Skip to main content
Attestixby VibeTensor
Changelog

Release history.

Attestix is in active development. Every release is tagged on GitHub, published to PyPI, and accompanied by a full changelog. For detailed technical notes see the repository releases page.

  1. v0.4.3

    New website design and current offline verifier guidance

    • Previously drafted homepage and site-wide layout integrated with current security fixes
    • Browser verifier upgraded to npm attestix 0.4.2 with boundary tests retained
    • Registry installation guidance, offline hash example and console-tour keyboard handling corrected
  2. v0.4.2

    Readiness hardening and clarified trust boundaries

    • Bound untrusted identity, credential and portability inputs
    • Preserve credential trust-key binding and fail-closed default tenancy
    • Scope local erasure to managed records and parseable local backups
    • Clarify governance drafts, verification profiles and deployment acceptance
  3. v0.4.1

    Post-quantum hybrid signing, verification hardening, fail-closed API auth

    • Post-quantum / hybrid signing (ML-DSA-65 + Ed25519, optional [pqc] extra)
    • Credential verification key-binding hardening (decode key from the trust anchor)
    • Fail-closed REST API auth when ATTESTIX_API_KEY is unset
    • Portable audit-chain re-verification fix (preserve the chain tenant on import)
    • 585 passing tests (494 functional + 91 conformance)
  4. v0.4.0

    First stable 0.4.0: embeddable storage, signing and portability foundation

    • First stable 0.4.0: embeddable storage, signing and portability foundation
    • Pluggable storage + signer protocols (Postgres / HSM-KMS without forking)
    • Self-hosted portability bundle export/import
  5. v0.3.0

    Real framework integrations, CI/CD, delegation chain auth fix

    • Real LangChain integration via BaseCallbackHandler
    • Real OpenAI Agents SDK integration via MCPServerStdio
    • Real CrewAI integration via MCPServerAdapter
    • Critical delegation chain auth bypass fix (parent token verification, capability attenuation)
    • Article 43 Annex III differentiation for conformity assessment
    • 7 framework integration examples, 15 integration tests
    • Security batch: SSRF, API timing, exception leaks, display_name sanitisation, key file permissions
    • GitHub Actions CI/CD (pytest matrix on Python 3.10-3.13, lint, security, publish)
    • 4 HIGH severity security fixes, PyJWT CVE mitigation, dependency pinning
    • 358 tests total (194 unit + 45 e2e + 15 integration + 14 tool + 91 conformance benchmarks + 11 security)
  6. v0.2.5

    EAS schema correctness, hardened Attested event decoding

    • EAS schema UID correctness for Base L2 testnet
    • Hardened Attested event decoding
    • Additional conformance benchmarks across W3C VC, DID, UCAN
  7. v0.2.0

    Blockchain anchoring + conformance benchmarks

    • Blockchain anchoring to Base L2 testnet via Ethereum Attestation Service
    • Merkle batch anchoring for cost efficiency
    • 91 conformance benchmark tests validating RFC 8032, W3C VC, W3C DID, UCAN, MCP
    • 284 tests total at release (193 functional + 91 conformance)
  8. v0.1.0

    First public release

    • MCP tools across 9 modules
    • 44 REST endpoints
    • W3C Verifiable Credentials 1.1 with Ed25519Signature2020
    • W3C DID 1.0 (did:key, did:web)
    • UCAN v0.9 delegation
    • EU AI Act automation: Articles 5, 9-15, 43, 72, 73 plus Annex III and Annex V
    • Local record erasure tooling
    • MCP 1.8+ protocol compliance
    • Apache 2.0 license