All pull requests

Pull requests

• build(deps): bump the python group across 1 directory with 16 updates

  dependenciespython
  #404·dependabot[bot] opened Oct 29, 2026Bot·

  ·
  2

• build(deps): bump the python-examples group across 2 directories with 7 updates

  dependenciespython
  #403·dependabot[bot] opened Oct 29, 2026Bot·

  ·
  2

• build(deps): bump authlib from 1.8.0 to 1.9.1 in /requirements

  dependenciespython
  #402·dependabot[bot] opened Oct 29, 2026Bot·

  ·

• build(deps): bump langgraph-sdk from 0.4.4 to 0.4.6 in /requirements

  dependenciespython
  #401·dependabot[bot] opened Oct 29, 2026Bot·

  ·

• build(deps): bump langgraph from 1.2.12 to 1.2.14 in /requirements

  dependenciespython
  #400·dependabot[bot] opened Oct 29, 2026Bot·

  ·

• feat: appraise pinned Proofable fetch evidence offline

  #399·wlad232 opened Oct 27, 2026Contributor·

  ·
  4

• test(ci): propose generated-lock delta checks

  needs-review:MEDIUM
  #394·dinakarjs opened Oct 26, 2026Contributor·

  ·
  8

• build(deps): update weight-custody-manifest requirement from <0.33.0,>=0.32.0 to >=0.33.1,<0.34.0

  dependenciespython
  #392·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  3

• build(deps): update cmcp-runtime requirement from >=0.7.0 to >=0.7.1

  dependenciespython
  #391·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  4

• fix(sovereign-agent-connector): reject boolean GCP claims, invalid validity_seconds, and non-canonical base64url signatures (#379)

  needs-review:MEDIUM
  #384·drk-ram opened Oct 25, 2026Contributor·

  ·
  1

  5

• fix(trace-adapters): validate timestamps/counts, require bool signature_verified, and reject private JWKs in build_record (#375)

  needs-review:MEDIUM
  #380·drk-ram opened Oct 25, 2026Contributor·

  ·
  1

  4

• fix: carry #330 forward with Conduit observation checks

  needs-review:MEDIUM
  #374·dinakarjs opened Oct 24, 2026Contributor·

  ·
  10

• fix(examples): reject duplicate JSON keys, non-finite numbers, and boolean sequences in verify_receipts and verify_purchase (#369)

  needs-review:MEDIUM
  #373·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  5

• fix(capture-core): reject duplicate JSON keys and non-finite numbers in load_state/sha_mapping and check seal.alg in check_seal (#366)

  needs-review:MEDIUM
  #370·drk-ram opened Oct 23, 2026Contributor·

  ·
  1

  6

• fix(verifiers): enforce canonical base64url, reject private JWKs and duplicate JSON keys in independent_verify and guard request_sha256 in companion_v0

  needs-review:MEDIUM
  #364·drk-ram opened Oct 23, 2026Contributor·3 of 9 tasks·

  ·
  1

  5

• fix(examples): share WCM model-signing dependency setup

  #360·noah-ing opened Oct 21, 2026Collaborator·

  ·
  6

• feat(evidence): retain opt-in test execution receipts and dependency observations

  needs-review:MEDIUM
  #358·dinakarjs opened Oct 21, 2026Contributor·

  ·
  1

• docs: scope EO01–EO08 as the #333 effect-observation checklist

  needs-review:MEDIUM
  #352·dinakarjs opened Oct 19, 2026Contributor·

  ·
  4

• integrations: xChk registry — approval-outcome crosswalk, fixtures and receipt verifier (from trace-spec#560; stacked on #338)

  #350·minitru opened Oct 19, 2026Contributor·

  ·
  9

• feat: reappraise retained synthetic evidence for #199

  needs-review:MEDIUM
  #334·dinakarjs opened Oct 17, 2026Contributor·

  ·
  16

• test: released cMCP/cA2A remote peer and TRACE software evidence for #199

  needs-review:HIGH
  #330·altrudev opened Oct 16, 2026Contributor·

  ·
  14

• Add Anthropic SDK tool loop integration

  #323·cosmo-lgtm opened Oct 15, 2026·

  ·
  7