techrevati-runtime 0.4.0__tar.gz → 0.5.0__tar.gz

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/.github/workflows/ci.yml

@@ -21,17 +21,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12', '3.13']
+        python-version: ['3.11', '3.12', '3.13', '3.14']
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -185,17 +185,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12', '3.13']
+        python-version: ['3.11', '3.12', '3.13', '3.14']
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -223,6 +223,31 @@ jobs:
           print(f'techrevati-runtime {runtime.__version__}')
           "
 
+  mcp-sdk-2:
+    name: MCP SDK 2.x adapter
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
+        with:
+          python-version: '3.13'
+
+      - name: Test the adapter against a real 2.x SDK
+        # The dev extra pins 1.x, so without this job the 2.x branch of the
+        # adapter would have no coverage.
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e . "mcp>=2,<3" pytest==9.2.0 pytest-asyncio==1.4.1.post1
+          python -m pytest tests/test_mcp_real.py tests/test_mcp.py -p no:cacheprovider
+
   zero-deps-smoke:
     name: Zero-deps smoke on Python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
@@ -231,17 +256,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12', '3.13']
+        python-version: ['3.11', '3.12', '3.13', '3.14']
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: ${{ matrix.python-version }}
 

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/.github/workflows/codeql.yml

@@ -30,8 +30,8 @@ jobs:
         language: [python]
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/.github/workflows/docs.yml

@@ -20,14 +20,14 @@ jobs:
     timeout-minutes: 10
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: '3.11'
 
@@ -55,14 +55,14 @@ jobs:
       contents: write
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: '3.11'
 

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/.github/workflows/release.yml

@@ -24,17 +24,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12', '3.13']
+        python-version: ['3.11', '3.12', '3.13', '3.14']
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python ${{ matrix.python-version }}
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -192,14 +192,14 @@ jobs:
       id-token: write
 
     steps:
-      # actions/checkout v4
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      # actions/checkout v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
 
       - name: Set up Python
-        # actions/setup-python v5
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
+        # actions/setup-python v7
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0
         with:
           python-version: '3.11'
 
@@ -263,9 +263,9 @@ jobs:
         run: python scripts/check_release_evidence.py dist
 
       - name: Create release
-        # softprops/action-gh-release v2.6.2 — the durable evidence record is
+        # softprops/action-gh-release v3.0.4 — the durable evidence record is
         # created before any index push, so a publish failure cannot lose it.
-        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3
         with:
           prerelease: ${{ contains(github.ref_name, 'rc') || contains(github.ref_name, 'dev') }}
           generate_release_notes: true

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.17
+    rev: v0.17.4
     hooks:
       - id: ruff
         args: [--fix]
@@ -16,7 +16,7 @@ repos:
       - id: check-merge-conflict
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v2.1.0
+    rev: v2.4.1
     hooks:
       - id: mypy
         additional_dependencies: []

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/CHANGELOG.md

@@ -2,6 +2,103 @@
 
 Author: Techrevati doo
 
+## 0.5.0 - 2026-11-06
+
+The hardening line: every defect below was reproduced by an executed proof before
+it was fixed. See [Migrating from 0.4.x](migrating-from-0.4.x.md) for what changes
+for existing callers.
+
+Added:
+
+- `run_tool` / `arun_tool` accept `args`, `timeout` (`ToolTimeoutError`), and
+  `idempotency_key`, which replays a completed tool call instead of repeating its
+  side effect (at-least-once).
+- `MaxRepeatedToolCallsLimit` stops an agent repeating the same tool call.
+- `run_turn_with_fallback` / `arun_turn_with_fallback` drive `provider_router`.
+- `arun_turn_stream(idempotency_key=...)`.
+- `session(handoff=...)` / `asession(handoff=...)` run on the worker a `Handoff`
+  reserved.
+- `agent.turn.completed` / `agent.turn.failed` events, `chat` spans,
+  `OpenTelemetryMetricsSink`, and the `gen_ai.client.inference.usage.*` counters.
+- MCP Python SDK 2.x support alongside 1.x, plus a per-call `timeout`.
+- Audit log `tip()`, `ChainTip`, and `verify_chain(expected_tip=...)`.
+- `AgentRegistry.evict_terminal()`, `TokenBucket.debit()`.
+- Audit purge markers, signed under the sink's key.
+- `AgentSession(audit_fail_closed=True)` refuses further actions with
+  `AuditWriteError` once the audit log cannot be written.
+- Python 3.14 support.
+
+Fixed, security and audit integrity:
+
+- Two audit writers on one SQLite file could wedge it and silently lose every later
+  record. Appends are now atomic and writers serialize into one chain.
+- Quadratic regular expressions in `PromptInjectionGuardrail` and `RedactPIIHook` let
+  untrusted content stall the event loop.
+- Prompt-injection and pattern guardrails were bypassed by any structured output,
+  because `str()` escaped the newlines their patterns match on.
+- A role name differing by case or an invisible character bypassed its deny list.
+- Async policy conditions always matched under `And` / `Or` and in sync `evaluate`.
+- The human-oversight gate accepted replayed, stale, spoofed, and invalid decisions,
+  and did not enforce its timeout on a hanging queue.
+- The oversight trail omitted the reason and action, and recorded nothing if a queue
+  raised. The compliance kit's log now receives oversight events.
+- Unserializable event content dropped audit records while the action proceeded, and
+  could suppress incident notification. Hashes of existing records are unchanged.
+- A deleted audit tail was not detected on a live sink.
+- Tampered rows crashed verification rather than reporting invalid. CSV export did
+  not escape timestamps. Purge compared timestamp strings across UTC offsets.
+- PII redaction skipped tuples, sets, dict keys, and bytes, and missed standard base64
+  keys and JWT headers. Combined patterns lost backreferences.
+
+Fixed, accounting and durability:
+
+- A turn that crossed a budget or usage limit, or whose `after_model` hook failed, was
+  missing from the checkpoint and from governance cost, so the retry paid again and
+  `MaxBudgetLimit` could never trip.
+- A replayed turn did not restore its spend, so a restart reset the budget.
+- Usage above a rate-limit bucket's capacity raised after the model call and lost the
+  turn.
+- Usage passed without `model=` was discarded, which disabled `UsageLimits`.
+- A failed SQLite write left a transaction open: every later write failed and reads
+  went stale until restart (`SqliteSaver`, `SqliteEventSink`, `SqliteUsageSink`).
+- Concurrent cold starts of a new SQLite file crashed with `IntegrityError`.
+- JSON-valid state with a lone surrogate failed on `SqliteSaver` and aborted the turn.
+- Pricing prefixes had no name boundary: `gpt-4` priced `gpt-4o-mini` and suppressed
+  the missing-price warning.
+- Cache writes could cost $0 on a tiered model. Float sums could falsely exceed a
+  budget at its exact boundary.
+
+Fixed, runtime behaviour:
+
+- `arun_turn_stream(timeout=)` cancelled the consumer's task, even after the consumer
+  had left the stream, because the timeout scope spanned a `yield`.
+- A hung half-open probe blocked the circuit indefinitely, a stale probe result could
+  close it, and it could stay half-open under sustained load despite successes.
+- Context-overflow errors containing a token count such as `14290` were classified as
+  rate limits, and digits inside identifiers as HTTP statuses.
+- Duplicate names in a router's `exclude` made every router return `None`.
+- A timed-out `pause_for_input` stranded the worker and made session exit raise.
+- `run_turn(timeout=)` lost context variables, including tracing context, in its
+  worker thread. A `TimeoutError` raised by user code was reported as the deadline.
+- Compaction identified messages by object identity, so a reused instance defeated
+  both limits, and it could delete the newest message.
+- `JsonOutputSpec` leaked `RecursionError` and `ValueError`, and accepted `NaN`.
+- Orphan spans were lost under a batch processor at exit. `OpenTelemetrySink.shutdown()`
+  closes them explicitly.
+- `execute_tool` spans lacked `gen_ai.tool.name`, tool spans stayed open after a
+  post-guardrail block or cancellation, and cache tokens never reached metrics.
+- Runtime exceptions did not survive `pickle` or `copy`.
+- `mkdocs build` failed with current `pymdown-extensions`; `mkdocstrings` is updated.
+
+Changed:
+
+- **Breaking:** `default_allow_unknown_roles` now defaults to `False`, so a role with no
+  config is denied.
+- A turn timeout now counts as a circuit-breaker failure, so a provider that hangs
+  opens the circuit.
+- Toolchain updated (ruff 0.17, mypy 2.4, pytest 9.2, hypothesis, OpenTelemetry 1.45,
+  and pinned actions for checkout, setup-python, and the release publisher).
+
 ## 0.4.0 - 2026-06-20
 
 The EU AI Act compliance line.

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: techrevati-runtime
-Version: 0.4.0
+Version: 0.5.0
 Summary: Async-aware runtime primitives for multi-step LLM agent loops.
 Author: Techrevati doo
 License-Expression: MIT
@@ -13,33 +13,34 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Provides-Extra: audit
-Requires-Dist: pip-audit==2.10.0; extra == 'audit'
+Requires-Dist: pip-audit==2.10.1; extra == 'audit'
 Provides-Extra: build
 Requires-Dist: build==1.5.0; extra == 'build'
 Requires-Dist: twine==6.2.0; extra == 'build'
 Provides-Extra: dev
-Requires-Dist: hypothesis==6.155.2; extra == 'dev'
-Requires-Dist: mcp==1.27.2; extra == 'dev'
-Requires-Dist: mypy==2.1.0; extra == 'dev'
-Requires-Dist: opentelemetry-api==1.42.1; extra == 'dev'
-Requires-Dist: opentelemetry-sdk==1.42.1; extra == 'dev'
-Requires-Dist: opentelemetry-semantic-conventions==0.63b1; extra == 'dev'
-Requires-Dist: pytest-asyncio==1.4.0; extra == 'dev'
+Requires-Dist: hypothesis==6.170.15; extra == 'dev'
+Requires-Dist: mcp==1.30.0; extra == 'dev'
+Requires-Dist: mypy==2.4.1; extra == 'dev'
+Requires-Dist: opentelemetry-api==1.45.2; extra == 'dev'
+Requires-Dist: opentelemetry-sdk==1.45.2; extra == 'dev'
+Requires-Dist: opentelemetry-semantic-conventions==0.66b2; extra == 'dev'
+Requires-Dist: pytest-asyncio==1.4.1.post1; extra == 'dev'
 Requires-Dist: pytest-cov==7.1.0; extra == 'dev'
-Requires-Dist: pytest-randomly==4.1.0; extra == 'dev'
-Requires-Dist: pytest==9.1.0; extra == 'dev'
-Requires-Dist: ruff==0.15.17; extra == 'dev'
+Requires-Dist: pytest-randomly==5.0.0; extra == 'dev'
+Requires-Dist: pytest==9.2.0; extra == 'dev'
+Requires-Dist: ruff==0.17.4; extra == 'dev'
 Provides-Extra: docs
 Requires-Dist: mkdocs==1.6.1; extra == 'docs'
-Requires-Dist: mkdocstrings-python==2.0.4; extra == 'docs'
-Requires-Dist: mkdocstrings[python]==1.0.4; extra == 'docs'
-Requires-Dist: ruff==0.15.17; extra == 'docs'
+Requires-Dist: mkdocstrings-python==2.0.10; extra == 'docs'
+Requires-Dist: mkdocstrings[python]==1.0.8; extra == 'docs'
+Requires-Dist: ruff==0.17.4; extra == 'docs'
 Provides-Extra: mcp
-Requires-Dist: mcp<2,>=1.0; extra == 'mcp'
+Requires-Dist: mcp<3,>=1.10; extra == 'mcp'
 Provides-Extra: otel
 Requires-Dist: opentelemetry-api<2,>=1.27; extra == 'otel'
 Requires-Dist: opentelemetry-sdk<2,>=1.27; extra == 'otel'
@@ -64,7 +65,7 @@ budget enforcement, role-based tool gating, guardrails, handoffs, policy
 evaluation, checkpointing, rate limiting, streaming, hooks, and telemetry
 integration.
 
-The package is currently `0.4.0`. The `0.x`
+The package is currently `0.5.0`. The `0.x`
 API surface is still unstable, so pin exact versions when you depend on a
 specific behavior.
 

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/README.md

@@ -8,7 +8,7 @@ budget enforcement, role-based tool gating, guardrails, handoffs, policy
 evaluation, checkpointing, rate limiting, streaming, hooks, and telemetry
 integration.
 
-The package is currently `0.4.0`. The `0.x`
+The package is currently `0.5.0`. The `0.x`
 API surface is still unstable, so pin exact versions when you depend on a
 specific behavior.
 

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/docs/api/orchestrator.md

@@ -7,5 +7,8 @@
         - AsyncOrchestrationSession
         - AgentSession
         - PermissionDeniedError
+        - AuditWriteError
+        - ToolTimeoutError
         - TurnTimeoutError
+        - DEFAULT_FAILOVER_SCENARIOS
         - MaxIterationsExceededError

techrevati_runtime-0.5.0/docs/api/otel.md

@@ -0,0 +1,64 @@
+# Telemetry Integration
+
+Requires `pip install 'techrevati-runtime[otel]'`.
+
+`OpenTelemetrySink` keeps one parent span open for the agent or phase
+lifecycle. Tool calls open child spans under that parent, and
+tool-scoped failures close only the tool span. Terminal session
+failures still close the parent span.
+
+Event details are omitted from spans by default because callers may put prompt
+fragments, tool arguments, or exception text into `AgentEvent.detail`. Use
+`OpenTelemetrySink(include_event_detail=True)` only after detail values are
+sanitized and telemetry retention is approved.
+
+## GenAI semantic conventions
+
+The sink emits OpenTelemetry GenAI semantic-convention signals:
+
+- **Spans** carry `gen_ai.operation.name`, `gen_ai.provider.name`, and
+  `gen_ai.agent.name`. An `invoke_agent {role}` span nests under the open
+  `invoke_workflow` span of its phase, when there is one. Tool calls are
+  `execute_tool {tool}` children with `gen_ai.tool.name` (concurrent calls to the
+  same tool each get their own span via a per-key LIFO stack). Model turns are
+  `chat {model}` client spans backdated by the measured duration.
+- **Token metrics** (`OpenTelemetryUsageSink`):
+  `gen_ai.client.inference.usage.input_tokens` (including cached tokens),
+  `.output_tokens`, `.cache_read.input_tokens` and `.cache_write.input_tokens`
+  counters, plus a `techrevati.cost.usd` counter (no standard GenAI cost metric
+  exists yet).
+- **Legacy token metric**: the conventions have removed `gen_ai.client.token.usage`.
+  It stays on by default so existing dashboards keep working; turn it off with
+  `OpenTelemetryUsageSink(emit_legacy_token_metric=False)` once they read the
+  counters.
+- **Duration metrics** (`OpenTelemetryMetricsSink`, an event sink):
+  `gen_ai.client.inference.duration` and `gen_ai.execute_tool.duration` histograms
+  in seconds, with `error.type` on failure. The conventions' bucket boundaries are
+  applied as an advisory on OpenTelemetry API versions that support it; older ones
+  use the SDK's default buckets.
+- **Message bodies**: if a caller places `gen_ai.input.messages` /
+  `gen_ai.output.messages` in `AgentEvent.data`, they are emitted as span events
+  of the same name — but only when `include_event_detail=True`, since message
+  content is sensitive. The runtime does not own the model call, so it never
+  fabricates these; they appear only when the caller supplies them.
+
+These conventions now live in the
+[`semantic-conventions-genai`](https://github.com/open-telemetry/semantic-conventions-genai)
+repository and are still marked *Development*, so names can change.
+
+Two required attributes cannot be known exactly by the runtime:
+
+- `gen_ai.provider.name`: the runtime does not make the model call. Pass the real
+  provider as `provider_name`; the default `techrevati` only marks the data's source.
+- `gen_ai.token.modality`: always `unknown`, as the conventions require when
+  `UsageSnapshot` does not split tokens by modality.
+
+## Process exit
+
+Spans still open at normal interpreter exit are ended with
+`error.type=abrupt_termination`. That hook does not run on a default SIGTERM,
+`os._exit` or a hard crash, and a span ended there only reaches the exporter if the
+`TracerProvider` shuts down afterwards, so create the provider before the first
+sink. For SIGTERM, or a provider created later, call `sink.shutdown()` yourself.
+
+::: techrevati.runtime.otel

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/docs/changelog.md

@@ -2,6 +2,103 @@
 
 Author: Techrevati doo
 
+## 0.5.0 - 2026-11-06
+
+The hardening line: every defect below was reproduced by an executed proof before
+it was fixed. See [Migrating from 0.4.x](migrating-from-0.4.x.md) for what changes
+for existing callers.
+
+Added:
+
+- `run_tool` / `arun_tool` accept `args`, `timeout` (`ToolTimeoutError`), and
+  `idempotency_key`, which replays a completed tool call instead of repeating its
+  side effect (at-least-once).
+- `MaxRepeatedToolCallsLimit` stops an agent repeating the same tool call.
+- `run_turn_with_fallback` / `arun_turn_with_fallback` drive `provider_router`.
+- `arun_turn_stream(idempotency_key=...)`.
+- `session(handoff=...)` / `asession(handoff=...)` run on the worker a `Handoff`
+  reserved.
+- `agent.turn.completed` / `agent.turn.failed` events, `chat` spans,
+  `OpenTelemetryMetricsSink`, and the `gen_ai.client.inference.usage.*` counters.
+- MCP Python SDK 2.x support alongside 1.x, plus a per-call `timeout`.
+- Audit log `tip()`, `ChainTip`, and `verify_chain(expected_tip=...)`.
+- `AgentRegistry.evict_terminal()`, `TokenBucket.debit()`.
+- Audit purge markers, signed under the sink's key.
+- `AgentSession(audit_fail_closed=True)` refuses further actions with
+  `AuditWriteError` once the audit log cannot be written.
+- Python 3.14 support.
+
+Fixed, security and audit integrity:
+
+- Two audit writers on one SQLite file could wedge it and silently lose every later
+  record. Appends are now atomic and writers serialize into one chain.
+- Quadratic regular expressions in `PromptInjectionGuardrail` and `RedactPIIHook` let
+  untrusted content stall the event loop.
+- Prompt-injection and pattern guardrails were bypassed by any structured output,
+  because `str()` escaped the newlines their patterns match on.
+- A role name differing by case or an invisible character bypassed its deny list.
+- Async policy conditions always matched under `And` / `Or` and in sync `evaluate`.
+- The human-oversight gate accepted replayed, stale, spoofed, and invalid decisions,
+  and did not enforce its timeout on a hanging queue.
+- The oversight trail omitted the reason and action, and recorded nothing if a queue
+  raised. The compliance kit's log now receives oversight events.
+- Unserializable event content dropped audit records while the action proceeded, and
+  could suppress incident notification. Hashes of existing records are unchanged.
+- A deleted audit tail was not detected on a live sink.
+- Tampered rows crashed verification rather than reporting invalid. CSV export did
+  not escape timestamps. Purge compared timestamp strings across UTC offsets.
+- PII redaction skipped tuples, sets, dict keys, and bytes, and missed standard base64
+  keys and JWT headers. Combined patterns lost backreferences.
+
+Fixed, accounting and durability:
+
+- A turn that crossed a budget or usage limit, or whose `after_model` hook failed, was
+  missing from the checkpoint and from governance cost, so the retry paid again and
+  `MaxBudgetLimit` could never trip.
+- A replayed turn did not restore its spend, so a restart reset the budget.
+- Usage above a rate-limit bucket's capacity raised after the model call and lost the
+  turn.
+- Usage passed without `model=` was discarded, which disabled `UsageLimits`.
+- A failed SQLite write left a transaction open: every later write failed and reads
+  went stale until restart (`SqliteSaver`, `SqliteEventSink`, `SqliteUsageSink`).
+- Concurrent cold starts of a new SQLite file crashed with `IntegrityError`.
+- JSON-valid state with a lone surrogate failed on `SqliteSaver` and aborted the turn.
+- Pricing prefixes had no name boundary: `gpt-4` priced `gpt-4o-mini` and suppressed
+  the missing-price warning.
+- Cache writes could cost $0 on a tiered model. Float sums could falsely exceed a
+  budget at its exact boundary.
+
+Fixed, runtime behaviour:
+
+- `arun_turn_stream(timeout=)` cancelled the consumer's task, even after the consumer
+  had left the stream, because the timeout scope spanned a `yield`.
+- A hung half-open probe blocked the circuit indefinitely, a stale probe result could
+  close it, and it could stay half-open under sustained load despite successes.
+- Context-overflow errors containing a token count such as `14290` were classified as
+  rate limits, and digits inside identifiers as HTTP statuses.
+- Duplicate names in a router's `exclude` made every router return `None`.
+- A timed-out `pause_for_input` stranded the worker and made session exit raise.
+- `run_turn(timeout=)` lost context variables, including tracing context, in its
+  worker thread. A `TimeoutError` raised by user code was reported as the deadline.
+- Compaction identified messages by object identity, so a reused instance defeated
+  both limits, and it could delete the newest message.
+- `JsonOutputSpec` leaked `RecursionError` and `ValueError`, and accepted `NaN`.
+- Orphan spans were lost under a batch processor at exit. `OpenTelemetrySink.shutdown()`
+  closes them explicitly.
+- `execute_tool` spans lacked `gen_ai.tool.name`, tool spans stayed open after a
+  post-guardrail block or cancellation, and cache tokens never reached metrics.
+- Runtime exceptions did not survive `pickle` or `copy`.
+- `mkdocs build` failed with current `pymdown-extensions`; `mkdocstrings` is updated.
+
+Changed:
+
+- **Breaking:** `default_allow_unknown_roles` now defaults to `False`, so a role with no
+  config is denied.
+- A turn timeout now counts as a circuit-breaker failure, so a provider that hangs
+  opens the circuit.
+- Toolchain updated (ruff 0.17, mypy 2.4, pytest 9.2, hypothesis, OpenTelemetry 1.45,
+  and pinned actions for checkout, setup-python, and the release publisher).
+
 ## 0.4.0 - 2026-06-20
 
 The EU AI Act compliance line.

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/docs/compliance/production-readiness.md

@@ -50,7 +50,7 @@ At plan creation, the runtime is already significantly hardened:
 - Runtime package name: `techrevati-runtime`.
 - Current release-candidate version: `0.3.0rc1`.
 - Runtime dependency policy: zero required runtime dependencies.
-- Supported Python versions: 3.11, 3.12, and 3.13.
+- Supported Python versions: 3.11, 3.12, 3.13, and 3.14.
 - Existing gates cover lint, formatting, strict typing, tests, coverage,
   package metadata, docs, branding, CI hardening, workflow pinning, release
   checks, public API checks, full-scope source hygiene for source, scripts,

{techrevati_runtime-0.4.0 → techrevati_runtime-0.5.0}/docs/compliance/remote-ci-validation.md

@@ -57,9 +57,9 @@ and must be collected again.
 
 The remote CI run must include:
 
-- test matrix for Python 3.11, 3.12, and 3.13,
-- build matrix for Python 3.11, 3.12, and 3.13,
-- zero-dependency wheel smoke for Python 3.11, 3.12, and 3.13,
+- test matrix for Python 3.11, 3.12, 3.13, and 3.14,
+- build matrix for Python 3.11, 3.12, 3.13, and 3.14,
+- zero-dependency wheel smoke for Python 3.11, 3.12, 3.13, and 3.14,
 - lint, format, strict typing, and full tests,
 - total and per-module coverage gates,
 - all verify-time guard scripts,