Merge pull request #83 from QWED-AI/release/v4.0.0

release: v4.0.0 Sentinel Edition

Author: rahuldass19

.circleci/config.yml

@@ -49,8 +49,11 @@ jobs:
           name: Run pip-audit (project deps only)
           command: |
             set -o pipefail
+            # Snapshot only project dependencies before adding audit tooling
+            /tmp/audit-env/bin/pip freeze --exclude qwed > /tmp/audit-requirements.txt
             /tmp/audit-env/bin/pip install pip-audit
-            /tmp/audit-env/bin/pip-audit --strict --skip-editable --desc \
+            /tmp/audit-env/bin/pip-audit --strict --desc \
+              -r /tmp/audit-requirements.txt \
               `# CVE-2025-8869: pip tar extraction vuln — build-only tool, not in runtime image` \
               --ignore-vuln CVE-2025-8869 \
               `# CVE-2026-1703: pip wheel path traversal (CVSS 2.0 Low) — build-only, pinned hashes used` \

CHANGELOG.md

@@ -2,6 +2,60 @@
 
 All notable changes to the QWED Protocol will be documented in this file.
 
+## [4.0.0] - 2026-03-12
+### 🛡️ Sentinel Edition
+
+#### 🆕 Agentic Security Guards (Phase 17)
+- **RAGGuard**: Detects prompt injection, data poisoning, and context manipulation in RAG pipelines with IRAC-compliant reporting.
+- **ExfiltrationGuard**: Prevents data exfiltration through AI agent tool calls by analyzing output patterns and destination validation.
+- **MCP Poison Guard**: Detects poisoned or tampered Model Context Protocol (MCP) tool definitions before agent execution.
+- Five rounds of security review and hardening (CodeRabbit + SonarCloud).
+
+#### 🆕 New Standalone Guards
+- **SovereigntyGuard**: Enforces data residency policies and local routing rules for compliance-sensitive deployments.
+- **ToxicFlowGuard**: Stateful detection of toxic tool-chaining patterns across multi-step agent workflows.
+- **SelfInitiatedCoTGuard (S-CoT)**: Verifies self-initiated Chain-of-Thought logic paths for reasoning integrity.
+
+#### 🆕 Process Determinism
+- **ProcessVerifier**: A new class of deterministic verification — IRAC/milestone-based process verification with decimal scoring, budget-aware timeouts, and structured compliance reporting. Ensures AI-driven workflows follow deterministic process steps.
+
+#### 🔒 Critical Security Fixes
+- **Code Injection Prevention**: Replaced all `eval()` calls with AST-compiled execution (SonarCloud S5334).
+- **Sandbox Escape Fix**: Patched critical sandbox escape and namespace mismatch vulnerability.
+- **SymPy Injection Fix**: Hardened symbolic math input parsing against injection attacks.
+- **Protocol Bypass Fixes**: Fixed URL whitespace bypass and protocol wildcard bypass vulnerabilities.
+- **CVE Patches**: Resolved CVE-2026-24049 (Critical, pip/wheel), CVE-2025-8869, and HTTP request smuggling (h11/httpcore).
+- **Snyk Remediation**: Fixed all 19 Snyk Code findings across the codebase.
+- **CodeQL Remediation**: Secured exception handling in `verify_logic`, `ControlPlane`, `verify_stats`, and `agent_tool_call`.
+
+#### 🐳 Docker Hardening (15+ improvements)
+- Pinned base image digests with hash-verified requirements.
+- Non-root user execution with `gosu`/`runuser`.
+- Inlined entrypoint script to fix exec format errors across platforms.
+- Enforced LF line endings via `.gitattributes` and `dos2unix`.
+- Automated Docker Hub publishing on release and main branch push.
+- SBOM generation and Docker Scout vulnerability scanning.
+
+#### 🔧 CI/CD Infrastructure
+- **Sentry SDK**: Integrated error tracking and monitoring.
+- **CircleCI**: Added Python matrix testing pipeline.
+- **SonarCloud**: Added code quality and coverage workflow.
+- **Snyk**: Added security scanning workflow with SARIF output.
+- **Docker Auto-Publish**: Automated image publishing to Docker Hub on every release.
+
+#### 📝 Documentation & Badges
+- Added OpenSSF Best Practices badge (Silver level).
+- Added Snyk security badge and partner attribution.
+- Added Docker Hub pulls badge and dynamic BuildKit badge.
+- Updated engine count from 8 to 11 across all documentation.
+- Added Ecosystem Trust & Infrastructure section to README.
+
+#### 🧪 Test Coverage
+- ProcessVerifier: decimal scores, edge cases, IRAC long input, malformed data.
+- Attestation edge cases and qwed_local execution tests.
+- Logic exception handling and stats engine coverage.
+- Secure executor Docker availability checks.
+
 ## [3.0.1] - 2026-02-04
 ### 🦾 Ironclad Update (Security Patch)
 

pyproject.toml

@@ -1,7 +1,7 @@
 [project]
 name = "qwed"
-version = "3.0.1"
-description = "The Deterministic Verification Protocol for AI - 11 verification engines for math, logic, code, SQL, facts, images, and more."
+version = "4.0.0"
+description = "The Deterministic Verification Protocol for AI - 11 verification engines for math, logic, code, SQL, facts, images, and more. Now with Agentic Security Guards."
 authors = [
     {name = "QWED Team", email = "rahul@qwedai.com"},
 ]