Repository navigation
Release v2.15.0: value origin on the MCP proxy, GDPR erasure that keeps the chain, encrypted retention archives, receipt time source - #1003
Conversation
…ps the chain, encrypted retention archives, receipt time source vaara-mcp-proxy --value-origin brings recipient holds to any MCP client, with a strict mode for agents that pay, and value origin now reads phone numbers and wallet addresses. vaara trail erase removes one record's data for an Art. 17 request and the chain still verifies. vaara trail rotate --encrypt-to writes an encrypted archive with a public signed seal. Receipts can state their time source; the verifier trusts only a witnessed one. A UBI 9 Containerfile passes Red Hat preflight, the BCI base is pinned by digest, os-layer egress --public opens the internet and keeps the home network shut. Security: caller-supplied names cannot forge log lines, and an upstream error reaches the caller as its type only.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Merge Risk: ⚪ Minimal · up to
|
Release v2.15.0.
Value origin now works for any MCP client:
vaara-mcp-proxy --value-originremembers the recipient, payee and endpoint values in tool results and holds a later call that sends to one of them.--value-origin-strictholds every authority value not on the trusted list, for agents that pay. Value origin also reads phone numbers in international form and wallet addresses.vaara trail eraseremoves one record's data for a GDPR Art. 17 request and appends a record that names it, so the chain still verifies.vaara trail rotate --encrypt-toencrypts the retention archive to a recipient key and writes a public seal, signed with the export key. Execution receipts can carrytimeSource, and the verifier treats only a TSA-witnessed time as trusted.Packaging: a UBI 9 Containerfile for
vaara proxythat passes Red Hat preflight, and the SUSE BCI base pinned by its multi-arch index digest.vaara os-layer egress --publicopens the public internet while keeping the operator's own network shut.vaara llm-proxyrecords a subscription seat's plan limits on each outcome.Security: control characters in caller-supplied names cannot forge log lines, and an upstream connection error reaches the caller as its type only.
See CHANGELOG.md for the full list.
Summary by CodeRabbit