All pull requests

Pull requests

• feat: appraise pinned Proofable fetch evidence offline

  #399·wlad232 opened Oct 27, 2026Contributor·

  ·

• chore(marketplace): verify PIC Standard MCP Guard

  #398·carloshvp opened Oct 27, 2026Member·

  ·

• pic-standard-mcp-guard: request Verified tier with exact reproduction steps

  #397·madeinplutofabio opened Oct 26, 2026Contributor·

  ·
  1

• test(ci): propose generated-lock delta checks

  needs-review:MEDIUM
  #394·dinakarjs opened Oct 26, 2026Contributor·

  ·
  3

• build(deps): bump the actions group with 6 updates

  dependenciesgithub_actions
  #393·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): update weight-custody-manifest requirement from <0.33.0,>=0.32.0 to >=0.33.1,<0.34.0

  dependenciespython
  #392·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): update cmcp-runtime requirement from >=0.7.0 to >=0.7.1

  dependenciespython
  #391·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): bump the python group with 17 updates

  dependenciespython
  #390·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): update weight-custody-manifest requirement from >=0.32.0 to >=0.33.1 in /examples

  dependenciespython
  #389·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): bump the python-examples group across 2 directories with 7 updates

  dependenciespython
  #388·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• parmana-server: point repository at the Apache-2.0 parmana-core

  #385·pavancharak opened Oct 25, 2026Contributor·

  ·

• fix(sovereign-agent-connector): reject boolean GCP claims, invalid validity_seconds, and non-canonical base64url signatures (#379)

  needs-review:MEDIUM
  #384·drk-ram opened Oct 25, 2026·

  ·
  1

  1

• fix(xchk-registry): reject private JWK members, non-canonical base64url, boolean Instant(now), and duplicate JSON keys (#378)

  needs-review:MEDIUM
  #383·drk-ram opened Oct 25, 2026·

  ·
  1

  1

• fix(parmana-server): enforce canonical 64-byte base64 signatures and guard non-dict fields in parmana_evidence (#377)

  needs-review:MEDIUM
  #382·drk-ram opened Oct 25, 2026·

  ·
  1

  1

• fix(aeoess-aps): enforce exact int max_age_seconds/clock_skew_seconds and datetime reference_time in verify_aps_action_receipt (#376)

  needs-review:MEDIUM
  #381·drk-ram opened Oct 25, 2026·

  ·
  1

  1

• fix(trace-adapters): validate timestamps/counts, require bool signature_verified, and reject private JWKs in build_record (#375)

  needs-review:MEDIUM
  #380·drk-ram opened Oct 25, 2026·

  ·
  1

  1

• fix: carry #330 forward with Conduit observation checks

  needs-review:MEDIUM
  #374·dinakarjs opened Oct 24, 2026Contributor·

  ·
  8

• fix(examples): reject duplicate JSON keys, non-finite numbers, and boolean sequences in verify_receipts and verify_purchase (#369)

  needs-review:MEDIUM
  #373·drk-ram opened Oct 23, 2026·

  ·
  1

  1

• fix(ramen-ai-cmcp): enforce canonical base64url and reject duplicate JSON keys in _receipt_verify.py (#367)

  needs-review:MEDIUM
  #372·drk-ram opened Oct 23, 2026·

  ·
  1

  1

• fix(trace-adapters): reject boolean capture timestamps and non-canonical base64 signatures in openshell adapters (#368)

  needs-review:MEDIUM
  #371·drk-ram opened Oct 23, 2026·

  ·
  1

  1

• fix(capture-core): reject duplicate JSON keys and non-finite numbers in load_state/sha_mapping and check seal.alg in check_seal (#366)

  needs-review:MEDIUM
  #370·drk-ram opened Oct 23, 2026·

  ·
  1

  2

• docs(litzki-systems-sovp): record maintainer reproduction of 0.2.0

  #365·litzki-systems opened Oct 23, 2026Contributor·

  ·
  1

• fix(verifiers): enforce canonical base64url, reject private JWKs and duplicate JSON keys in independent_verify and guard request_sha256 in companion_v0

  needs-review:MEDIUM
  #364·drk-ram opened Oct 23, 2026·3 of 9 tasks·

  ·
  1

  1

• build(deps): bump certifi from 2026.7.22 to 2026.10.19 in /requirements

  dependenciespython
  #361·dependabot[bot] opened Oct 22, 2026Bot·

  ·

• fix(ci): declare model-signing OpenSSL dependency

  #360·noah-ing opened Oct 21, 2026Collaborator·

  ·
  3