v0.3.3 — Governed Agentic Workflows

What's Changed

Added

• Audit schema v1.4: optional provenance object on audit artifacts with source_ids, derived_from_audit_checksums, and compilation_source_hash fields. All fields are optional; v1.3 artifacts remain valid.
• AuditLineage: reconstruct and traverse a DAG of audit artifacts from a JSONL audit trail. Provides roots(), leaves(), ancestors(), descendants(), orphans(), and has_cycle(). Available as from aigc import AuditLineage.
• ProvenanceGate: built-in enforcement gate at INSERTION_PRE_OUTPUT that blocks invocations whose runtime context lacks provenance source_ids. Failure codes: PROVENANCE_MISSING and SOURCE_IDS_MISSING. Available as from aigc import ProvenanceGate.
• Provenance forwarding: enforce_invocation, enforce_pre_call/enforce_post_call, and AIGC methods now forward invocation["context"]["provenance"] into every emitted audit artifact, enabling cross-invocation lineage traversal.
• RiskHistory advisory utility: records risk scores over time for a named entity and classifies the trend as "improving", "stable", or "degrading" via trajectory(). Exports TRAJECTORY_IMPROVING, TRAJECTORY_STABLE, TRAJECTORY_DEGRADING constants.
• Demo Labs 8–10: Governed Knowledge Base (Lab 8), Governed vs. Ungoverned comparison (Lab 9), and Split Enforcement Explorer (Lab 10) in the React + FastAPI demo app.

Fixed

• _normalize_provenance now drops schema-invalid provenance values before artifact emission: empty lists, non-string items, invalid hex64 patterns, and duplicates are pruned; lists over 1000 items are truncated. Prevents audit artifacts that fail audit_artifact.schema.json validation.

Changed

• @governed default flip: pre_call_enforcement now defaults to True. Split enforcement is the standard execution model for v0.3.3+.

  Migration: Call sites that rely on unified mode must add pre_call_enforcement=False explicitly — this opt-out remains functional but emits DeprecationWarning and will be removed in a future release.

---

Full changelog: CHANGELOG.md

v0.3.2

See CHANGELOG.md for details.

v0.3.1

What's Changed

Added

• React demo full parity — All 7 labs connected to live FastAPI backend; no user API keys required. Replaces Streamlit reference implementation as the primary demo surface.
• FastAPI backend on Render — Permanent API backend deployed; demo-app-api serves all lab endpoints
• ADR template — Architecture Decision Record template added to help drawer

Fixed

• Lab 7 blank screen crash when API returns numeric (int/float) timestamps
• Lab 1 strict mode risk score display regression
• Lab 6 stale gate-info responses retained after gate selection change
• Lab 5 out-of-order loader results guard added
• Lab 5 UTC date parsing and timeline day-component calculation corrected
• Lab 4 composition UI readiness now gated on successful policy preload
• Lab 4/5/6 stale scenario responses guarded against race conditions
• Canonical JSON normalization for integer-valued floats (JS/Python parity)
• Sample policies path relocated into demo-app-api; SAMPLE_POLICIES_DIR resolution fixed for Render deployment
• Render deployment: PYTHONPATH and editable install path corrected

Changed

• Help drawer content updated to reflect v0.3.0 feature set across all labs
• CI: pytest testpaths scoped to tests/ to exclude demo-app-api fixtures
• CI: workflow_dispatch trigger added to React deploy workflow
• Markdownlint gate: docs/articles/** excluded (article prose is intentionally non-gating)

Full Changelog: v0.3.0...v0.3.1

v0.3.0

What's New

• Risk scoring engine — configurable strict, risk_scored, and warn_only modes
• Artifact signing — HMAC-SHA256 via ArtifactSigner
• Tamper-evident audit chain — AuditChain with chained verification
• Custom gate isolation — immutable read-only views; mutation caught as governance failure
• Pluggable PolicyLoader — AIGC(policy_loader=...) now routes at runtime
• OpenTelemetry integration — enforcement spans and gate events
• Policy testing framework — aigc.policy_testing
• Policy version dates — effective_date / expiration_date enforcement
• Compliance export CLI — aigc compliance export

See CHANGELOG.md for full details.

Install

pip install aigc-sdk==0.3.0

Release Package

Download aigc-sdk-0.3.0-release.zip for the full bundle: demo app (7 Streamlit labs), integration docs, reference policies, and JSON schemas.

v0.1.3

See CHANGELOG.md for details.

v0.1.2

See CHANGELOG.md for details.