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/caas/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_context"
-version = "3.5.0"
+version = "3.6.0"
 description = "A pure, logic-only library for routing context, handling RAG fallacies, and managing context windows. Layer 1 Primitive - no agent dependencies."
 readme = "README.md"
 requires-python = ">=3.8"

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/caas/tests/test_time_decay.py

@@ -40,7 +40,7 @@ def test_decay_factor_calculation():
     print(f"✓ Month ago (30 days): decay_factor = {decay_month:.3f} (should be ~0.032)")
     
     # Document from a year ago (365 days)
-    year_ago = (reference_time - timedelta(days=366)).isoformat()
+    year_ago = (reference_time - timedelta(days=400)).isoformat()
     decay_year = calculate_decay_factor(year_ago, reference_time, decay_rate=1.0)
     print(f"✓ Year ago (365 days): decay_factor = {decay_year:.3f} (should be ~0.003)")
     
@@ -75,7 +75,7 @@ def test_the_half_life_of_truth():
     )
     
     # Old document with 95% similarity
-    old_doc_time = (reference_time - timedelta(days=366)).isoformat()  # Last year
+    old_doc_time = (reference_time - timedelta(days=400)).isoformat()  # Last year
     old_similarity = 0.95
     old_score = get_time_weighted_score(
         base_score=old_similarity,
@@ -140,7 +140,7 @@ def test_search_with_time_decay():
         sections=[
             Section(title="Introduction", content="How to reset the server. Old method.", weight=1.0)
         ],
-        ingestion_timestamp=(current_time - timedelta(days=366)).isoformat()
+        ingestion_timestamp=(current_time - timedelta(days=400)).isoformat()
     )
     
     # Document 3: Very old (3 years)

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/cmvk/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentmesh_drift"
-version = "3.5.0"
+version = "3.6.0"
 description = "Mathematical drift detection library for calculating drift/hallucination scores between outputs"
 readme = "README.md"
 license = { text = "MIT" }

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/control-plane/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_control_plane"
-version = "3.5.0"
+version = "3.6.0"
 description = "Layer 3: The Framework - A deterministic kernel for zero-violation governance in agentic AI systems with POSIX-style signals, VFS, and kernel/user space separation"
 readme = "README.md"
 requires-python = ">=3.8"

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/emk/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_memory"
-version = "3.5.0"
+version = "3.6.0"
 description = "Public Preview — Episodic Memory Kernel for AI agent experience storage"
 authors = [
     { name = "Microsoft Corporation", email = "agentgovtoolkit@microsoft.com" }

{agent_os_kernel-3.5.0 → agent_os_kernel-3.6.0}/modules/iatp/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agentmesh_trust_protocol"
-version = "3.5.0"
+version = "3.6.0"
 description = "Inter-Agent Trust Protocol (IATP) - The Envoy for AI Agents. A sidecar architecture with typed IPC pipes for preventing cascading hallucinations in autonomous agent networks."
 readme = "README.md"
 license = {text = "MIT"}