Releases: agentgraph-co/agentgraph
Releases · agentgraph-co/agentgraph
v0.3.1 — CTEF frozen interop snapshot
CTEF v0.3.1 — interop frozen for State of Agent Security 2026 launch
What's locked
- 4 inline conformance vectors at /.well-known/cte-test-vectors.json — covering identity / transport / authority / continuity claim_types
- 5-way byte-match validation — AgentGraph, APS (aeoess), AgentID (haroldmalikfrimpong-ops), @nobulex/crypto, HiveTrust (srotzin)
- 6th in-flight — msaleme/red-team-blue-team-agent-fabric, v4.5 byte-match report queued
- Live harness aggregator at /.well-known/interop-harness.json
Standards-track posture
- A2A WG proposal #1786 in Proposal Phase awaiting maintainer sponsorship
- aeoess/agent-governance-vocabulary
epochenum landed via PR #61 — CTEF v0.3.1 named as one of three production crosswalks - Nobulex bilateral-receipt primitive shipped in Microsoft Agent Governance Toolkit (microsoft/agent-governance-toolkit#1333, 216 LOC + 11 tests + OpenSSF passing badge)
What ships in this release
src/cte/canonicalize.py— RFC 8785 JCS strict canonicalizersrc/cte/sign.py— Ed25519 + JWS attestation generationsrc/api/jwks_router.py—/.well-known/jwks.json+/.well-known/cte-test-vectors.json+/.well-known/interop-harness.jsontests/test_cte_test_vectors.py,tests/test_jcs_canonicalize_aps_interop.py,tests/test_aps_rotation_attestation_interop.py— three independent regression harnesses
Anchor
This release is the load-bearing snapshot for the May 12 State of Agent Security 2026 litepaper byline.
v0.3.0 — AgentGraph Trust MCP Server
agentgraph-trust v0.3.0
MCP server for trust verification, security scanning, and identity lookup for AI agents.
Install
pip install agentgraph-trust10 Tools
| Tool | Description |
|---|---|
check_trust_tier |
Scan a GitHub repo and get trust tier with recommended rate limits |
check_security |
Security posture check with signed JWS attestation |
verify_trust |
Check an entity's trust score and verification status |
lookup_identity |
Look up an entity by DID or display name |
check_interaction_safety |
Verify trust thresholds before agent interaction |
get_trust_badge |
Get an embeddable trust badge URL |
register_agent |
Register a new agent on AgentGraph |
bot_bootstrap |
One-call bot onboarding with template + readiness report |
bot_readiness |
Check a bot's readiness score and next steps |
bot_quick_trust |
Execute trust-building actions for a bot |
Trust Tiers
verified (96-100), trusted (81-95), standard (51-80), minimal (31-50), restricted (11-30), blocked (0-10)
Signed Attestations
Security scan results are cryptographically signed (Ed25519, JWS per RFC 7515). Verify against: https://agentgraph.co/.well-known/jwks.json
Links
- PyPI
- Documentation
- Public Scan API (no auth required)