matrixscroll 0.6.2__tar.gz → 0.6.3__tar.gz

{matrixscroll-0.6.2 → matrixscroll-0.6.3}/CHANGELOG.md

@@ -4,6 +4,47 @@ All notable changes to the Matrix Scroll Python SDK are documented here. The
 format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.6.3] - 2026-08-10
+
+Repository layout and documentation. No code, CLI or wire-format changes.
+
+### Added
+- **The Matrix Scroll Verify action now lives in this repo** at
+  [`.github/actions/verify`](.github/actions/verify), and the reusable MCP
+  manifest gate at `.github/workflows/mcp-manifest-gate.yml`. Both were
+  published from the separate `SSX360/matrixscroll-verify-action` repository,
+  which is now archived. Inputs, outputs and exit codes are unchanged.
+
+### Changed
+- **Call sites move to the new reference.** Replace
+  `SSX360/matrixscroll-verify-action@v1` with
+  `SSX360/matrixscroll/.github/actions/verify@action-v1`, and
+  `SSX360/matrixscroll-verify-action/.github/workflows/mcp-manifest-gate.yml@main`
+  with `SSX360/matrixscroll/.github/workflows/mcp-manifest-gate.yml@action-v1`.
+  The `action-v1` tag tracks the current action release line and is separate
+  from the SDK's `v0.6.x` tags.
+- The reusable MCP gate now defaults `matrixscroll_version` to `0.6.3`, matching
+  the action default and the published PyPI release. It runs on `workflow_call`
+  and `workflow_dispatch` only, so it does not add a job to every SDK pull
+  request.
+
+### Fixed
+- **PyPI dropped every relative link in the README.** Its sanitiser removes any
+  `href` it cannot resolve, so 17 documentation links arrived on the project
+  page as plain text and the MCP rug-pull demo GIF arrived as its alt text,
+  leaving that section without its only visual. All of them are absolute
+  `github.com` and `raw.githubusercontent.com` URLs now.
+- **Three README links promised a tamper demo at a page that redirects.**
+  `matrixscroll.com/try` routes to `/docs/`. The demo is the browser verifier
+  at `/verify/`, which carries the Tamper sample control, so the inline links
+  point there. The `Try it` entry under Public proof links repeated the
+  verifier line above it and is now the MCP Trust Scanner at `/scan/`.
+- **`SECURITY.md` offered support for 0.2.x and 0.1.x.** A reader installing
+  the published release found their version missing from the table on the page
+  the PyPI sidebar links as the security policy.
+
 ## [0.6.2] - 2026-08-03
 
 Documentation and packaging metadata only. No code, CLI or wire-format changes,
@@ -271,6 +312,8 @@ Initial public release. Extracted from the SSX360 reference implementation.
 - Device id format: `MS-XXXX-XXXX` (SHA-256 of the raw public key, first 8 hex
   chars, uppercase).
 
+[0.6.3]: https://github.com/SSX360/matrixscroll/releases/tag/v0.6.3
+[0.6.2]: https://github.com/SSX360/matrixscroll/releases/tag/v0.6.2
 [0.6.1]: https://github.com/SSX360/matrixscroll/releases/tag/v0.6.1
 [0.6.0]: https://github.com/SSX360/matrixscroll/releases/tag/v0.6.0
 [0.5.1]: https://github.com/SSX360/matrixscroll/releases/tag/v0.5.1

{matrixscroll-0.6.2 → matrixscroll-0.6.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: matrixscroll
-Version: 0.6.2
+Version: 0.6.3
 Summary: Sign who authorized an AI agent's actions and verify it offline. Ed25519 envelopes for Git commits and MCP tool surfaces, with an optional ML-DSA/SLH-DSA overlay (FIPS 204/205).
 Project-URL: Homepage, https://matrixscroll.com
 Project-URL: Documentation, https://matrixscroll.com/docs/
@@ -13,7 +13,7 @@ Project-URL: Whitepaper, https://github.com/SSX360/matrixscroll/blob/main/docs/W
 Project-URL: Changelog, https://github.com/SSX360/matrixscroll/blob/main/CHANGELOG.md
 Project-URL: Discussions, https://github.com/SSX360/matrixscroll/discussions
 Project-URL: Security, https://github.com/SSX360/matrixscroll/blob/main/SECURITY.md
-Project-URL: GitHub Action, https://github.com/SSX360/matrixscroll-verify-action
+Project-URL: GitHub Action, https://github.com/SSX360/matrixscroll/tree/main/.github/actions/verify
 Project-URL: Tests, https://github.com/SSX360/matrixscroll/tree/main/tests
 Project-URL: Public Roadmap, https://github.com/SSX360/matrixscroll/blob/main/docs/ROADMAP_2026-07.md
 Project-URL: Hardware Status, https://github.com/SSX360/matrixscroll/blob/main/docs/hardware-provider.md
@@ -62,7 +62,7 @@ Signed provenance for agent-assisted Git commits, with offline Ed25519 verificat
 [![ci-unit](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml)
 [![PyPI](https://img.shields.io/pypi/v/matrixscroll)](https://pypi.org/project/matrixscroll/)
 [![Python](https://img.shields.io/pypi/pyversions/matrixscroll)](https://pypi.org/project/matrixscroll/)
-[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/SSX360/matrixscroll/blob/main/LICENSE)
 
 Matrix Scroll is an open protocol for cryptographically signed agent
 authorization: Ed25519 records for Git commits (L1), MCP tool surfaces (L2), and
@@ -74,10 +74,10 @@ bench-validated proof of concept (Jul 2026) sharing the same verifier contract,
 and the Pico 2 W / GMT130 display bring-up is a locked L2 Hardware prototype
 (Jul 2026). Neither is generally available.
 
-**Try it:** [matrixscroll.com/try](https://matrixscroll.com/try/) runs an offline
-tamper demo in the browser. **Codebase direction:** [`docs/DOCTRINE.md`](docs/DOCTRINE.md).
+**Try it:** [matrixscroll.com/verify](https://matrixscroll.com/verify/) runs an offline
+tamper demo in the browser. **Codebase direction:** [`docs/DOCTRINE.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/DOCTRINE.md).
 **146 tests**, Hypothesis-verified [security properties](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md),
-and [TLA+ formal models](formal/README.md).
+and [TLA+ formal models](https://github.com/SSX360/matrixscroll/blob/main/formal/README.md).
 
 **Authorization ladder:** L1 Code (commits), L2 Tools (MCP manifests), L3 Actions (agent runs), L4 Money (AP2, demo), L5 Silicon (2029+)
 
@@ -96,9 +96,9 @@ Matrix Scroll **maps to** and **produces evidence for** (never “required by”
 - **US Treasury FS-AI RMF (Feb 2026)**: traceability for agent actions in financial software.
 - **NIST SSDF**: provenance, change authorization, and release gate review.
 - **EU AI Act Article 12**: record-keeping readiness (high-risk obligations Dec 2027), not a live mandate claim.
-- **Five Eyes Agentic AI guidance (Apr 2026)**: linked crosswalk only: [`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json)
+- **Five Eyes Agentic AI guidance (Apr 2026)**: linked crosswalk only: [`controls/agentic_ai_controls.json`](https://github.com/SSX360/matrixscroll/blob/main/controls/agentic_ai_controls.json)
 
-POC 2 audit readiness: [`docs/POC2_AUDIT.md`](docs/POC2_AUDIT.md)
+POC 2 audit readiness: [`docs/POC2_AUDIT.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/POC2_AUDIT.md)
 
 ## Install the MCP server (headline path)
 
@@ -116,7 +116,7 @@ Agents sign commits in-loop via the **provenance-only** MCP server:
 ```
 
 ```bash
-pip install "matrixscroll[mcp]==0.6.2"
+pip install "matrixscroll[mcp]==0.6.3"
 matrixscroll-mcp   # stdio. Register in Cursor / Claude Desktop / VS Code
 ```
 
@@ -128,15 +128,15 @@ matrixscroll-mcp   # stdio. Register in Cursor / Claude Desktop / VS Code
 
 ### MCP Trust Scanner: catch a rug-pull in 60 seconds
 
-![MCP rug-pull detection demo](examples/demo/mcp-rugpull-demo.gif)
+![MCP rug-pull detection demo](https://raw.githubusercontent.com/SSX360/matrixscroll/main/examples/demo/mcp-rugpull-demo.gif)
 
-[Watch on asciinema](https://asciinema.org/a/rbCRkIcZnjNWmqZF) · cast file: [`examples/demo/mcp-rugpull-demo.cast`](examples/demo/mcp-rugpull-demo.cast)
+[Watch on asciinema](https://asciinema.org/a/rbCRkIcZnjNWmqZF) · cast file: [`examples/demo/mcp-rugpull-demo.cast`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/mcp-rugpull-demo.cast)
 
 Sign the tool surface. Verify at install. Offline Ed25519 manifests for MCP rug-pull detection.
 Zero cloud, zero signup, exit code 2 fails your CI.
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 
 # 1. Scan a live MCP server (stdio). Fingerprints every tool: name, description, input schema
 matrixscroll mcp scan --connect stdio --server-command "npx -y some-mcp-server" \
@@ -170,22 +170,22 @@ Gate it in CI. Fail the build on unsigned or drifted manifests with the reusable
 ```yaml
 jobs:
   mcp-gate:
-    uses: SSX360/matrixscroll-verify-action/.github/workflows/mcp-manifest-gate.yml@main
+    uses: SSX360/matrixscroll/.github/workflows/mcp-manifest-gate.yml@action-v1
     with:
       manifest: mcp/my-server.signed.json
       baseline: mcp/my-server.baseline.json
-      matrixscroll_version: "0.6.2"
+      matrixscroll_version: "0.6.3"
 ```
 
-Full scripted demo: [`examples/demo/mcp-rugpull-demo.sh`](examples/demo/mcp-rugpull-demo.sh)  
-Golden artifact (this repo's own MCP server, signed): [`examples/mcp/matrixscroll-mcp.signed.json`](examples/mcp/matrixscroll-mcp.signed.json)  
-Schema (CC0): [`schemas/ssx360.mcp-manifest.v1.json`](schemas/ssx360.mcp-manifest.v1.json)  
+Full scripted demo: [`examples/demo/mcp-rugpull-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/mcp-rugpull-demo.sh)  
+Golden artifact (this repo's own MCP server, signed): [`examples/mcp/matrixscroll-mcp.signed.json`](https://github.com/SSX360/matrixscroll/blob/main/examples/mcp/matrixscroll-mcp.signed.json)  
+Schema (CC0): [`schemas/ssx360.mcp-manifest.v1.json`](https://github.com/SSX360/matrixscroll/blob/main/schemas/ssx360.mcp-manifest.v1.json)  
 Browser demo: [matrixscroll.com/scan](https://matrixscroll.com/scan/)
 
 ## Also available: CLI and hooks
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 matrixscroll hook-install
 export MATRIXSCROLL_ACTOR_TYPE=agent
 export MATRIXSCROLL_TOOL=agent-runner
@@ -214,10 +214,10 @@ Git under the hood; governance on top. **Not a Git replacement.**
 matrixscroll scroll commit -m "feat: governed commit"
 ```
 
-See [`docs/commercial/SSX360_SCROLL.md`](docs/commercial/SSX360_SCROLL.md).
+See [`docs/commercial/SSX360_SCROLL.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/commercial/SSX360_SCROLL.md).
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
-[`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and
+[`examples/demo/agent-commit-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/agent-commit-demo.sh).
 
 ---
 
@@ -251,7 +251,7 @@ canonical UTF-8 JSON bytes (see [`SPEC.md`](https://github.com/SSX360/matrixscro
 
 ## Honest limits
 
-- Shipping now: PyPI `matrixscroll==0.6.2`, Git post-commit hooks,
+- Shipping now: PyPI `matrixscroll==0.6.3`, Git post-commit hooks,
   `matrixscroll sign-action`, `matrixscroll scroll commit` (thin wrapper),
   `matrixscroll envelope-verify`, Scroll Gate PR verification (partial SLSA L1–2),
   verifier, the GitHub Action, and a USB CDC host transport for the SE050
@@ -305,14 +305,15 @@ for pilot evaluation, not GA.
 
 Install the SDK and hooks in your repo, publish commit envelopes to
 `refs/notes/matrixscroll` before PR review, and use
-`SSX360/matrixscroll-verify-action@v1` to verify the full PR commit range in
-GitHub Actions. Protected branches can then require Matrix Scroll proof
+`SSX360/matrixscroll/.github/actions/verify@action-v1` to verify the full PR
+commit range in GitHub Actions. Protected branches can then require Matrix
+Scroll proof
 alongside your existing scanners, branch protection, and build attestations.
 
 ## Quickstart (CLI)
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 matrixscroll hook-install
 matrixscroll hook-status
 
@@ -323,10 +324,10 @@ git commit -m "feat: agent-assisted change"
 matrixscroll envelope-verify "$(git rev-parse HEAD)"
 ```
 
-**Try it in the browser:** [matrixscroll.com/try](https://matrixscroll.com/try/)
+**Try it in the browser:** [matrixscroll.com/verify](https://matrixscroll.com/verify/)
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
-[`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and run
+[`examples/demo/agent-commit-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/agent-commit-demo.sh).
 
 ## CI verify
 
@@ -336,12 +337,12 @@ See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
 - uses: actions/checkout@v4
   with:
     fetch-depth: 0
-- uses: SSX360/matrixscroll-verify-action@v1
+- uses: SSX360/matrixscroll/.github/actions/verify@action-v1
   with:
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.6.2"
+    matrixscroll-version: "0.6.3"
     require-mode: emulated
 ```
 
@@ -356,20 +357,20 @@ git push origin refs/notes/matrixscroll
 - uses: actions/checkout@v4
   with:
     fetch-depth: 0
-- uses: SSX360/matrixscroll-verify-action@v1
+- uses: SSX360/matrixscroll/.github/actions/verify@action-v1
   with:
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.6.2"
+    matrixscroll-version: "0.6.3"
     summary-output: provenance-summary.json
 ```
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
-[`examples/ci/protected-branch.yml`](examples/ci/protected-branch.yml).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and
+[`examples/ci/protected-branch.yml`](https://github.com/SSX360/matrixscroll/blob/main/examples/ci/protected-branch.yml).
 
 The `--require-mode`, `--trusted-keys`, and actor or delegation policy checks
-ship in the current release line; examples in this README pin `0.6.2`.
+ship in the current release line; examples in this README pin `0.6.3`.
 
 ## Security: Ed25519 via cryptography
 
@@ -377,7 +378,7 @@ Ed25519 signing, verification, and key generation use the [`cryptography`](https
 package (required dependency, `>=42.0`). Official wheels ship native crypto
 backends (OpenSSL + Rust components), so no Rust toolchain for users. All
 primitives are centralized in `matrixscroll/crypto_backend.py`; see
-[`docs/CRYPTO_BACKEND.md`](docs/CRYPTO_BACKEND.md).
+[`docs/CRYPTO_BACKEND.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/CRYPTO_BACKEND.md).
 
 ## Why it is different from Sigstore
 
@@ -393,13 +394,13 @@ when they preserve the same pure Ed25519 byte contract.
 ## Public proof links
 
 - Browser verifier: <https://matrixscroll.com/verify/>
-- Try it (quickstart + tamper demo): <https://matrixscroll.com/try/>
+- MCP Trust Scanner (browser, offline): <https://matrixscroll.com/scan/>
 - Documentation: <https://matrixscroll.com/docs/>
 - Specification: [`SPEC.md`](https://github.com/SSX360/matrixscroll/blob/main/SPEC.md)
 - Commit envelope schema: [`schemas/commit-envelope.v1.json`](https://github.com/SSX360/matrixscroll/blob/main/schemas/commit-envelope.v1.json)
-- Whitepaper: [`docs/WHITEPAPER.md`](docs/WHITEPAPER.md)
+- Whitepaper: [`docs/WHITEPAPER.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/WHITEPAPER.md)
 - Conformance vectors: [`vectors/`](https://github.com/SSX360/matrixscroll/tree/main/vectors/)
-- GitHub Action: <https://github.com/SSX360/matrixscroll-verify-action>
+- GitHub Action: <https://github.com/SSX360/matrixscroll/tree/main/.github/actions/verify>
 - Agentic AI controls: [`docs/AGENTIC_AI_SECURITY.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/AGENTIC_AI_SECURITY.md)
 - Site: <https://matrixscroll.com> · Browser verifier: <https://matrixscroll.com/verify/>
 - Hardware prototype status: [`docs/hardware-provider.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/hardware-provider.md) (bench-validated; not GA)
@@ -408,7 +409,7 @@ when they preserve the same pure Ed25519 byte contract.
 ## Python API
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 ```
 
 ```python
@@ -507,9 +508,9 @@ implementations in Rust, Go, TypeScript, and embedded C. Run them against
 ## Agentic AI guidance proof
 
 The repo includes a machine-readable control matrix at
-[`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json), an
+[`controls/agentic_ai_controls.json`](https://github.com/SSX360/matrixscroll/blob/main/controls/agentic_ai_controls.json), an
 example bounded-agent evidence manifest at
-[`examples/agentic_ai_evidence_manifest.json`](examples/agentic_ai_evidence_manifest.json),
+[`examples/agentic_ai_evidence_manifest.json`](https://github.com/SSX360/matrixscroll/blob/main/examples/agentic_ai_evidence_manifest.json),
 and executable checks in `tests/test_agentic_guidance.py`.
 
 ## Model Context Protocol (MCP) Server
@@ -521,7 +522,7 @@ The MCP server exposes **provenance verbs** (`create_envelope`, `verify_envelope
 Install and register in Cursor / Claude Desktop / VS Code:
 
 ```bash
-pip install "matrixscroll[mcp]==0.6.2"
+pip install "matrixscroll[mcp]==0.6.3"
 matrixscroll-mcp   # stdio
 ```
 
@@ -544,7 +545,7 @@ Ask PyPI directly:
 
 ```bash
 curl -H "Accept: application/vnd.pypi.integrity.v1+json" \
-  https://pypi.org/integrity/matrixscroll/0.6.2/matrixscroll-0.6.2-py3-none-any.whl/provenance
+  https://pypi.org/integrity/matrixscroll/0.6.3/matrixscroll-0.6.3-py3-none-any.whl/provenance
 ```
 
 The response names the publisher, and it should say exactly this:
@@ -559,7 +560,7 @@ publisher, the workflow, or the digest differs from what you expect, do not
 install the file.
 
 The human-readable view is on the
-[PyPI project page](https://pypi.org/project/matrixscroll/0.6.2/), where files
+[PyPI project page](https://pypi.org/project/matrixscroll/0.6.3/), where files
 built with attestations are marked as verified.
 
 This matters more here than for most packages. A tool that sells offline
@@ -568,7 +569,7 @@ else.
 
 ## Security
 
-See [`SECURITY.md`](SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md).
+See [`SECURITY.md`](https://github.com/SSX360/matrixscroll/blob/main/SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md).
 Report vulnerabilities privately to
 **security@matrixscroll.com** or via a GitHub Security Advisory.
 

{matrixscroll-0.6.2 → matrixscroll-0.6.3}/README.md

@@ -5,7 +5,7 @@ Signed provenance for agent-assisted Git commits, with offline Ed25519 verificat
 [![ci-unit](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml)
 [![PyPI](https://img.shields.io/pypi/v/matrixscroll)](https://pypi.org/project/matrixscroll/)
 [![Python](https://img.shields.io/pypi/pyversions/matrixscroll)](https://pypi.org/project/matrixscroll/)
-[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/SSX360/matrixscroll/blob/main/LICENSE)
 
 Matrix Scroll is an open protocol for cryptographically signed agent
 authorization: Ed25519 records for Git commits (L1), MCP tool surfaces (L2), and
@@ -17,10 +17,10 @@ bench-validated proof of concept (Jul 2026) sharing the same verifier contract,
 and the Pico 2 W / GMT130 display bring-up is a locked L2 Hardware prototype
 (Jul 2026). Neither is generally available.
 
-**Try it:** [matrixscroll.com/try](https://matrixscroll.com/try/) runs an offline
-tamper demo in the browser. **Codebase direction:** [`docs/DOCTRINE.md`](docs/DOCTRINE.md).
+**Try it:** [matrixscroll.com/verify](https://matrixscroll.com/verify/) runs an offline
+tamper demo in the browser. **Codebase direction:** [`docs/DOCTRINE.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/DOCTRINE.md).
 **146 tests**, Hypothesis-verified [security properties](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md),
-and [TLA+ formal models](formal/README.md).
+and [TLA+ formal models](https://github.com/SSX360/matrixscroll/blob/main/formal/README.md).
 
 **Authorization ladder:** L1 Code (commits), L2 Tools (MCP manifests), L3 Actions (agent runs), L4 Money (AP2, demo), L5 Silicon (2029+)
 
@@ -39,9 +39,9 @@ Matrix Scroll **maps to** and **produces evidence for** (never “required by”
 - **US Treasury FS-AI RMF (Feb 2026)**: traceability for agent actions in financial software.
 - **NIST SSDF**: provenance, change authorization, and release gate review.
 - **EU AI Act Article 12**: record-keeping readiness (high-risk obligations Dec 2027), not a live mandate claim.
-- **Five Eyes Agentic AI guidance (Apr 2026)**: linked crosswalk only: [`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json)
+- **Five Eyes Agentic AI guidance (Apr 2026)**: linked crosswalk only: [`controls/agentic_ai_controls.json`](https://github.com/SSX360/matrixscroll/blob/main/controls/agentic_ai_controls.json)
 
-POC 2 audit readiness: [`docs/POC2_AUDIT.md`](docs/POC2_AUDIT.md)
+POC 2 audit readiness: [`docs/POC2_AUDIT.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/POC2_AUDIT.md)
 
 ## Install the MCP server (headline path)
 
@@ -59,7 +59,7 @@ Agents sign commits in-loop via the **provenance-only** MCP server:
 ```
 
 ```bash
-pip install "matrixscroll[mcp]==0.6.2"
+pip install "matrixscroll[mcp]==0.6.3"
 matrixscroll-mcp   # stdio. Register in Cursor / Claude Desktop / VS Code
 ```
 
@@ -71,15 +71,15 @@ matrixscroll-mcp   # stdio. Register in Cursor / Claude Desktop / VS Code
 
 ### MCP Trust Scanner: catch a rug-pull in 60 seconds
 
-![MCP rug-pull detection demo](examples/demo/mcp-rugpull-demo.gif)
+![MCP rug-pull detection demo](https://raw.githubusercontent.com/SSX360/matrixscroll/main/examples/demo/mcp-rugpull-demo.gif)
 
-[Watch on asciinema](https://asciinema.org/a/rbCRkIcZnjNWmqZF) · cast file: [`examples/demo/mcp-rugpull-demo.cast`](examples/demo/mcp-rugpull-demo.cast)
+[Watch on asciinema](https://asciinema.org/a/rbCRkIcZnjNWmqZF) · cast file: [`examples/demo/mcp-rugpull-demo.cast`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/mcp-rugpull-demo.cast)
 
 Sign the tool surface. Verify at install. Offline Ed25519 manifests for MCP rug-pull detection.
 Zero cloud, zero signup, exit code 2 fails your CI.
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 
 # 1. Scan a live MCP server (stdio). Fingerprints every tool: name, description, input schema
 matrixscroll mcp scan --connect stdio --server-command "npx -y some-mcp-server" \
@@ -113,22 +113,22 @@ Gate it in CI. Fail the build on unsigned or drifted manifests with the reusable
 ```yaml
 jobs:
   mcp-gate:
-    uses: SSX360/matrixscroll-verify-action/.github/workflows/mcp-manifest-gate.yml@main
+    uses: SSX360/matrixscroll/.github/workflows/mcp-manifest-gate.yml@action-v1
     with:
       manifest: mcp/my-server.signed.json
       baseline: mcp/my-server.baseline.json
-      matrixscroll_version: "0.6.2"
+      matrixscroll_version: "0.6.3"
 ```
 
-Full scripted demo: [`examples/demo/mcp-rugpull-demo.sh`](examples/demo/mcp-rugpull-demo.sh)  
-Golden artifact (this repo's own MCP server, signed): [`examples/mcp/matrixscroll-mcp.signed.json`](examples/mcp/matrixscroll-mcp.signed.json)  
-Schema (CC0): [`schemas/ssx360.mcp-manifest.v1.json`](schemas/ssx360.mcp-manifest.v1.json)  
+Full scripted demo: [`examples/demo/mcp-rugpull-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/mcp-rugpull-demo.sh)  
+Golden artifact (this repo's own MCP server, signed): [`examples/mcp/matrixscroll-mcp.signed.json`](https://github.com/SSX360/matrixscroll/blob/main/examples/mcp/matrixscroll-mcp.signed.json)  
+Schema (CC0): [`schemas/ssx360.mcp-manifest.v1.json`](https://github.com/SSX360/matrixscroll/blob/main/schemas/ssx360.mcp-manifest.v1.json)  
 Browser demo: [matrixscroll.com/scan](https://matrixscroll.com/scan/)
 
 ## Also available: CLI and hooks
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 matrixscroll hook-install
 export MATRIXSCROLL_ACTOR_TYPE=agent
 export MATRIXSCROLL_TOOL=agent-runner
@@ -157,10 +157,10 @@ Git under the hood; governance on top. **Not a Git replacement.**
 matrixscroll scroll commit -m "feat: governed commit"
 ```
 
-See [`docs/commercial/SSX360_SCROLL.md`](docs/commercial/SSX360_SCROLL.md).
+See [`docs/commercial/SSX360_SCROLL.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/commercial/SSX360_SCROLL.md).
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
-[`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and
+[`examples/demo/agent-commit-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/agent-commit-demo.sh).
 
 ---
 
@@ -194,7 +194,7 @@ canonical UTF-8 JSON bytes (see [`SPEC.md`](https://github.com/SSX360/matrixscro
 
 ## Honest limits
 
-- Shipping now: PyPI `matrixscroll==0.6.2`, Git post-commit hooks,
+- Shipping now: PyPI `matrixscroll==0.6.3`, Git post-commit hooks,
   `matrixscroll sign-action`, `matrixscroll scroll commit` (thin wrapper),
   `matrixscroll envelope-verify`, Scroll Gate PR verification (partial SLSA L1–2),
   verifier, the GitHub Action, and a USB CDC host transport for the SE050
@@ -248,14 +248,15 @@ for pilot evaluation, not GA.
 
 Install the SDK and hooks in your repo, publish commit envelopes to
 `refs/notes/matrixscroll` before PR review, and use
-`SSX360/matrixscroll-verify-action@v1` to verify the full PR commit range in
-GitHub Actions. Protected branches can then require Matrix Scroll proof
+`SSX360/matrixscroll/.github/actions/verify@action-v1` to verify the full PR
+commit range in GitHub Actions. Protected branches can then require Matrix
+Scroll proof
 alongside your existing scanners, branch protection, and build attestations.
 
 ## Quickstart (CLI)
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 matrixscroll hook-install
 matrixscroll hook-status
 
@@ -266,10 +267,10 @@ git commit -m "feat: agent-assisted change"
 matrixscroll envelope-verify "$(git rev-parse HEAD)"
 ```
 
-**Try it in the browser:** [matrixscroll.com/try](https://matrixscroll.com/try/)
+**Try it in the browser:** [matrixscroll.com/verify](https://matrixscroll.com/verify/)
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
-[`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and run
+[`examples/demo/agent-commit-demo.sh`](https://github.com/SSX360/matrixscroll/blob/main/examples/demo/agent-commit-demo.sh).
 
 ## CI verify
 
@@ -279,12 +280,12 @@ See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
 - uses: actions/checkout@v4
   with:
     fetch-depth: 0
-- uses: SSX360/matrixscroll-verify-action@v1
+- uses: SSX360/matrixscroll/.github/actions/verify@action-v1
   with:
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.6.2"
+    matrixscroll-version: "0.6.3"
     require-mode: emulated
 ```
 
@@ -299,20 +300,20 @@ git push origin refs/notes/matrixscroll
 - uses: actions/checkout@v4
   with:
     fetch-depth: 0
-- uses: SSX360/matrixscroll-verify-action@v1
+- uses: SSX360/matrixscroll/.github/actions/verify@action-v1
   with:
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.6.2"
+    matrixscroll-version: "0.6.3"
     summary-output: provenance-summary.json
 ```
 
-See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
-[`examples/ci/protected-branch.yml`](examples/ci/protected-branch.yml).
+See [`docs/quickstart-git.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/quickstart-git.md) and
+[`examples/ci/protected-branch.yml`](https://github.com/SSX360/matrixscroll/blob/main/examples/ci/protected-branch.yml).
 
 The `--require-mode`, `--trusted-keys`, and actor or delegation policy checks
-ship in the current release line; examples in this README pin `0.6.2`.
+ship in the current release line; examples in this README pin `0.6.3`.
 
 ## Security: Ed25519 via cryptography
 
@@ -320,7 +321,7 @@ Ed25519 signing, verification, and key generation use the [`cryptography`](https
 package (required dependency, `>=42.0`). Official wheels ship native crypto
 backends (OpenSSL + Rust components), so no Rust toolchain for users. All
 primitives are centralized in `matrixscroll/crypto_backend.py`; see
-[`docs/CRYPTO_BACKEND.md`](docs/CRYPTO_BACKEND.md).
+[`docs/CRYPTO_BACKEND.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/CRYPTO_BACKEND.md).
 
 ## Why it is different from Sigstore
 
@@ -336,13 +337,13 @@ when they preserve the same pure Ed25519 byte contract.
 ## Public proof links
 
 - Browser verifier: <https://matrixscroll.com/verify/>
-- Try it (quickstart + tamper demo): <https://matrixscroll.com/try/>
+- MCP Trust Scanner (browser, offline): <https://matrixscroll.com/scan/>
 - Documentation: <https://matrixscroll.com/docs/>
 - Specification: [`SPEC.md`](https://github.com/SSX360/matrixscroll/blob/main/SPEC.md)
 - Commit envelope schema: [`schemas/commit-envelope.v1.json`](https://github.com/SSX360/matrixscroll/blob/main/schemas/commit-envelope.v1.json)
-- Whitepaper: [`docs/WHITEPAPER.md`](docs/WHITEPAPER.md)
+- Whitepaper: [`docs/WHITEPAPER.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/WHITEPAPER.md)
 - Conformance vectors: [`vectors/`](https://github.com/SSX360/matrixscroll/tree/main/vectors/)
-- GitHub Action: <https://github.com/SSX360/matrixscroll-verify-action>
+- GitHub Action: <https://github.com/SSX360/matrixscroll/tree/main/.github/actions/verify>
 - Agentic AI controls: [`docs/AGENTIC_AI_SECURITY.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/AGENTIC_AI_SECURITY.md)
 - Site: <https://matrixscroll.com> · Browser verifier: <https://matrixscroll.com/verify/>
 - Hardware prototype status: [`docs/hardware-provider.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/hardware-provider.md) (bench-validated; not GA)
@@ -351,7 +352,7 @@ when they preserve the same pure Ed25519 byte contract.
 ## Python API
 
 ```bash
-pip install "matrixscroll==0.6.2"
+pip install "matrixscroll==0.6.3"
 ```
 
 ```python
@@ -450,9 +451,9 @@ implementations in Rust, Go, TypeScript, and embedded C. Run them against
 ## Agentic AI guidance proof
 
 The repo includes a machine-readable control matrix at
-[`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json), an
+[`controls/agentic_ai_controls.json`](https://github.com/SSX360/matrixscroll/blob/main/controls/agentic_ai_controls.json), an
 example bounded-agent evidence manifest at
-[`examples/agentic_ai_evidence_manifest.json`](examples/agentic_ai_evidence_manifest.json),
+[`examples/agentic_ai_evidence_manifest.json`](https://github.com/SSX360/matrixscroll/blob/main/examples/agentic_ai_evidence_manifest.json),
 and executable checks in `tests/test_agentic_guidance.py`.
 
 ## Model Context Protocol (MCP) Server
@@ -464,7 +465,7 @@ The MCP server exposes **provenance verbs** (`create_envelope`, `verify_envelope
 Install and register in Cursor / Claude Desktop / VS Code:
 
 ```bash
-pip install "matrixscroll[mcp]==0.6.2"
+pip install "matrixscroll[mcp]==0.6.3"
 matrixscroll-mcp   # stdio
 ```
 
@@ -487,7 +488,7 @@ Ask PyPI directly:
 
 ```bash
 curl -H "Accept: application/vnd.pypi.integrity.v1+json" \
-  https://pypi.org/integrity/matrixscroll/0.6.2/matrixscroll-0.6.2-py3-none-any.whl/provenance
+  https://pypi.org/integrity/matrixscroll/0.6.3/matrixscroll-0.6.3-py3-none-any.whl/provenance
 ```
 
 The response names the publisher, and it should say exactly this:
@@ -502,7 +503,7 @@ publisher, the workflow, or the digest differs from what you expect, do not
 install the file.
 
 The human-readable view is on the
-[PyPI project page](https://pypi.org/project/matrixscroll/0.6.2/), where files
+[PyPI project page](https://pypi.org/project/matrixscroll/0.6.3/), where files
 built with attestations are marked as verified.
 
 This matters more here than for most packages. A tool that sells offline
@@ -511,7 +512,7 @@ else.
 
 ## Security
 
-See [`SECURITY.md`](SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md).
+See [`SECURITY.md`](https://github.com/SSX360/matrixscroll/blob/main/SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](https://github.com/SSX360/matrixscroll/blob/main/docs/SECURITY_PROPERTIES.md).
 Report vulnerabilities privately to
 **security@matrixscroll.com** or via a GitHub Security Advisory.
 

{matrixscroll-0.6.2 → matrixscroll-0.6.3}/SECURITY.md

@@ -40,8 +40,8 @@ Out of scope:
 
 | Version | Status |
 | ------- | ------ |
-| 0.2.x   | Active development; security fixes on patch releases. |
-| 0.1.x   | Legacy; upgrade to 0.2.x for Git hooks and commit envelopes. |
+| 0.6.x   | Active development. Security fixes are released as patch versions. The published release is 0.6.3. |
+| 0.5.x and earlier | Legacy. Upgrade to 0.6.x for the post-quantum overlay and the in-repo verify action. |
 
 Pre-1.0 there is no extended support window. Pin to a known-good version
 in production until 1.0.