Merge pull request #196 from QWED-AI/release-prep/v5.1.1

chore(release): prepare v5.1.1 release

Author: rahuldass19

.circleci/config.yml

@@ -57,11 +57,16 @@ jobs:
             # - CVE-2026-1703: pip wheel path traversal (CVSS 2.0 Low) — build-only, pinned hashes used
             # - CVE-2026-4539: pygments ReDoS in AdlLexer — local-only, no fix version available yet
             #                  [Expiry Guard - Owner: Security Team, Review Date: 2026-06-01]
+            # - PYSEC-2025-183: pyjwt weak-encryption advisory — mitigated by pyproject.toml pin
+            #                   (pyjwt>=2.8.0,!=2.12.1) and requirements.in exclusion.
+            #                   Suppressed as belt-and-suspenders only; root fix is the version pin.
+            #                   [Expiry Guard - Owner: Security Team, Review Date: 2026-08-01]
             /tmp/audit-env/bin/pip-audit --strict --desc \
               -r /tmp/audit-requirements.txt \
               --ignore-vuln CVE-2025-8869 \
               --ignore-vuln CVE-2026-1703 \
               --ignore-vuln CVE-2026-4539 \
+              --ignore-vuln PYSEC-2025-183 \
               2>&1 | tee audit-results.txt
       - store_artifacts:
           path: audit-results.txt

.github/workflows/publish-sdks.yml

@@ -17,6 +17,9 @@ jobs:
     runs-on: ubuntu-latest
     # Only run if PYPI_API_TOKEN exists
     if: ${{ vars.PYPI_ENABLED == 'true' || github.event_name == 'workflow_dispatch' }}
+    permissions:
+      id-token: write   # OIDC trusted publisher - no hardcoded credential needed
+      contents: read
     steps:
       - uses: actions/checkout@v4
 
@@ -29,18 +32,14 @@ jobs:
         run: pip install build twine
 
       - name: Build package
-        run: |
-          cd sdk/python
-          python -m build
+        run: python -m build
 
       - name: Publish to PyPI
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
-        run: |
-          cd sdk/python
-          twine upload dist/* --skip-existing
-        continue-on-error: true  # Don't fail if PyPI token not set yet
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # release/v1
+          # OIDC trusted publisher: no token/password field required.
+          # Configure at https://pypi.org/manage/project/qwed/settings/publishing/
+        with:
+          skip-existing: true
 
   # ============================================
   # TypeScript SDK → npm
@@ -119,15 +118,16 @@ jobs:
   # ============================================
   summary:
     name: Publish Summary
-    needs: [publish-typescript, publish-rust, tag-go]
+    needs: [publish-python, publish-typescript, publish-rust, tag-go]
     runs-on: ubuntu-latest
     if: always()
     steps:
       - name: Summary
         run: |
           echo "=== SDK Publish Results ==="
+          echo "Python (PyPI):    ${{ needs.publish-python.result }}"
           echo "TypeScript (npm): ${{ needs.publish-typescript.result }}"
           echo "Rust (crates.io): ${{ needs.publish-rust.result }}"
           echo "Go (tagged):      ${{ needs.tag-go.result }}"
           echo ""
-          echo "Note: Python publish skipped until PyPI token is set"
+          echo "Note: Python publish uses the repository root package metadata (pyproject.toml)."

.gitignore

@@ -55,6 +55,7 @@ Thumbs.db
 
 # Node.js
 node_modules/
+package-lock.json
 npm-debug.log
 yarn-error.log
 .pnpm-debug.log

CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to the QWED Protocol will be documented in this file.
 
 ## [Unreleased]
 
+## [5.1.1] - 2026-05-21
+### Release Consistency and Fail-Closed Follow-Through
+
+Patch release packaging the post-v5.1.0 trust-boundary and fail-closed corrections into a coherent publishable state across core package metadata, SDKs, deployment references, and release automation.
+
+#### Trust Boundary and Correctness Fixes
+- **Cache trust-context binding**: Bound verification cache artifacts to provider/model/policy/session trust context to prevent cross-context replay.
+- **Attestation hardening**: Strengthened attestation verification with fail-closed behavior and follow-up review remediations.
+- **Audit integrity improvements**: Tightened audit logging semantics around malformed payload handling, organization isolation, and transactional durability.
+- **Proof-path corrections**: Refined reasoning, symbolic, batch, and agent-service fail-closed behavior where proof prerequisites or safe defaults were ambiguous.
+
+#### Release and Deployment Alignment
+- **Version propagation**: Aligned core package, API version marker, Python SDK metadata, TypeScript SDK metadata, and Rust SDK crate version on `5.1.1`.
+- **Container reference alignment**: Updated Kubernetes deployment example to the published Docker Hub image/tag convention.
+- **Release metadata cleanup**: Prepared package metadata and deployment references for a clean `v5.1.1` publish flow.
+
+#### Included PRs and merged work since v5.1.0
+- `#157` docs: README follow-up
+- `#158` fix(docker): python 3.13 upgrade follow-up
+- `#159` chore(deps): npm/yarn dependency follow-up in `sdk-ts`
+- `#160` fix(schema): strict additional-properties enforcement follow-up
+- `#161` fix(symbolic): fail closed when no proof exists
+- `#168` fix(executor): secure executor fail-closed follow-up
+- `#176` fix(agent): deny and handle unknown agent actions safely
+- `#177` fix(reasoning): require proof prerequisites before reasoning acceptance
+- `#178` and `#192` fix(cache): bind verification cache keys to trust context and address review follow-ups
+- `#179` fix(audit): fail-closed audit logging, chain isolation, and transaction hardening
+- `#180` fix(batch): separate batch math simplification from proof path
+- `#186` chore(deps): pip dependency maintenance
+- `#193` fix(tests): test-secret cleanup and PowerShell encoding hygiene
+
+#### Upgrade Notes
+- Deployments using the Kubernetes example should pull `docker.io/qwedai/qwed-verification:5.1.1` instead of the older `ghcr.io/qwed-ai/qwed-core` reference.
+- This patch release focuses on stricter semantics, release consistency, and fail-closed enforcement rather than end-user feature expansion.
+
 ## [5.1.0] - 2026-04-19
 ### Agent State Governance and Fail-Closed Hardening
 

README.md

@@ -59,7 +59,20 @@
 
 ---
 
-## 🎯 Where QWED Fits First
+## Release Update: v5.1.1
+
+`v5.1.1` is a patch release focused on **fail-closed follow-through and release consistency** after `v5.1.0`.
+
+- Tightens cache trust-context binding to prevent cross-context verification replay
+- Hardens attestation and audit paths toward stricter fail-closed behavior
+- Cleans up proof-path handling across reasoning, symbolic, batch, and agent-service flows
+- Aligns package versions, API version markers, SDK metadata, and deployment references for a clean release boundary
+
+If you're upgrading from `v5.1.0`, review the [changelog](CHANGELOG.md) for deployment/image reference updates and patch-level boundary hardening notes.
+
+---
+
+## Where QWED Fits First
 
 Use QWED when an LLM or AI agent must not guess:
 

deploy/kubernetes/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: qwed-core
-          image: ghcr.io/qwed-ai/qwed-core:5.1.0
+          image: docker.io/qwedai/qwed-verification:5.1.1
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8000

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "qwed"
-version = "5.1.0"
+version = "5.1.1"
 description = "The Deterministic Verification Protocol for AI - 11 verification engines for math, logic, code, SQL, facts, images, and more. Now with Agentic Security Guards."
 authors = [
     {name = "QWED Team", email = "rahul@qwedai.com"},
@@ -46,7 +46,7 @@ dependencies = [
     "sqlmodel>=0.0.14",
     "bcrypt>=4.0.1",
     "passlib[bcrypt]>=1.7.4",
-    "pyjwt>=2.8.0",
+    "pyjwt>=2.8.0,!=2.12.1",
     "python-multipart>=0.0.6",
     "pandas>=2.0.0",
     "numpy>=1.24.0",
@@ -122,3 +122,4 @@ pythonpath = [
     ".",
 ]
 
+

qwed_sdk/__init__.py

@@ -1,4 +1,4 @@
-# Copyright (c) 2024 QWED Team
+# Copyright (c) 2025 QWED Team
 # SPDX-License-Identifier: Apache-2.0
 
 """
@@ -37,7 +37,7 @@
     VerificationType,
 )
 
-__version__ = "5.1.0"
+__version__ = "5.1.1"
 __all__ = [
     "QWEDClient",
     "QWEDAsyncClient",

requirements.in

@@ -4,5 +4,6 @@ httpcore>=1.0.9
 h11>=0.16.0
 colorama==0.4.6
 sentry-sdk>=2.8.0
+pyjwt!=2.12.1,>=2.8.0
 sqlglot==20.0.0
 defusedxml>=0.7.1

requirements.txt

@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.11
 # by the following command:
 #
-#    pip-compile --generate-hashes requirements.in
+#    pip-compile --generate-hashes --output-file=requirements.txt requirements.in
 #
 anyio==4.13.0 \
     --hash=sha256:08b310f9e24a9594186fd75b4f73f4a4152069e3853f1ed8bfbf58369f4ad708 \
@@ -23,10 +23,6 @@ defusedxml==0.7.1 \
     --hash=sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69 \
     --hash=sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61
     # via -r requirements.in
-exceptiongroup==1.3.1 \
-    --hash=sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219 \
-    --hash=sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598
-    # via anyio
 h11==0.16.0 \
     --hash=sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1 \
     --hash=sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86
@@ -53,6 +49,10 @@ mpmath==1.4.1 \
     --hash=sha256:dc4f0ea2304480d4a9a48a94c1020571558ade522b44a6912efac63a586e140f \
     --hash=sha256:efd6d1b75f09d69524a67609949812668b28e81ecbfe0ab449ced8c13e92642e
     # via sympy
+pyjwt==2.12.0 \
+    --hash=sha256:2f62390b667cd8257de560b850bb5a883102a388829274147f1d724453f8fb02 \
+    --hash=sha256:9bb459d1bdd0387967d287f5656bf7ec2b9a26645d1961628cda1764e087fd6e
+    # via -r requirements.in
 sentry-sdk==2.57.0 \
     --hash=sha256:4be8d1e71c32fb27f79c577a337ac8912137bba4bcbc64a4ec1da4d6d8dc5199 \
     --hash=sha256:812c8bf5ff3d2f0e89c82f5ce80ab3a6423e102729c4706af7413fd1eb480585
@@ -68,9 +68,7 @@ sympy==1.12 \
 typing-extensions==4.15.0 \
     --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
     --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
-    # via
-    #   anyio
-    #   exceptiongroup
+    # via anyio
 urllib3==2.7.0 \
     --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \
     --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897