Skip to content

chore(release): agentrust-trace 0.3.0#75

Merged
imran-siddique merged 1 commit into
mainfrom
chore/release-0.3.0
Jun 30, 2026
Merged

chore(release): agentrust-trace 0.3.0#75
imran-siddique merged 1 commit into
mainfrom
chore/release-0.3.0

Conversation

@imran-siddique

Copy link
Copy Markdown
Contributor
  • Security: verify_record now requires an explicit trusted key (no self-verification from the embedded cnf.jwk); use allow_embedded_key=True to opt in.
  • Security: verification enforces freshness (iat/max_age_seconds, default 24h) and an optional expected_nonce; JWK kty/crv are validated.
  • BREAKING: canonicalization is now RFC 8785 (JCS). Trust records are NOT cross-verifiable with 0.2.0 (the prior json.dumps canonicalization was non-conformant).

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@imran-siddique imran-siddique merged commit 5082c88 into main Jun 30, 2026
4 checks passed
@imran-siddique imran-siddique deleted the chore/release-0.3.0 branch June 30, 2026 20:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant