Issues

• examples/sovereign-agent-connector: agentrust_auc accepts boolean GCP iat/exp/instance_id, non-positive/boolean validity_seconds, and non-canonical base64url signatures

  needs-review:MEDIUM
  agentrust-io/integrations#379 · Filter by author drk-ram opened on Oct 25, 2026
  1

• integrations/xchk-registry: is_ed25519_jwk accepts private JWK members and non-canonical base64url, and load_json/published_key accept duplicate JSON keys

  needs-review:MEDIUM
  agentrust-io/integrations#378 · Filter by author drk-ram opened on Oct 25, 2026
  1

• integrations/parmana-server: parmana_evidence._verify accepts non-base64 characters in signatures and crashes on non-dict signature/payload fields

  needs-review:MEDIUM
  agentrust-io/integrations#377 · Filter by author drk-ram opened on Oct 25, 2026
  1

• integrations/aeoess-aps: verify_aps_action_receipt accepts boolean/float/non-finite max_age_seconds and clock_skew_seconds

  needs-review:MEDIUM
  agentrust-io/integrations#376 · Filter by author drk-ram opened on Oct 25, 2026
  1

• agentrust-trace-adapters: AppraisalEvidence, SourceSystem, and build_record accept boolean/float timestamps, non-bool signature_verified, and private JWKs

  needs-review:MEDIUM
  agentrust-io/integrations#375 · Filter by author drk-ram opened on Oct 25, 2026
  1

• fix(ramen-ai-cmcp): enforce canonical base64url and reject duplicate JSON keys in _receipt_verify.py

  needs-review:MEDIUM
  agentrust-io/integrations#367 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(examples): reject duplicate JSON keys, non-finite numbers, and boolean sequences in verify_receipts and verify_purchase

  needs-review:MEDIUM
  agentrust-io/integrations#369 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(capture-core): reject duplicate JSON keys and non-finite numbers in load_state/sha_mapping and check seal.alg in check_seal

  needs-review:MEDIUM
  agentrust-io/integrations#366 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(trace-adapters): reject boolean capture timestamps and non-canonical base64 signatures in openshell adapters

  needs-review:MEDIUM
  agentrust-io/integrations#368 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(verifiers): enforce canonical base64url, reject private JWKs and duplicate JSON keys in independent_verify and guard request_sha256 in companion_v0

  needs-review:MEDIUM
  agentrust-io/integrations#363 · Filter by author drk-ram opened on Oct 23, 2026
  1

• Proposal: runnable reference scenario for unreachable escalation authority and revocation after dispatch

  agentrust-io/integrations#333 · Filter by author wlad232 opened on Oct 17, 2026
  18

• EABC/cMCP profile: map order_create to execution_id, authorized-intent, observed-effect and execution scope

  agentrust-io/integrations#290 · Filter by author omwei-org opened on Oct 8, 2026
  1

• Build a reproducible acceptance harness for confidential workflows across components

  agentrust-io/integrations#199 · Filter by author imran-siddique opened on Sep 18, 2026
  20