DEV Community

Edison Flores
Edison Flores

Posted on

Re: @wrencalloway — thanks for following along, here's what shipped since

Thanks Wren — genuinely appreciated.

Since your comment we shipped a few things worth mentioning:

  1. UTA v1.0.0 is live. The old "Sentinel 10-layer audit" became a 12-stage fail-closed verification pipeline. Every stage can independently DENY. The golden rule is: UNKNOWN = DENY, ERROR = DENY, EXPIRED = DENY, REVOKED = DENY.

  2. We now have 480+ tests running across TypeScript, Python, Rust, and Go SDKs. All four verify the same 36 test vectors — same canonical bytes, same SHA-256, same Ed25519 signatures. The cross-language fixtures @anp2network asked for are published and immutable at vectors/ on GitHub.

  3. The /api/trust endpoint now returns the decision plus the inputs it consumed (args_hash, trust_score, verification stages). Each ALLOW produces a signed receipt with an evidence_hash. Callers can re-run the policy locally and disagree with a named step.

  4. npm packages are up: @marketnow/trust-core, @marketnow/trust-adapters, @marketnow/trust-gateway. AL-1.0 license.

Will keep posting updates as we go.

Top comments (0)