Phase 2 — Differentiate, go beyond (0.2.0)

Open

No due date

•Last updated Oct 26, 2026

Refusal handlers, classification registry, HITL, identity helpers, in-repo scanner + Action, kill-switch, MCP discovery, second adapter, A2A serve/expose/dev. Build guide 2.1-2.9.

48% complete

hitl: route escalation through gateway step-up (Trusted Agent Identity)
Donkey-Development-Kit/donkey-development-kit#214 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
identity: donkey.as_user() — RFC 8693 token exchange and header placement
Donkey-Development-Kit/donkey-development-kit#215 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
identity: a missing or expired user token fails typed, never falls back to service identity
Donkey-Development-Kit/donkey-development-kit#216 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
scanner: donkey publish registers the manifest with Exchange / Agent Registry
Donkey-Development-Kit/donkey-development-kit#218 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
1
scanner: the scan-and-publish GitHub Action
Donkey-Development-Kit/donkey-development-kit#219 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
1
tools: donkey.tools.discover() returns governed MCP tools as native framework tools
Donkey-Development-Kit/donkey-development-kit#221 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
2
tools: allow/deny filtering and descriptor token accounting
Donkey-Development-Kit/donkey-development-kit#222 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
a2a: donkey expose — provision the A2A proxy, policies and registry entry in one command
Donkey-Development-Kit/donkey-development-kit#226 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
a2a: donkey dev — a gateway in front of the laptop, real or simulated
Donkey-Development-Kit/donkey-development-kit#227 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
epic: Phase 2 — Differentiate, go beyond
Donkey-Development-Kit/donkey-development-kit#260 · opened on Sep 4, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
1
tools: ToolSet.filter() — allow/deny/predicate filtering and descriptor token accounting
Donkey-Development-Kit/donkey-development-kit#42 · opened on Sep 1, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
3
telemetry: adopt an inbound correlation ID and propagate it across MCP and A2A hops
Donkey-Development-Kit/donkey-development-kit#308 · opened on Sep 9, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
tools: a typed refusal for a tool outside the consumer's MCP access profile
Donkey-Development-Kit/donkey-development-kit#312 · opened on Sep 9, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
refusals: type the Akamai federated guardrail verdict
Donkey-Development-Kit/donkey-development-kit#313 · opened on Sep 9, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
4
killswitch: carry the kill reason — manual, anomaly, or eval drift
Donkey-Development-Kit/donkey-development-kit#314 · opened on Sep 9, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
1
testing: --donkey-mode server path for the conformance plugin
Donkey-Development-Kit/donkey-development-kit#322 · opened on Sep 10, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
skeleton: bring-your-own-key via a configurable proxy key header (Dynamic key)
Donkey-Development-Kit/donkey-development-kit#367 · opened on Sep 11, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
2
core/cache: TTLCache for tokens and registry lookups, with DONKEY_NO_CACHE escape hatch
Donkey-Development-Kit/donkey-development-kit#15 · opened on Sep 1, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
2
conformance: wire the Phase 2–2.8 scenario bodies as their features land
Donkey-Development-Kit/donkey-development-kit#444 · opened on Sep 20, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
epic(jev): support TypeSafe Jev (System One models) as a governed decision surface
Donkey-Development-Kit/donkey-development-kit#572 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
verify: govern TypeSafe's System One endpoint through Omni Gateway and capture its shapes
Donkey-Development-Kit/donkey-development-kit#573 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
adapters: donkey.typesafe — a governed native TypeSafeClient / AsyncTypeSafeClient
Donkey-Development-Kit/donkey-development-kit#574 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
retry: tell a gateway budget 429 apart from TypeSafe's own 429/529 on the Jev route
Donkey-Development-Kit/donkey-development-kit#575 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
refusals: classify System One failures into the DDK error taxonomy
Donkey-Development-Kit/donkey-development-kit#576 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)
telemetry: a correlated span per System One call, with usage and confidence
Donkey-Development-Kit/donkey-development-kit#577 · opened on Sep 24, 2026 · Phase 2 — Differentiate, go beyond (0.2.0)

Issues