agentrust-trace-tests 0.2.0__tar.gz → 0.3.0__tar.gz

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+## v0.3.0 — 2026-07-21
+
+- `azure-cvm-sev-snp` platform accepted (`runtime.platform`): Azure confidential VMs run SEV-SNP behind a Hyper-V paravisor (vTPM-rooted). Added to the bundled schema enum and the TR-RTE valid-platform set so Azure TRACE records pass conformance. Matches `agentrust-trace>=0.4`.
+
 ## v0.2.0 — 2026-06-19
 
 - DID subject support: `subject` now accepts `did:` URIs in addition to `spiffe://`.

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentrust-trace-tests
-Version: 0.2.0
+Version: 0.3.0
 Summary: TRACE conformance test suite
 Project-URL: Homepage, https://github.com/agentrust-io/trace-tests
 Project-URL: Repository, https://github.com/agentrust-io/trace-tests

agentrust_trace_tests-0.3.0/PRIVACY.md

@@ -0,0 +1,9 @@
+# Privacy
+
+agentrust-trace-tests (the TRACE conformance suite) collects and transmits no personal data.
+
+It runs locally as a command-line tool. It processes only the inputs you give it, entirely on your machine, and sends no telemetry, analytics, or usage data to agentrust-io, OPAQUE, or any third party. There is no account, login, or tracking, and no cookies or background network calls.
+
+It reads only the record file you pass on the command line and makes no outbound calls.
+
+Uninstalling removes it completely. Questions or corrections: https://github.com/agentrust-io/trace-tests/issues

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentrust-trace-tests"
-version = "0.2.0"
+version = "0.3.0"
 description = "TRACE conformance test suite"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/requirements-docs.txt

@@ -2,5 +2,5 @@ mkdocs>=1.6.1
 mkdocs-material>=9.7.6
 mkdocs-minify-plugin>=0.8
 pymdown-extensions>=11.0.1
-mkdocstrings[python]>=1.0.4
+mkdocstrings[python]>=1.0.6
 griffe>=2.1.0

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/schemas/trace-claim.json

@@ -28,7 +28,7 @@
       "type": "object",
       "required": ["platform", "measurement"],
       "properties": {
-        "platform": {"type": "string", "enum": ["intel-tdx", "amd-sev-snp", "nvidia-h100", "nvidia-blackwell", "aws-nitro", "arm-cca", "google-confidential-space", "tpm2", "software-only"]},
+        "platform": {"type": "string", "enum": ["intel-tdx", "amd-sev-snp", "azure-cvm-sev-snp", "nvidia-h100", "nvidia-blackwell", "aws-nitro", "arm-cca", "google-confidential-space", "tpm2", "software-only"]},
         "measurement": {"type": "string", "pattern": "^sha(256:[0-9a-f]{64}|384:[0-9a-f]{96})$"},
         "rim_uri": {"type": "string", "format": "uri"},
         "nonce": {"type": "string"},

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/src/trace_tests/modules/tr_rte.py

@@ -11,6 +11,8 @@ _DIGEST_RE = re.compile(r"^sha(256:[0-9a-f]{64}|384:[0-9a-f]{96})$")
 _VALID_PLATFORMS = frozenset({
     "intel-tdx",
     "amd-sev-snp",
+    # Azure confidential VM: SEV-SNP behind a Hyper-V paravisor (vTPM-rooted).
+    "azure-cvm-sev-snp",
     "nvidia-h100",
     "nvidia-blackwell",
     "aws-nitro",

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/tests/test_level0.py

@@ -5,7 +5,7 @@ import jsonschema
 SUBJECT_RE = re.compile(r"^(spiffe://|did:)")
 DIGEST_RE = re.compile(r"^sha(256:[0-9a-f]{64}|384:[0-9a-f]{96})$")
 VALID_PLATFORMS = {
-    "intel-tdx", "amd-sev-snp", "nvidia-h100", "nvidia-blackwell",
+    "intel-tdx", "amd-sev-snp", "azure-cvm-sev-snp", "nvidia-h100", "nvidia-blackwell",
     "aws-nitro", "arm-cca", "google-confidential-space", "tpm2",
 }
 VALID_ENFORCEMENT = {"enforce", "advisory", "silent"}

{agentrust_trace_tests-0.2.0 → agentrust_trace_tests-0.3.0}/tests/unit/test_tr_rte.py

@@ -17,6 +17,13 @@ def test_valid_runtime_passes():
     assert all(not f.failed() for f in findings), findings
 
 
+def test_azure_cvm_platform_passes():
+    """azure-cvm-sev-snp is a recognized hardware platform (vTPM-rooted SEV-SNP)."""
+    trace = {"runtime": {"platform": "azure-cvm-sev-snp", "measurement": "sha384:" + "a" * 96}}
+    findings = check(trace, level=2)
+    assert all(not f.failed() for f in findings), findings
+
+
 def test_invalid_platform_fails():
     trace = {"runtime": {**_VALID["runtime"], "platform": "unknown-tee"}}
     codes = {f.code for f in check(trace) if f.failed()}