asap-protocol 2.5.4__tar.gz → 2.5.6__tar.gz

{asap_protocol-2.5.4 → asap_protocol-2.5.6}/CHANGELOG.md

@@ -7,7 +7,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Follow-up (planned v2.5.5+)
+### Follow-up (planned)
 
 - **Formal Spec & Interop** — RFC spec, introspection, privacy ([prd-v2.5.5-formal-spec-interop.md](product/prd/prd-v2.5.5-formal-spec-interop.md)).
 - `@asap-protocol/mcp-auth` HTTP/SSE middleware (deferred from v2.5.0 — see [2.5.0] TypeScript note and [typescript-mcp-auth-spike.md](engineering/tasks/v2.5.0/typescript-mcp-auth-spike.md)).
@@ -16,14 +16,193 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
-## [2.5.4] - 2026-07-18
+## [2.5.6] - 2026-10-01
+
+**Security & quality patch** — Lite Registry IssueOps envelope and endpoint SSRF
+hardening, compliance harness open-redirect SSRF, constrained capability execute,
+Agent JWT rotate-key lifecycle race, dependency bumps, and consolidated regression
+tests on `development` via [#354](https://github.com/asap-protocol/asap-protocol/pull/354)–[#379](https://github.com/asap-protocol/asap-protocol/pull/379).
+This is **not** Formal Spec & Interop. npm `@asap-protocol/*` packages remain
+at **2.4.1**. PyPI `asap-compliance` remains **1.3.0**.
+Tag [`v2.5.6`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.6)
+· PyPI `asap-protocol==2.5.6`.
+
+### Fixed
+
+- **Lite Registry IssueOps envelope (#354)** — `save_registry` again writes a
+  `LiteRegistry` object (`version`, `updated_at`, `agents`) so
+  `discover_from_registry` and Python validation keep working after
+  registration/removal. CI `validate_registry.py` and auto-merge eligibility
+  now reject a bare root array on production `registry.json` (fixture dry-runs
+  use `--allow-agents-array`).
+
+- **Agent JWT rotate-key lifecycle (#372)** — lifecycle persistence uses
+  compare-and-set on `expected_public_key` so stale snapshots cannot undo
+  `POST /asap/agent/rotate-key`.
+
+### Security
+
+- **Capability execute omitted arguments (#373)** — ``CapabilityRegistry.check_grant``
+  and ``POST /asap/capability/execute`` treat a missing ``arguments`` object
+  as empty when the grant has constraints. Constrained fields stay required,
+  so omitting the object no longer skips the allowlist.
+
+- **Compliance harness open-redirect SSRF (#370)** — ``run_compliance_harness_v2_from_url``
+  no longer sets ``follow_redirects=True``. Auto-registration
+  (``POST /registry/agents``) allowlists the harness base URL once, then the
+  harness preflight and checks use that client; a public agent could
+  ``302`` to ``http://169.254.169.254/`` (or another blocked hop) and the
+  registry-bot would fetch it. Same fail-closed policy as
+  ``fetch_manifest_at_url``. ``asap compliance-check`` against a hostile
+  URL is covered by the same client.
+
+- **IssueOps registry endpoint SSRF (#371)** — `process_registration` rejects HTTP
+  and WebSocket endpoints that resolve to private, loopback, cloud-metadata, or
+  NAT64-embedded private hosts before writing `registry.json`. Manifest fetch was
+  already allowlisted; the advertised agent URLs were not, so a public signed
+  manifest could list `http://169.254.169.254/` and SDK `MarketClient.run`
+  would dial IMDS.
+
+### Changed
+
+- **GitHub Actions deps (#374)** — grouped bump for CI and release workflows.
+- **`apps/web` npm deps (#375)** — grouped production and dev dependency updates.
+
+### Quality
+
+- **Consolidated regression tests (#376–#379)** — SSRF and web policy coverage,
+  transport binding/nonce/validation edges, streaming registration and SLA idle
+  windows, and auth lifecycle/session gates.
+
+### Migration
+
+- **v2.5.5 → v2.5.6**: See [migration guide](docs/migration.md#upgrading-from-v255-to-v256).
+  No wire-protocol or manifest schema breaking changes. Capability clients with
+  constrained grants must send an ``arguments`` object (may be empty). Registry
+  operators must keep `registry.json` as a `LiteRegistry` envelope.
+
+---
+
+## [2.5.5] - 2026-09-11
 
-> **Status:** pending tag `v2.5.4` / PyPI publish (S5 prep). Merge → tag → publish runs after this train lands on `main` via `release/2.5.4`.
+**Security & quality patch** — OpenAPI path-parameter climb, Lite Registry
+add-only URN policy, marketplace allowlisted-fetch DNS pin, capability-replace
+consent, fail-closed reactivate, Agent JWT persist/revoke races, and
+dependency floors already on `main` via [#344](https://github.com/asap-protocol/asap-protocol/pull/344)–[#350](https://github.com/asap-protocol/asap-protocol/pull/350).
+This is **not** Formal Spec & Interop. npm `@asap-protocol/*` packages remain
+at **2.4.1**. PyPI `asap-compliance` remains **1.3.0**.
+Tag [`v2.5.5`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.5)
+· PyPI `asap-protocol==2.5.5`.
+
+### Security
+
+- **Reactivate approval bypass (#348)** — ``reactivate_agent`` /
+  ``POST /asap/agent/reactivate`` only allow ``active`` / ``expired``
+  (fail-closed). ``pending``, ``rejected``, ``revoked``, and any future
+  status cannot be force-activated. LIFE-004 scopes reactivation to expired
+  agents; flipping a denied or still-open registration would skip host
+  consent.
+- **Capability escalation constraint overwrite (#347)** —
+  ``POST /asap/agent/request-capability`` no longer auto-applies a name in
+  ``host.default_capabilities`` when that would clear, weaken, or otherwise
+  replace an existing registry grant (constraints, status, or a
+  host-imposed ``expires_at``). Constraint or expiry changes require the same
+  Device Auth / CIBA consent path as non-default capability names. Identical
+  active re-requests do not rewrite the grant row. A2H prompts include the
+  requested spec, not names only.
+- **Marketplace allowlisted fetch DNS pin (#346)** — `/api/health-check`,
+  `/api/proxy/check`, and dashboard register HEAD no longer let Node
+  `fetch` re-resolve after the SSRF allowlist. `connect()` is pinned to
+  the allowlisted IPs, each redirect hop is re-validated, hop sockets are
+  dropped after headers, and the 3s budget is shared across the walk
+  (DNS rebinding / private Location / body-drain DoS).
+- **Lite Registry auto-registration (#345)** — `POST /registry/agents` and the
+  auto-merge policy cannot overwrite or delete existing agent URNs.
+  Duplicate ids in `registry.json` are rejected (marketplace lookup is
+  first-match). Updates and removals stay on IssueOps / human review.
+- **OpenAPI path-parameter climb (#344)** — ``_fill_path_template`` rejects
+  ``.`` / ``..`` path params before ``httpx.request``.
+  ``quote(..., safe="")`` leaves RFC 3986 dots unencoded, so a granted
+  skill for ``/v1/{resource}/{id}`` with both params ``..`` would climb
+  out of a path-prefixed ``base_url`` (confused deputy with OA-009
+  headers). Static templates that already contain ``.`` / ``..`` raise
+  ``OpenAPIPathParameterError`` instead of ``ValueError``.
+- **Marketplace IPv6 SSRF ranges (#350)** — ``isBlockedIPv6`` treats link-local
+  as ``fe80::/10`` (not ``fe80:`` /16), blocks unspecified ``::``, and
+  applies the IPv4 blocklist to NAT64 ``64:ff9b::/96`` embeddings.
+- **Pending Device Auth / CIBA spec reuse (#350)** — a later escalation request
+  merges ``capability_specs`` and rotates to a new challenge. A2H
+  approve/deny is ignored when the store payload no longer matches the
+  prompt, so a stale consent cannot grant a wider set.
+
+### Security (deps)
+
+- Raise `cryptography` to `>=50.0.0,<51` for **PYSEC-2026-3552** (PKCS7
+  Bleichenbacher; 49.0.0 already covered PYSEC-2026-3553/3554). Pair with
+  `pyopenssl>=26.4.0` so `[webauthn]` stays importable.
+- Raise `aiohttp` override to `>=3.14.3,<4` for **PYSEC-2026-3545/3546/3547**.
+- Add `h2>=4.4.1` override for **PYSEC-2026-3628**.
+- Raise `pip` floor to `>=26.2` for **PYSEC-2026-3721**.
+- Raise optional `[pydanticai]` floor to `pydantic-ai>=1.106.0,<2` for
+  **PYSEC-2026-3692/3693**.
+- `apps/web` npm overrides: `fast-uri@^3.1.6`, `nanoid@^3.3.18`,
+  `postcss@^8.5.23`, `brace-expansion@^5.0.9`, `ip-address@^10.3.1`,
+  `js-yaml@^4.3.1`, `undici@^7.29.0`, `fflate@^0.8.3`
+  (**CVE-2026-45820**), `baseline-browser-mapping@^2.11.0`
+  (**CVE-2026-45819**), and `browserslist@^4.28.9` so
+  production moderate+ and full-graph high+ audits stay clean.
+- Raise `apps/web` `next` to **16.3.4** and `eslint-config-next` to match
+  (**GHSA-p293-qw3h-jr36**, **GHSA-2xp9-vwfh-vxw4**). Align `sharp` to
+  `^0.35.4` (**GHSA-rgj7-g3m4-5g8c** / libheif).
+- Raise `mkdocs-material` to `>=9.7.7` for **PYSEC-2026-3864** /
+  **CVE-2026-73295** (DOM XSS in `search.suggest`). The wheel bump does not
+  patch GitHub Pages until the docs site is rebuilt and published (`Docs`
+  workflow on `main`).
+
+### Fixed
+
+- **Agent JWT session sliding (LIFE-005)** — Successful
+  :func:`~asap.auth.agent_jwt.verify_agent_jwt` always persists the extended
+  ``last_used_at`` after a verified Agent JWT (restores the pre-S3 “verifier
+  writes” contract; callers must not assume they alone persist idle timeout).
+  Side effect: authenticated ``GET /asap/capability/list`` with an Agent JWT
+  now slides idle timeout the same as other verify paths — list traffic keeps
+  sessions warm.
+- **Agent JWT verify vs concurrent revoke/rotate** — Session extension no
+  longer uses full-row ``AgentStore.save`` of a verify-time snapshot (that
+  TOCTOU could resurrect a revoked agent or undo ``rotate-key``). Persist goes
+  through ``AgentStore.touch_if_current`` (atomic ``UPDATE ... WHERE status =
+  'active'`` plus matching ``host_id`` and RFC 7638 public-key thumbprint).
+  Custom store authors must implement that method; get→mutate→save is not
+  sufficient.
+- **Rotate-key / reactivate / status vs concurrent revoke** — Those handlers
+  re-read then persist through ``save_agent_unless_revoked``. ``AgentStore.save``
+  must reject replacing a ``revoked`` row with a non-revoked snapshot
+  (``InMemoryAgentStore`` raises ``RevokedAgentOverwriteError``). Custom stores
+  that await I/O inside ``save`` must make that check atomic
+  (``UPDATE ... WHERE status <> 'revoked'``).
+
+### Changed
+
+- **CI setup-uv pin (#350)** — `.github/actions/setup-python` pins
+  `astral-sh/setup-uv` to **v10.0.1**.
+- **Dependabot groups (#349)** — grouped GitHub Actions and `apps/web` npm
+  production/development updates (no extra dep bump in this release PR).
+
+### Migration
+
+- **v2.5.4 → v2.5.5**: See [migration guide](docs/migration.md#upgrading-from-v254-to-v255).
+  No wire-protocol or manifest schema breaking changes. Custom ``AgentStore``
+  authors must implement ``touch_if_current`` and refuse revoked overwrite.
+
+---
+
+## [2.5.4] - 2026-07-18
 
 **Distribution Loop** — homepage, thin starters, Build for agents guide, and maintainer
 telemetry ops (no public metrics UI). Scope:
 [prd-v2.5.4-distribution-loop.md](product/prd/prd-v2.5.4-distribution-loop.md).
-npm `@asap-protocol/*` packages remain at **2.4.1**.
+npm `@asap-protocol/*` packages remain at **2.4.1**. Tag [`v2.5.4`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.4) · PyPI `asap-protocol==2.5.4`.
 
 ### Added
 

{asap_protocol-2.5.4 → asap_protocol-2.5.6}/PKG-INFO

@@ -1,11 +1,11 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: asap-protocol
-Version: 2.5.4
+Version: 2.5.6
 Summary: Async Simple Agent Protocol - A streamlined protocol for agent-to-agent communication
-Project-URL: Homepage, https://github.com/adriannoes/asap-protocol
-Project-URL: Documentation, https://adriannoes.github.io/asap-protocol
-Project-URL: Repository, https://github.com/adriannoes/asap-protocol
-Project-URL: Issues, https://github.com/adriannoes/asap-protocol/issues
+Project-URL: Homepage, https://github.com/asap-protocol/asap-protocol
+Project-URL: Documentation, https://asap-protocol.github.io/asap-protocol
+Project-URL: Repository, https://github.com/asap-protocol/asap-protocol
+Project-URL: Issues, https://github.com/asap-protocol/asap-protocol/issues
 Project-URL: PyPI, https://pypi.org/project/asap-protocol/
 Author: ASAP Protocol Contributors
 License: Apache-2.0
@@ -23,7 +23,7 @@ Requires-Python: >=3.13
 Requires-Dist: aiosqlite>=0.20
 Requires-Dist: authlib<2,>=1.6.12
 Requires-Dist: brotli>=1.2.0
-Requires-Dist: cryptography<49,>=48.0.1
+Requires-Dist: cryptography<51,>=50.0.0
 Requires-Dist: fastapi>=0.136.1
 Requires-Dist: httpx[http2]>=0.28.1
 Requires-Dist: jcs>=0.2.0
@@ -63,9 +63,9 @@ Requires-Dist: zeroconf>=0.149.5; extra == 'dns-sd'
 Provides-Extra: docs
 Requires-Dist: ghp-import>=2.1.0; extra == 'docs'
 Requires-Dist: joserfc<2,>=1.6.7; extra == 'docs'
-Requires-Dist: mkdocs-material>=9.5; extra == 'docs'
+Requires-Dist: mkdocs-material>=9.7.7; extra == 'docs'
 Requires-Dist: mkdocstrings[python]>=0.27; extra == 'docs'
-Requires-Dist: pymdown-extensions>=10.21.3; extra == 'docs'
+Requires-Dist: pymdown-extensions>=11.0.1; extra == 'docs'
 Requires-Dist: python-engineio>=4.13.2; extra == 'docs'
 Requires-Dist: python-socketio>=5.16.2; extra == 'docs'
 Provides-Extra: langchain
@@ -79,7 +79,7 @@ Requires-Dist: openapi-pydantic>=0.5; extra == 'openapi'
 Provides-Extra: openclaw
 Requires-Dist: openclaw-sdk>=2.0; extra == 'openclaw'
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai>=1.99.0; extra == 'pydanticai'
+Requires-Dist: pydantic-ai<2,>=1.106.0; extra == 'pydanticai'
 Provides-Extra: redis
 Requires-Dist: redis>=5.0.0; extra == 'redis'
 Provides-Extra: smolagents
@@ -94,14 +94,14 @@ Description-Content-Type: text/markdown
 
 *✨ From **agents**, for **agents**. Delivering reliability, **as soon as possible.***
 
-![ASAP Protocol Banner](https://raw.githubusercontent.com/adriannoes/asap-protocol/main/.github/assets/asap-protocol-banner.png)
+![ASAP Protocol Banner](https://raw.githubusercontent.com/asap-protocol/asap-protocol/main/.github/assets/asap-protocol-banner.png)
 
 
 > A production-ready protocol for agent-to-agent communication and task coordination.
 
-**Quick Info**: [`v2.5.3`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.3) on PyPI · in-tree **v2.5.4** pending tag · PyPI [`asap-protocol`](https://pypi.org/project/asap-protocol/) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
+**Quick Info**: [`v2.5.6`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.6) · PyPI [`asap-protocol`](https://pypi.org/project/asap-protocol/) | `Apache 2.0` | `Python 3.13+` | [Documentation](docs/index.md) | [Changelog](CHANGELOG.md)
 
-> 📦 **Install** — [`asap-protocol` **2.5.3** on PyPI](https://pypi.org/project/asap-protocol/) (Python; **2.5.4** pending publish) · [`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) (TypeScript)
+> 📦 **Install** — [`asap-protocol` **2.5.6** on PyPI](https://pypi.org/project/asap-protocol/) (Python) · [`@asap-protocol/client` on npm](https://www.npmjs.com/package/@asap-protocol/client) (TypeScript)
 
 🚀 **Live now** our [**agentic marketplace**](https://asap-protocol.com/) — browse agents, register yours, request verification.
 
@@ -156,16 +156,16 @@ ASAP meets agents where they run — optional Python extras, npm tool bridges, a
 We recommend using [uv](https://github.com/astral-sh/uv) for dependency management:
 
 ```bash
-uv add asap-protocol  # latest on PyPI (currently 2.5.3; in-tree 2.5.4 pending publish)
+uv add asap-protocol  # latest on PyPI (currently 2.5.6)
 ```
 
 Or with pip:
 
 ```bash
-pip install asap-protocol==2.5.3
+pip install asap-protocol==2.5.6
 ```
 
-**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.4; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
+**TypeScript** (npm, **`2.4.1`** — unchanged for v2.5.6; `@asap-protocol/mcp-auth` HTTP middleware still deferred):
 
 - [`@asap-protocol/client`](https://www.npmjs.com/package/@asap-protocol/client) — [SDK docs](docs/sdks/typescript.md)
 - [`@asap-protocol/mastra`](https://www.npmjs.com/package/@asap-protocol/mastra) — [docs](docs/integrations/mastra.md) · [demo](apps/example-mastra/README.md)
@@ -177,7 +177,7 @@ npm install @asap-protocol/mastra@2.4.1 @asap-protocol/client @mastra/core zod
 npm install @asap-protocol/openai-agents@2.4.1 @asap-protocol/client @openai/agents zod
 ```
 
-**Python v2.5.4** (Distribution Loop) is **pending tag/PyPI** — see [Migration (v2.5.3 → v2.5.4)](docs/migration.md#upgrading-from-v253-to-v254). Start here: [Build for agents](docs/guides/build-for-agents.md) · [starters](examples/starters/README.md).
+**Python v2.5.6** (security & quality patch) is **shipped** — see [Migration (v2.5.5 → v2.5.6)](docs/migration.md#upgrading-from-v255-to-v256). Dist Loop starters remain: [Build for agents](docs/guides/build-for-agents.md) · [starters](examples/starters/README.md).
 
 ## Quick Start
 
@@ -203,7 +203,7 @@ With coverage (separate run — do not combine with `-n auto`):
 uv run pytest --tb=short --cov=asap --cov-report=term-missing --cov-fail-under=85
 ```
 
-[Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md) (structure, fixtures, property/load/chaos tests). [Contributing](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) (dev setup, CI).
+[Testing Guide](https://github.com/asap-protocol/asap-protocol/blob/main/docs/testing.md) (structure, fixtures, property/load/chaos tests). [Contributing](https://github.com/asap-protocol/asap-protocol/blob/main/CONTRIBUTING.md) (dev setup, CI).
 
 ### Compliance Harness
 
@@ -214,9 +214,9 @@ uv add "asap-compliance>=1.3.0"
 pytest --asap-agent-url https://your-agent.example.com -m asap_compliance
 ```
 
-For **MCP Auth Bridge** stdio gates (`mcp-auth-bridge` profile), use **`asap-compliance` 1.3.0+** with **`asap-protocol` 2.5.0+** — published on PyPI via tag [`v2.5.0.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0.1).
+For **MCP Auth Bridge** stdio gates (`mcp-auth-bridge` profile), use **`asap-compliance` 1.3.0+** with **`asap-protocol` 2.5.0+** — published on PyPI via tag [`v2.5.0.1`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.0.1).
 
-See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/compliance-testing.md) for handshake, schema and state machine validation.
+See [Compliance Testing Guide](https://github.com/asap-protocol/asap-protocol/blob/main/docs/guides/compliance-testing.md) for handshake, schema and state machine validation.
 
 ## Documentation
 
@@ -224,23 +224,23 @@ See [Compliance Testing Guide](https://github.com/adriannoes/asap-protocol/blob/
 - [Docs](docs/index.md) | [API Reference](docs/api-reference.md)
 - [MCP Auth Bridge](docs/adapters/mcp-auth-bridge.md) — v2.5.0 opt-in JWT + capability grants for native stdio MCP
 - [TypeScript client SDK](docs/sdks/typescript.md) — `@asap-protocol/client` (identity, capabilities, streaming, adapters)
-- [Tutorials](https://github.com/adriannoes/asap-protocol/tree/main/docs/tutorials) — First agent to production checklist
-- [Migration from A2A/MCP](https://github.com/adriannoes/asap-protocol/blob/main/docs/migration.md)
-- [Raw Fetch (non-Python)](https://github.com/adriannoes/asap-protocol/blob/main/docs/raw-fetch.md) — Fetch registry.json and revoked_agents.json with curl/fetch; implement your own client.
+- [Tutorials](https://github.com/asap-protocol/asap-protocol/tree/main/docs/tutorials) — First agent to production checklist
+- [Migration from A2A/MCP](https://github.com/asap-protocol/asap-protocol/blob/main/docs/migration.md)
+- [Raw Fetch (non-Python)](https://github.com/asap-protocol/asap-protocol/blob/main/docs/raw-fetch.md) — Fetch registry.json and revoked_agents.json with curl/fetch; implement your own client.
 
 **Deep Dive**
-- [State Management](https://github.com/adriannoes/asap-protocol/blob/main/docs/state-management.md) | [Best Practices: Failover & Migration](https://github.com/adriannoes/asap-protocol/blob/main/docs/best-practices/agent-failover-migration.md) | [Error Handling](https://github.com/adriannoes/asap-protocol/blob/main/docs/error-handling.md)
-- [Transport](https://github.com/adriannoes/asap-protocol/blob/main/docs/transport.md) | [Security](https://github.com/adriannoes/asap-protocol/blob/main/docs/security.md) | [Security Model](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (OAuth2 trust, Custom Claims)
-- [Identity Signing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/identity-signing.md) | [Compliance Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/compliance-testing.md) | [Migration v1.1 to v1.2](https://github.com/adriannoes/asap-protocol/blob/main/docs/guides/migration-v1.1-to-v1.2.md) | [mTLS](https://github.com/adriannoes/asap-protocol/blob/main/docs/security/mtls.md)
-- [Observability](https://github.com/adriannoes/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/adriannoes/asap-protocol/blob/main/docs/testing.md)
+- [State Management](https://github.com/asap-protocol/asap-protocol/blob/main/docs/state-management.md) | [Best Practices: Failover & Migration](https://github.com/asap-protocol/asap-protocol/blob/main/docs/best-practices/agent-failover-migration.md) | [Error Handling](https://github.com/asap-protocol/asap-protocol/blob/main/docs/error-handling.md)
+- [Transport](https://github.com/asap-protocol/asap-protocol/blob/main/docs/transport.md) | [Security](https://github.com/asap-protocol/asap-protocol/blob/main/docs/security.md) | [Security Model](https://github.com/asap-protocol/asap-protocol/blob/main/docs/security/v1.1-security-model.md) (OAuth2 trust, Custom Claims)
+- [Identity Signing](https://github.com/asap-protocol/asap-protocol/blob/main/docs/guides/identity-signing.md) | [Compliance Testing](https://github.com/asap-protocol/asap-protocol/blob/main/docs/guides/compliance-testing.md) | [Migration v1.1 to v1.2](https://github.com/asap-protocol/asap-protocol/blob/main/docs/guides/migration-v1.1-to-v1.2.md) | [mTLS](https://github.com/asap-protocol/asap-protocol/blob/main/docs/security/mtls.md)
+- [Observability](https://github.com/asap-protocol/asap-protocol/blob/main/docs/observability.md) | [Testing](https://github.com/asap-protocol/asap-protocol/blob/main/docs/testing.md)
 
 **Decisions & Operations**
-- [ADRs](https://github.com/adriannoes/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
-- [Tech Stack](https://github.com/adriannoes/asap-protocol/blob/main/engineering/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
-- [Deployment](https://github.com/adriannoes/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/adriannoes/asap-protocol/blob/main/docs/troubleshooting.md)
+- [ADRs](https://github.com/asap-protocol/asap-protocol/tree/main/docs/adr) — 19 Architecture Decision Records
+- [Tech Stack](https://github.com/asap-protocol/asap-protocol/blob/main/engineering/architecture/tech-stack-decisions.md) — Rationale for Python, Pydantic, Next.js choices
+- [Deployment](https://github.com/asap-protocol/asap-protocol/blob/main/docs/deployment/kubernetes.md) | [Troubleshooting](https://github.com/asap-protocol/asap-protocol/blob/main/docs/troubleshooting.md)
 
 **Release**
-- [Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md) | **[PyPI listing](https://pypi.org/project/asap-protocol/)** — `https://pypi.org/project/asap-protocol/` (install: `pip install asap-protocol`)
+- [Changelog](https://github.com/asap-protocol/asap-protocol/blob/main/CHANGELOG.md) | **[PyPI listing](https://pypi.org/project/asap-protocol/)** — `https://pypi.org/project/asap-protocol/` (install: `pip install asap-protocol`)
 
 ## CLI
 
@@ -261,38 +261,40 @@ See [docs/cli.md](docs/cli.md) for delegation tokens, schema validation, trace v
 
 ## Version History
 
-High-level only — see **[Changelog](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md)** and the **[docs index](https://github.com/adriannoes/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides)** for full notes.
+High-level only — see **[Changelog](https://github.com/asap-protocol/asap-protocol/blob/main/CHANGELOG.md)** and the **[docs index](https://github.com/asap-protocol/asap-protocol/blob/main/docs/index.md#v11-features-api-reference--guides)** for full notes.
 
 | Version | What shipped |
 | :-- | :-- |
-| **v2.5.4** | **Distribution Loop** — pending tag/PyPI · thin starters (`examples/starters/`), [Build for agents](docs/guides/build-for-agents.md), homepage agent-first CTAs, telemetry ops (no public metrics UI). See [CHANGELOG](CHANGELOG.md#254---2026-07-18), [PRD](product/prd/prd-v2.5.4-distribution-loop.md), and [Migration (v2.5.3 → v2.5.4)](docs/migration.md#upgrading-from-v253-to-v254) |
-| **v2.5.3** | **Adapter Lab II** — **[GitHub Release `v2.5.3`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.3)** · workflow OpenAPI connectors + security guide, experimental MAF / NeMo guides, JSON-safe `-32602`, MCP example client DX. See [CHANGELOG](CHANGELOG.md#253---2026-07-14), [PRD](product/prd/prd-v2.5.3-adapter-lab-ii.md), and [Migration (v2.5.2 → v2.5.3)](docs/migration.md#upgrading-from-v252-to-v253) |
+| **v2.5.6** | **Security & quality patch** — **[GitHub Release `v2.5.6`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.6)** · Lite Registry IssueOps envelope + endpoint SSRF, compliance open-redirect SSRF, constrained capability execute, rotate-key lifecycle race, deps + regression tests. npm `@asap-protocol/*` remain **2.4.1**. See [CHANGELOG](CHANGELOG.md#256---2026-10-01) and [Migration (v2.5.5 → v2.5.6)](docs/migration.md#upgrading-from-v255-to-v256) |
+| **v2.5.5** | **Security & quality patch** — **[GitHub Release `v2.5.5`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.5)** · OpenAPI path-param climb, registry URN overwrite guard, marketplace SSRF DNS pin, capability-replace consent, fail-closed reactivate, Agent JWT persist/revoke races. npm `@asap-protocol/*` remain **2.4.1**. See [CHANGELOG](CHANGELOG.md#255---2026-09-11) and [Migration (v2.5.4 → v2.5.5)](docs/migration.md#upgrading-from-v254-to-v255) |
+| **v2.5.4** | **Distribution Loop** — **[GitHub Release `v2.5.4`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.4)** · thin starters (`examples/starters/`), [Build for agents](docs/guides/build-for-agents.md), homepage agent-first CTAs, telemetry ops (no public metrics UI). See [CHANGELOG](CHANGELOG.md#254---2026-07-18), [PRD](product/prd/prd-v2.5.4-distribution-loop.md), and [Migration (v2.5.3 → v2.5.4)](docs/migration.md#upgrading-from-v253-to-v254) |
+| **v2.5.3** | **Adapter Lab II** — **[GitHub Release `v2.5.3`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.3)** · workflow OpenAPI connectors + security guide, experimental MAF / NeMo guides, JSON-safe `-32602`, MCP example client DX. See [CHANGELOG](CHANGELOG.md#253---2026-07-14), [PRD](product/prd/prd-v2.5.3-adapter-lab-ii.md), and [Migration (v2.5.2 → v2.5.3)](docs/migration.md#upgrading-from-v252-to-v253) |
 | **v2.5.2** | **Security & correctness follow-up** — opt-in operator API auth, `extra="forbid"` ingress, Redis JTI replay, web distributed rate limits, v2.5.1 CR follow-ups (#245–#249), registry signed-manifest/400 fixes. See [CHANGELOG](CHANGELOG.md#252---2026-07-08), [PRD](product/prd/prd-v2.5.2-security-follow-up.md), and [Migration (v2.5.1 → v2.5.2)](docs/migration.md#upgrading-from-v251) |
 | **v2.5.1** | **Code quality patch** — behavior-preserving refactor (transport/server, client, websocket, SQLite storage, auth, integrations) + six correctness/security fixes (atomic `revoke_cascade`, `usage_events` DDL, unified Host-JWT verifier, **WS now enforces OAuth2**, OpenAPI handler cleanup, client `correlation_id` binding). Deprecated import paths removed in v2.6.0. See [CHANGELOG](CHANGELOG.md#251---2026-06-25) and [Migration (v2.5.0 → v2.5.1)](docs/migration.md#upgrading-from-v250-to-v251) |
-| **v2.5.0.1** | **Compliance publish** — **[GitHub Release `v2.5.0.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0.1)** · PyPI **`asap-compliance` 1.3.0** (`mcp-auth-bridge` profile; requires `asap-protocol>=2.5.0`). No `asap-protocol` API change. See [CHANGELOG](CHANGELOG.md#2501---2026-06-24) |
-| **v2.5.0** | **MCP Auth Bridge** — **[GitHub Release `v2.5.0`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.5.0)** · opt-in `protect_server` for stdio MCP; Agent JWT + capability grants; reference example `examples/mcp_auth_bridge/`. See [CHANGELOG](CHANGELOG.md#250---2026-06-24) and [Migration (v2.4.1 → v2.5.0)](docs/migration.md#upgrading-from-v241-to-v250) |
+| **v2.5.0.1** | **Compliance publish** — **[GitHub Release `v2.5.0.1`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.0.1)** · PyPI **`asap-compliance` 1.3.0** (`mcp-auth-bridge` profile; requires `asap-protocol>=2.5.0`). No `asap-protocol` API change. See [CHANGELOG](CHANGELOG.md#2501---2026-06-24) |
+| **v2.5.0** | **MCP Auth Bridge** — **[GitHub Release `v2.5.0`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.5.0)** · opt-in `protect_server` for stdio MCP; Agent JWT + capability grants; reference example `examples/mcp_auth_bridge/`. See [CHANGELOG](CHANGELOG.md#250---2026-06-24) and [Migration (v2.4.1 → v2.5.0)](docs/migration.md#upgrading-from-v241-to-v250) |
 | **v2.4.1** | **Security hardening** — OAuth2 `iss`/`aud`, fail-closed identity binding, web SSRF/redirect fixes, dependency bumps. See [CHANGELOG](CHANGELOG.md#241---2026-06-14) and [Migration (v2.4.0 → v2.4.1)](docs/migration.md#upgrading-from-v240-to-v241) |
 | **v2.4.0** | **Edge-AI discovery** — optional `hardware` / `inference` manifest fields, registry mirror, marketplace filters, **`@asap-protocol/client@2.4.0`**, ShellClaw onboarding docs. See [CHANGELOG](CHANGELOG.md#240---2026-05-24) and [Migration (v2.3.x → v2.4.0)](docs/migration.md#upgrading-from-v23x-to-v240) |
-| **v2.3.1** | **npm TS patch** — **[GitHub Release `v2.3.1`](https://github.com/adriannoes/asap-protocol/releases/tag/v2.3.1)** · **`@asap-protocol/mastra`**, **`@asap-protocol/openai-agents`**, **`@asap-protocol/client@2.3.1`** (additive adapter exports). Python **2.3.0** unchanged. See [CHANGELOG](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md#231---2026-05-20) and [Migration (v2.3.0 → v2.3.1)](https://github.com/adriannoes/asap-protocol/blob/main/docs/migration.md#upgrading-from-v230-to-v231) |
-| **v2.3.0** | **OpenAPI Adapter** (`[openapi]`) · **TypeScript client** (`@asap-protocol/client`) · **Auto-Registration** · **Capability escalation** · **ASAP HTTP challenge** — see [CHANGELOG](https://github.com/adriannoes/asap-protocol/blob/main/CHANGELOG.md#230---2026-05-04) and [Migration](https://github.com/adriannoes/asap-protocol/blob/main/docs/migration.md#upgrading-from-v22x-to-v230) |
-| **v2.2.1** | Opt-in **WebAuthn** (`asap-protocol[webauthn]`) · `asap compliance-check` & `asap audit export` · stricter `ResolvedAgent.run()` · `AuditChainBroken` · [pinned security deps](https://github.com/adriannoes/asap-protocol/blob/main/SECURITY.md#dependency-policy) |
+| **v2.3.1** | **npm TS patch** — **[GitHub Release `v2.3.1`](https://github.com/asap-protocol/asap-protocol/releases/tag/v2.3.1)** · **`@asap-protocol/mastra`**, **`@asap-protocol/openai-agents`**, **`@asap-protocol/client@2.3.1`** (additive adapter exports). Python **2.3.0** unchanged. See [CHANGELOG](https://github.com/asap-protocol/asap-protocol/blob/main/CHANGELOG.md#231---2026-05-20) and [Migration (v2.3.0 → v2.3.1)](https://github.com/asap-protocol/asap-protocol/blob/main/docs/migration.md#upgrading-from-v230-to-v231) |
+| **v2.3.0** | **OpenAPI Adapter** (`[openapi]`) · **TypeScript client** (`@asap-protocol/client`) · **Auto-Registration** · **Capability escalation** · **ASAP HTTP challenge** — see [CHANGELOG](https://github.com/asap-protocol/asap-protocol/blob/main/CHANGELOG.md#230---2026-05-04) and [Migration](https://github.com/asap-protocol/asap-protocol/blob/main/docs/migration.md#upgrading-from-v22x-to-v230) |
+| **v2.2.1** | Opt-in **WebAuthn** (`asap-protocol[webauthn]`) · `asap compliance-check` & `asap audit export` · stricter `ResolvedAgent.run()` · `AuditChainBroken` · [pinned security deps](https://github.com/asap-protocol/asap-protocol/blob/main/SECURITY.md#dependency-policy) |
 | **v2.2** | Per-runtime identity & capability auth · SSE `POST /asap/stream` · `ASAP-Version` · JSON-RPC batch · tamper-evident audit · async state stores · Compliance Harness v2 |
 | **v2.1.1** | Patch: JWT allowlist · SQLite async bridge · optional Redis rate limits · web SSRF hardening |
 | **v2.1** | `MarketClient` · framework extras (LangChain, CrewAI, LlamaIndex, …) · registry UX |
 | **v2.0** | Marketplace web app · Lite Registry (GitHub Pages) · IssueOps · OAuth · verification flow |
 | **v1.3** | `asap delegation create` / `revoke` |
-| **v1.2** | Ed25519 manifests · trust levels · optional mTLS · [Compliance Harness](https://github.com/adriannoes/asap-protocol/blob/main/asap-compliance/README.md) |
+| **v1.2** | Ed25519 manifests · trust levels · optional mTLS · [Compliance Harness](https://github.com/asap-protocol/asap-protocol/blob/main/asap-compliance/README.md) |
 | **v1.1** | OAuth2 · WebSocket · discovery (well-known + Lite Registry) · SQLite state · webhooks |
 
 ## 🔭 What's Next?
 
 The [agentic marketplace](https://asap-protocol.com/) and Lite Registry are live. The **v2.5.x train** focuses on interop and adoption:
 
-- **v2.5.5** — Formal Spec & Interop (RFC, introspection, privacy)
+- **Formal Spec & Interop** — RFC, introspection, privacy (PRD [prd-v2.5.5-formal-spec-interop.md](product/prd/prd-v2.5.5-formal-spec-interop.md); library **2.5.6** is the security/quality patch above)
 - **`@asap-protocol/mcp-auth`** (npm) — HTTP/SSE MCP middleware
-- **Formal spec track** (v2.5.5) — introspection, privacy, cross-protocol interop on the path to v3.0 economy
+- **Formal spec track** — introspection, privacy, cross-protocol interop on the path to v3.0 economy
 
-See the [v2.5 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main/product/prd/prd-v2.5-roadmap.md) and [ADR index](https://github.com/adriannoes/asap-protocol/blob/main/product/decision-records/README.md).
+See the [v2.5 roadmap PRD](https://github.com/asap-protocol/asap-protocol/blob/main/product/prd/prd-v2.5-roadmap.md) and [ADR index](https://github.com/asap-protocol/asap-protocol/blob/main/product/decision-records/README.md).
 
 ## Contributing
 
@@ -300,13 +302,13 @@ See the [v2.5 roadmap PRD](https://github.com/adriannoes/asap-protocol/blob/main
 
 Every contribution, from bug reports to feature suggestions, documentation improvements and code contributions, makes a real difference.
 
-Check out our [contributing guidelines](https://github.com/adriannoes/asap-protocol/blob/main/CONTRIBUTING.md) to get started. It's easier than you think! 🚀
+Check out our [contributing guidelines](https://github.com/asap-protocol/asap-protocol/blob/main/CONTRIBUTING.md) to get started. It's easier than you think! 🚀
 
 ## Contact
 
 | Channel | Use for |
 | --- | --- |
-| [GitHub Discussions](https://github.com/adriannoes/asap-protocol/discussions) or [Issues](https://github.com/adriannoes/asap-protocol/issues) | Public questions, bugs, and feature ideas |
+| [GitHub Discussions](https://github.com/asap-protocol/asap-protocol/discussions) or [Issues](https://github.com/asap-protocol/asap-protocol/issues) | Public questions, bugs, and feature ideas |
 | [info@asap-protocol.com](mailto:info@asap-protocol.com) | Private coordination — protocol, marketplace, partnerships, press |
 | [SECURITY.md](SECURITY.md) | Security vulnerabilities only — **do not** use email or public issues |
 
@@ -316,8 +318,8 @@ See [PRIVACY.md](PRIVACY.md) for how the public site and maintainer telemetry us
 
 ## License
 
-This project is licensed under the Apache 2.0 License - see the [license](https://github.com/adriannoes/asap-protocol/blob/main/LICENSE) file for details.
+This project is licensed under the Apache 2.0 License - see the [license](https://github.com/asap-protocol/asap-protocol/blob/main/LICENSE) file for details.
 
 ---
 
-**Built with [Cursor](https://cursor.com/)**, with Composer, Opus, Gemini, Kimi and more.
+**Built with [Cursor](https://cursor.com/)**, with Composer, Grok, Opus, Gemini, Kimi and more.