Repository navigation
changelog: entries for #608, #610 and #619 - #643
Merged
Merged
Conversation
They merged after changelog entries moved to main at merge, and no entry was written for them then. The collateral and Acta receipt verifier entries are their author's own, as they stood in those pull requests before the file was taken out of them; the code they describe did not change after. The adapters entry is new and was checked against the merged code. Signed-off-by: Louie Lu <48041247+lywinged@users.noreply.github.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UtTRZHH7SXtpEikWace636
lywinged
added
the
changelog
Claude
appraisal_verifier is never None, but both adapters give it a default, so it is not required. And before the Acta receipt verifier change, signature_verifies already returned False for a payload rfc8785 cannot canonicalize: rfc8785's errors and UnicodeEncodeError are all ValueErrors, which it caught. What that change added there is deep nesting; chain_link_matches had no handling before it. The collateral entry stays its author's own as it stood in its pull request. The Acta receipt verifier entry is its author's, with its pull request added to the credit and its last clause narrowed to what it changed. Signed-off-by: Louie Lu <48041247+lywinged@users.noreply.github.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UtTRZHH7SXtpEikWace636
rajnisht7
approved these changes
Oct 28, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this changes
Adds
CHANGELOG.mdentries under[Unreleased]for #608, #610 and #619. All three merged on 27 October, after #623 moved changelog entries tomainat merge, and no entry was written for them then.1ffb618beforeCHANGELOG.mdwas taken out of it. The code it describes did not change after that commit; the later head only rebased ontomain.60bc7f2, with tools(acta_receipt_verifier): reject private JWKs, non-canonical base64url keys, and non-canonical signature.sig hex #608 added to the credit and its last clause narrowed to what tools(acta_receipt_verifier): reject private JWKs, non-canonical base64url keys, and non-canonical signature.sig hex #608 changed. Before it,signature_verifiesalready returnedFalsefor a payloadrfc8785cannot canonicalize, sincerfc8785's errors andUnicodeEncodeErrorare allValueErrors, which it caught. What tools(acta_receipt_verifier): reject private JWKs, non-canonical base64url keys, and non-canonical signature.sig hex #608 added there is deep nesting;chain_link_matcheshad no handling before it.src/agentrust_trace/adapters/. It namesbuild_provenance_slsa_levelas moving to the constructor for the sandbox adapter only, becauseTraceAGTAdapteralready builtBuildProvenancein its constructor before fix(adapters): validate data_class, policy/appraisal enums, and URI fields (#615) #619.appraisal_verifieris described as neverNonerather than required: both adapters give it a default.Newest first, as the section is ordered. This pull request edits
CHANGELOG.md, so it carries thechangeloglabel, on which the Changelog guard passes it.Type of change
Spec section
None.
Tests for a fix
Not a code or schema fix.
Changelog entry
None: this pull request is the entries.
Checklist
git commit -s)<!-- CHANGED: #NNN: description -->in spec text🤖 Generated with Claude Code
https://claude.ai/code/session_01UtTRZHH7SXtpEikWace636