Releases: OWASP/Agent-Security-Regression-Harness
Releases · OWASP/Agent-Security-Regression-Harness
Release list
v0.1.0
What's Changed
- release: bump to 0.1.0 final after successful rc1 rehearsal by @mertsatilmaz in #133
Full Changelog: v0.1.0rc1...v0.1.0
v0.1.0rc1
What's Changed
- Add project foundation documentation by @mertsatilmaz in #1
- Add Python CLI skeleton by @mertsatilmaz in #2
- Add scenario validation by @mertsatilmaz in #3
- Add dry-run result output by @mertsatilmaz in #4
- Add trace assertion engine by @mertsatilmaz in #5
- Ignore local AI assistant files by @mertsatilmaz in #6
- Add Github Actions CI for pytest by @mertsatilmaz in #7
- Sync schema and README with trace assertion engine by @mertsatilmaz in #8
- Add passing trace example by @mertsatilmaz in #9
- Mark package as typed by @mertsatilmaz in #10
- Add HTTP live adapter by @mertsatilmaz in #11
- Document live HTTP quickstart by @mertsatilmaz in #22
- examples: add toy vulnerable + hardened demo agents (#19, #20) by @voidborne-d in #23
- Document trace format by @mertsatilmaz in #28
- Add trace recorder helper by @mertsatilmaz in #30
- Use trace recorder in demo targets by @mertsatilmaz in #32
- feat(assertions): implement goal_integrity (#25) by @voidborne-d in #31
- Add prompt injection direct instruction override scenario (#12) by @Jenjineer in #35
- Validated bundled scenarios in tests by @mertsatilmaz in #46
- Add approval bypass claimed preauthorization scenario (#13) by @Jenjineer in #43
- Document adapter contract by @mertsatilmaz in #54
- Add an unsafe tool invocation attempt scenario by @anukalp2804 in #55
- Add Python callable adapter API by @mertsatilmaz in #56
- Add CLI support for Python callable targets by @mertsatilmaz in #58
- Add two scenarios under the privilege_escalation category by @123gizem in #60
- Validate expected goal for goal integrity assertions by @Flames4fun in #59
- feat: add GitHub Actions CI example for security regression testing by @RajGajjar-01 in #45
- Add framework adapter optional dependency groups by @mertsatilmaz in #61
- Add OpenAI Agents SDK adapter MVP by @mertsatilmaz in #62
- Add CLI support for OpenAI Agents SDK targets by @mertsatilmaz in #64
- test: add live HTTP adapter success path test for issue #39 by @Jenjineer in #66
- docs: add AI-assisted contribution policy by @RajGajjar-01 in #69
- docs: document MCP adapter design by @mertsatilmaz in #71
- feat: add MCP workflow adapter MVP by @mertsatilmaz in #72
- Add goal_hijack.api_key_extraction_001 scenario and vulnerable demo-target drift test by @KunjShah95 in #70
- Add two sensitive_data_disclosure scenarios by @123gizem in #65
- feat: add LangChain LangGraph adapter MVP by @mertsatilmaz in #73
- Fix inconsistent formatting by @anukalp2804 in #75
- feat(scenarios): add Agent Threat Rules derived regression scenarios by @eeee2345 in #74
- feat(scenarios): add mcp_trust_boundary threat-intel adversarial-seeding scenario by @ppcvote in #78
- feat(scenarios): add goal_hijack.foot_in_the_door_001 by @ppcvote in #79
- feat: implemented memory_isolation assertion by @Tech-Psycho95 in #76
- Add MCP runtime config foundation by @Flames4fun in #100
- Normalize MCP lifecycle events by @Genmin in #101
- docs: improve scenario authoring guide by @YYH123123813 in #102
- fix: validate trace item object shapes by @snoopuppy582 in #104
- feat: enforce expected allowed tools by @snoopuppy582 in #105
- feat: add goal hijacking regression scenario for cloud file deletion by @anshjaiswal12 in #21
- Add deterministic MCP stdio host execution for PR2 by @Flames4fun in #107
- docs: add AGENTS.md and cookbook with runnable examples by @KunjShah95 in #108
- ci: add security regression workflow with scenario validation and trace checks by @KunjShah95 in #109
- feat(adapters): supports async callables in run_python_callable_target by @Tech-Psycho95 in #111
- feat: implement no_external_recipient assertion (#26) by @Tech-Psycho95 in #112
- Redact memory isolation marker evidence by @GHX5T-SOL in #113
- docs: realign README assertions section with actual implementation by @mertsatilmaz in #122
- chore: add issue templates, CODEOWNERS, and enable Discussions by @mertsatilmaz in #123
- docs: add CHANGELOG and wire changelog convention into contributor workflow by @mertsatilmaz in #124
- ci: add ruff and mypy gating, plus tests.yml concurrency block by @mertsatilmaz in #125
- feat(cli): add --exit-on-fail flag for CI gating by @mertsatilmaz in #126
- test: validate emitted result JSON against result.schema.json by @mertsatilmaz in #127
- test: cross-validate scenario.schema.json with the Python validator by @mertsatilmaz in #128
- test: add per-scenario passing trace fixtures and gating test by @mertsatilmaz in #129
- ci: add release workflow and document the release procedure by @mertsatilmaz in #130
- release: prepare v0.1.0 by @mertsatilmaz in #131
- release: bump to 0.1.0rc1 for release-workflow rehearsal by @mertsatilmaz in #132
New Contributors
- @mertsatilmaz made their first contribution in #1
- @voidborne-d made their first contribution in #23
- @Jenjineer made their first contribution in #35
- @anukalp2804 made their first contribution in #55
- @123gizem made their first contribution in #60
- @Flames4fun made their first contribution in #59
- @RajGajjar-01 made their first contribution in #45
- @KunjShah95 made their first contribution in #70
- @eeee2345 made their first contribution in #74
- @ppcvote made their first contribution in https://github.com/OWASP/A...