Skip to content

security: pre-launch hardening#49

Merged
imran-siddique merged 2 commits into
mainfrom
security/pre-launch-hardening
Jun 18, 2026
Merged

security: pre-launch hardening#49
imran-siddique merged 2 commits into
mainfrom
security/pre-launch-hardening

Conversation

@imran-siddique

Copy link
Copy Markdown
Contributor

Summary

Pre-launch security hardening fixes identified in a full security review of all agentrust-io repos before public launch (CC Summit June 23, 2026).

See individual commit message for the full list of changes.

Test plan

  • CI passes
  • No new test failures

🤖 Generated with Claude Code

imran-siddique and others added 2 commits June 18, 2026 11:19
- replace personal email with maintainers@agentrust.io in MAINTAINERS.md
- sync slsa_level minimum: 0 in SDK-bundled schema (matches standalone schema)
- tighten subject URI pattern: require DID method+id and SPIFFE domain+path
- add format_checker to JSON schema validator (enforce URI format fields)
- remove undocumented 'opaque' platform row from README

Signed-off-by: Imran Siddique <imran.siddique@opaque.co>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Pre-existing ruff F401 violation that our PR surfaced in CI.

Signed-off-by: Imran Siddique <imran.siddique@opaque.co>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@imran-siddique imran-siddique merged commit 84df8ef into main Jun 18, 2026
3 checks passed
@imran-siddique imran-siddique deleted the security/pre-launch-hardening branch June 18, 2026 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant