diff --git a/CHANGELOG.md b/CHANGELOG.md index 231d10e640..881aa46039 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,46 @@ # Changelog +## [Unreleased] - 2026-07-04 + +### Features +- feat(policy): Milestone-E production activation — GATE 3 auto-activation, authorization ALLOW path, code_executor invariant (8bc96607f, Tal Muskal, 14 hours ago) +- feat(policy): implement Milestone D — tool-layer enforcement gates (GATE 1/2/3 + genty seam) (f72c865f0, Tal Muskal, 17 hours ago) +- feat(policy): implement Milestone C — evidence producers (signed breakpoints, proxy + in-process attestation, attribution) (15f6e381d, Tal Muskal, 18 hours ago) +- feat(policy): implement Milestone B — configurable policy engine (trust-chain evaluator + authorization issuance) (8917086be, Tal Muskal, 20 hours ago) +- feat(policy): Milestone A unified trust core (envelopes, keys, chains) (c7434f541, Tal Muskal, 21 hours ago) + +### Bug Fixes +- fix(policy): wire ALL load-bearing tool-layer gates onto production paths (Milestone D) (93f6d09d6, Tal Muskal, 15 hours ago) +- fix(policy): wire Milestone-D tool-layer gates onto production paths (5ed5f6a24, Tal Muskal, 17 hours ago) +- fix(policy): anchor signed-breakpoint enforcement to trusted config + wire streaming proxy attestation (6c237f529, Tal Muskal, 18 hours ago) +- fix(policy): close global-option argv-evasion bypass in Milestone-B matcher (d52da64f7, Tal Muskal, 19 hours ago) +- fix(policy): close four Milestone-B authorization-bypass defects + fold-ins (af7cdfbaa, Tal Muskal, 19 hours ago) +- fix(policy): verify true delegation-chain linkage in trust core (fe759f625, Tal Muskal, 20 hours ago) + +### Refactors +- refactor(trust): extract trust primitives to @a5c-ai/trust-core leaf package (8d360b20c, Tal Muskal, 7 hours ago) + +### Documentation +- docs(policy): document shipped proof-based policy enforcement (Milestones A-E) (32a127734, Tal Muskal, 14 hours ago) +- docs(policy): promote 4 review notes to required AC-53..56 per owner approval (82468de0d, Tal Muskal, 21 hours ago) +- docs(security): proof-policy Draft 3 — close 3 residual adversarial-review attacks (0001bf707, Tal Muskal, 21 hours ago) +- docs(security): revise proof-based policy enforcement spec after adversarial review (ee190ca37, Tal Muskal, 21 hours ago) +- docs(design): add proof-based policy enforcement spec (a80a75fab, Tal Muskal, 22 hours ago) + +### Tests +- test(policy): fix millisecond-boundary flake in GATE-3 credential wiring test (00ddcdb98, Tal Muskal, 15 hours ago) +- test(policy): author Milestone E e2e trust-chain suite + example configs (d6b1de16f, Tal Muskal, 15 hours ago) +- test(policy): fix malformed AC-10.3a GATE-1 fixture to a real sibling-call mismatch (852bccd26, Tal Muskal, 17 hours ago) +- test(policy): author Milestone D test suite (tool-layer enforcement gates) (ddb5a1945, Tal Muskal, 17 hours ago) +- test(policy): author Milestone C test suite (evidence producers) from design spec (bacc5085d, Tal Muskal, 19 hours ago) +- test(policy): author Milestone B test suite (policy-engine) from design spec (3dae881ea, Tal Muskal, 20 hours ago) +- test(policy): author Milestone A trust-core test suite from design spec (03cb86d42, Tal Muskal, 21 hours ago) + +### Maintenance +- chore(policy): register @a5c-ai/trust-core + @a5c-ai/policy-adapter in lockfile (093029aad, Tal Muskal, 7 hours ago) +- chore(graph): track upstream agent versions (733e662aa, a5c automation, 18 hours ago) +- chore(graph): track upstream agent versions (9d8fbf02f, a5c automation, 18 hours ago) +- Fix observe command failing to load: quote argument-hint value (#1123) (44a5d58b4, Daniel Kalman, 24 hours ago) ## [Unreleased] - 2026-07-02 ### Bug Fixes diff --git a/docs/daily-updates/2026-07-04.md b/docs/daily-updates/2026-07-04.md new file mode 100644 index 0000000000..21c5bef870 --- /dev/null +++ b/docs/daily-updates/2026-07-04.md @@ -0,0 +1,80 @@ +# Daily Update - 2026-07-04 + +## Summary of Changes +### Features +- feat(policy): Milestone-E production activation — GATE 3 auto-activation, authorization ALLOW path, code_executor invariant (8bc96607f, Tal Muskal, 14 hours ago) +- feat(policy): implement Milestone D — tool-layer enforcement gates (GATE 1/2/3 + genty seam) (f72c865f0, Tal Muskal, 17 hours ago) +- feat(policy): implement Milestone C — evidence producers (signed breakpoints, proxy + in-process attestation, attribution) (15f6e381d, Tal Muskal, 18 hours ago) +- feat(policy): implement Milestone B — configurable policy engine (trust-chain evaluator + authorization issuance) (8917086be, Tal Muskal, 20 hours ago) +- feat(policy): Milestone A unified trust core (envelopes, keys, chains) (c7434f541, Tal Muskal, 21 hours ago) + +### Bug Fixes +- fix(policy): wire ALL load-bearing tool-layer gates onto production paths (Milestone D) (93f6d09d6, Tal Muskal, 15 hours ago) +- fix(policy): wire Milestone-D tool-layer gates onto production paths (5ed5f6a24, Tal Muskal, 17 hours ago) +- fix(policy): anchor signed-breakpoint enforcement to trusted config + wire streaming proxy attestation (6c237f529, Tal Muskal, 18 hours ago) +- fix(policy): close global-option argv-evasion bypass in Milestone-B matcher (d52da64f7, Tal Muskal, 19 hours ago) +- fix(policy): close four Milestone-B authorization-bypass defects + fold-ins (af7cdfbaa, Tal Muskal, 19 hours ago) +- fix(policy): verify true delegation-chain linkage in trust core (fe759f625, Tal Muskal, 20 hours ago) + +### Refactors +- refactor(trust): extract trust primitives to @a5c-ai/trust-core leaf package (8d360b20c, Tal Muskal, 7 hours ago) + +### Documentation +- docs(policy): document shipped proof-based policy enforcement (Milestones A-E) (32a127734, Tal Muskal, 14 hours ago) +- docs(policy): promote 4 review notes to required AC-53..56 per owner approval (82468de0d, Tal Muskal, 21 hours ago) +- docs(security): proof-policy Draft 3 — close 3 residual adversarial-review attacks (0001bf707, Tal Muskal, 21 hours ago) +- docs(security): revise proof-based policy enforcement spec after adversarial review (ee190ca37, Tal Muskal, 21 hours ago) +- docs(design): add proof-based policy enforcement spec (a80a75fab, Tal Muskal, 22 hours ago) + +### Tests +- test(policy): fix millisecond-boundary flake in GATE-3 credential wiring test (00ddcdb98, Tal Muskal, 15 hours ago) +- test(policy): author Milestone E e2e trust-chain suite + example configs (d6b1de16f, Tal Muskal, 15 hours ago) +- test(policy): fix malformed AC-10.3a GATE-1 fixture to a real sibling-call mismatch (852bccd26, Tal Muskal, 17 hours ago) +- test(policy): author Milestone D test suite (tool-layer enforcement gates) (ddb5a1945, Tal Muskal, 17 hours ago) +- test(policy): author Milestone C test suite (evidence producers) from design spec (bacc5085d, Tal Muskal, 19 hours ago) +- test(policy): author Milestone B test suite (policy-engine) from design spec (3dae881ea, Tal Muskal, 20 hours ago) +- test(policy): author Milestone A trust-core test suite from design spec (03cb86d42, Tal Muskal, 21 hours ago) + +### Maintenance +- chore(policy): register @a5c-ai/trust-core + @a5c-ai/policy-adapter in lockfile (093029aad, Tal Muskal, 7 hours ago) +- chore(graph): track upstream agent versions (733e662aa, a5c automation, 18 hours ago) +- chore(graph): track upstream agent versions (9d8fbf02f, a5c automation, 18 hours ago) +- Fix observe command failing to load: quote argument-hint value (#1123) (44a5d58b4, Daniel Kalman, 24 hours ago) + +## Links to PRs Merged +- #1083 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1083 +- #1097 docs: changelog update 2026-07-02 - https://github.com/a5c-ai/babysitter/pull/1097 +- #1120 Track upstream agent CLI releases - https://github.com/a5c-ai/babysitter/pull/1120 +- #1123 fix(plugins): quote observe command argument-hint so it loads - https://github.com/a5c-ai/babysitter/pull/1123 +- #1134 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1134 + +## Issues Opened +- None found. + +## Issues Closed +- None found. + +## CI Status Summary +- Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098 +- CI: in_progress/pending on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694193720 +- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694175337 +- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174912 +- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174417 +- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168412 +- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168396 +- CI: completed/cancelled on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694168180 +- Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694150812 +- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145971 +- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145429 +- Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694144897 +- QA Daily: in_progress/pending on main - https://github.com/a5c-ai/babysitter/actions/runs/28694045688 +- Triage: Publish Failure: completed/failure on main - https://github.com/a5c-ai/babysitter/actions/runs/28682551339 +- Publish: completed/failure on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274345 +- Staging Sync Command Surfaces: completed/success on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274325 +- Agent Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197424 +- Agent Plan Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197403 +- QA Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197398 +- Agent Review Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197397 + +## Live-stack Test Results +- Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098