build(deps): update cmcp-runtime requirement from >=0.5.0 to >=0.7.0 in /examples

[dependabot]

Updates the requirements on cmcp-runtime to permit the latest version.

Release notes

Sourced from cmcp-runtime's releases.

cmcp v0.7.0

Security

• TPM 2.0: verify_tpm_measurement listed a qualifying_data mismatch as unverified but still returned verified, so a genuine quote could be attached to a claim signed by any key. It also never compared the quote's pcrDigest with the claim's measurement, though docs/spec/tpm-security-model.md said it did. Both now fail the check.

Changed

• verify_trace_claim takes expected_launch_measurements, and cmcp verify takes a repeatable --launch-measurement. A hardware claim whose measurement is outside the set fails. With no set, a hardware claim is partially_verified with launch_measurement unverified: genuine hardware says what ran, not that it was approved, and a report from any guest image used to come out verified.

Changelog

Sourced from cmcp-runtime's changelog.

[0.7.0] - 2026-09-30

Security

• TPM 2.0: verify_tpm_measurement listed a qualifying_data mismatch as unverified but still returned verified, so a genuine quote could be attached to a claim signed by any key. It also never compared the quote's pcrDigest with the claim's measurement, though docs/spec/tpm-security-model.md said it did. Both now fail the check.
• Agent Manifest v0.2: the SDK appraised the COSE envelope, but the binding fields were read from the decoded dict the caller passed, and nothing checked that the two were the same document. A valid envelope paired with a dict carrying another policy or catalog hash bound. The dict must now equal the signed payload, and issuer_key_id is the key that verified the envelope instead of an empty string.

Added

• build_server(ctx, trace_gate=...): an optional pre-transport hook for verifier-issued TRACE tokens (cmcp_runtime.trace_gate.TraceGate). With a gate, POST /trace/challenge and POST /trace/admit are registered behind bearer auth, every tools/call needs a holder proof bound to its exact action, and the gate is rechecked and a receipt committed before any byte goes upstream. A gate requires enforcing mode. With no gate, the routes do not exist and the call path is unchanged.
• cmcp_runtime.manifest_catalog.manifest_catalog_binding: the Agent Manifest tool Merkle root (spec 3.2.3) computed from the catalog being served, kept separate from cMCP's sealed catalog digest.
• Experimental evidence-requirements-experimental-v1 manifest profile: the tool binding is checked against that Merkle projection, and the signed evidence requirements must also name the sealed catalog digest.

Changed

• verify_trace_claim takes expected_launch_measurements, and cmcp verify takes a repeatable --launch-measurement. A hardware claim whose measurement is outside the set fails. With no set, a hardware claim is partially_verified with launch_measurement unverified: genuine hardware says what ran, not that it was approved, and a report from any guest image used to come out verified.

Fixed

• An Agent Manifest that lists its tools in tool_manifest.tools could never bind: cMCP handed the SDK its sealed catalog digest, and from agent-manifest 0.13 the SDK compares catalog_hash with the Merkle root of that list. Such a manifest now binds when its list and root equal the projection of the catalog being served (cmcp_runtime.manifest_catalog). A manifest that omits tools is still compared with the sealed digest. verify_agent_manifest_binding takes runtime_catalog for this; without it a manifest with tools does not bind, which includes cmcp verify, since it has no catalog to project.

... (truncated)

Commits

• 6676188 chore(release): cmcp-runtime 0.7.0 (#711)
• 0ff0d12 fix(verify): require TPM key and PCR binding; pin launch measurements (#709)
• 368626f build(deps): bump pyjwt to 2.15.1 for CVE-2026-102274 and CVE-2026-101917 (#703)
• c67f3b4 ci: bump the codeql-action group with 4 updates (#700)
• 3bd5e6c ci: bump ruff from 0.16.7 to 0.16.8 (#693)
• 1759319 ci: bump starlette from 1.6.0 to 1.7.0 (#698)
• 0e1de4c ci: bump platformdirs from 4.11.8 to 4.11.12 (#690)
• d2a0122 ci: bump mkdocstrings-python from 2.0.8 to 2.0.9 (#691)
• f9b1f7c ci: bump wcwidth from 0.8.4 to 0.9.1 (#699)
• 0d71fbe ci: bump python from 3.11.15-slim-bookworm to 3.11.16-slim-bookworm (#697)
• Additional commits viewable in compare view