Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@

---

[![Version](https://img.shields.io/badge/version-4.5.0-blue.svg)](#)
[![Version](https://img.shields.io/badge/version-1.5.1-blue.svg)](#)
[![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
[![Python](https://img.shields.io/badge/python-3.9%2B-blue)](#)
[![MCP](https://img.shields.io/badge/MCP-compatible-brightgreen)](#)
Expand All @@ -15,9 +15,9 @@

---

## What's New in v4.5
## What's New in v1.5.1

IntentusNet v4.5 introduces **provable determinism** — the execution runtime now includes built-in mechanisms to verify, enforce, and prove that execution behavior is deterministic across runs, environments, and model swaps.
IntentusNet v1.5.1 introduces **provable determinism** — the execution runtime now includes built-in mechanisms to verify, enforce, and prove that execution behavior is deterministic across runs, environments, and model swaps.

| Feature | Description |
|---------|-------------|
Expand Down Expand Up @@ -213,17 +213,17 @@ IntentusNet provides an explicit execution contract:
| Structured Errors | **Provided** | Typed error codes, no silent failures |
| Crash Recovery | **Provided** | WAL-backed execution state & recovery |
| Signed WAL (REGULATED) | **Provided** | Ed25519 per-entry signatures for audit trail |
| Execution Fingerprinting | **Provided (v4.5)** | SHA-256 fingerprint proves deterministic execution |
| Deterministic-Safe CI/CD | **Provided (v4.5)** | 9-gate pipeline enforces determinism before deploy |
| Drift Detection | **Provided (v4.5)** | Automatic nondeterminism detection via fingerprints |
| Execution Fingerprinting | **Provided (v1.5.1)** | SHA-256 fingerprint proves deterministic execution |
| Deterministic-Safe CI/CD | **Provided (v1.5.1)** | 9-gate pipeline enforces determinism before deploy |
| Drift Detection | **Provided (v1.5.1)** | Automatic nondeterminism detection via fingerprints |

Full guarantee details: https://intentusnet.com/docs/guarantees

---

## Provable Determinism (v4.5)
## Provable Determinism (v1.5.1)

IntentusNet v4.5 treats determinism as a **provable property**, not just a design goal.
IntentusNet v1.5.1 treats determinism as a **provable property**, not just a design goal.

### Execution Fingerprinting

Expand Down Expand Up @@ -483,7 +483,7 @@ IntentusNet is a **deterministic execution runtime**, not an autonomous agent fr
- No task planning or reasoning
- No evaluation of model outputs
- No replacement for workflow engines
- No distributed consensus in v4
- No distributed consensus in v1

### Determinism Boundary

Expand All @@ -496,7 +496,7 @@ Non-deterministic model behavior is detected, recorded, and surfaced — never h

See [docs/roadmap.md](docs/roadmap.md) for the full roadmap.

**Current: v4.5** — Provable Determinism
**Current: v1.5.1** — Provable Determinism

- Execution fingerprinting
- Deterministic-safe CI/CD (9 gates)
Expand Down
4 changes: 2 additions & 2 deletions docs-site/docs/architecture/determinism-model.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -311,9 +311,9 @@ Capability(intent=IntentRef(name="Process", version="2.0"))
| Model output | No | Yes | Yes |
| Network latency | No | Yes | N/A |

## Provable Determinism (v4.5)
## Provable Determinism (v1.5.1)

IntentusNet v4.5 extends the determinism model with **provable guarantees**:
IntentusNet v1.5.1 extends the determinism model with **provable guarantees**:

### Execution Fingerprinting

Expand Down
2 changes: 1 addition & 1 deletion docs-site/docs/cli/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ Verify installation:

```bash
intentusnet --version
# intentusnet 4.5.0
# intentusnet 1.5.1
```

## Command Summary
Expand Down
2 changes: 1 addition & 1 deletion docs-site/docs/demos/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ These demos illustrate IntentusNet's core capabilities with realistic scenarios.
| [Dangerous Target Filtering](./dangerous-target-filtering) | Policy filtering protects CCTV while allowing other systems |
| [Crash Recovery](./crash-recovery) | Mid-execution crash recovery with deterministic resume |
| [Model Swap Prevention](./model-swap-prevention) | Deterministic routing prevents behavioral drift |
| [Project Blackbox](./project-blackbox) | 8-act end-to-end proof of all deterministic guarantees (v4.5) |
| [Project Blackbox](./project-blackbox) | 8-act end-to-end proof of all deterministic guarantees (v1.5.1) |

## Demo Format

Expand Down
2 changes: 1 addition & 1 deletion docs-site/docs/demos/project-blackbox.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ description: "8-act end-to-end demonstration proving all deterministic guarantee

# Project Blackbox

Project Blackbox is an 8-act end-to-end demonstration that proves every deterministic guarantee provided by IntentusNet v4.5. It runs locally in under 2 minutes with zero external dependencies.
Project Blackbox is an 8-act end-to-end demonstration that proves every deterministic guarantee provided by IntentusNet v1.5.1. It runs locally in under 2 minutes with zero external dependencies.

## Running the Demo

Expand Down
8 changes: 4 additions & 4 deletions docs-site/docs/getting-started/install.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Verify installation:

```bash
python -c "import intentusnet; print(intentusnet.__version__)"
# Output: 4.5.0
# Output: 1.5.1
```

## Installation Options
Expand Down Expand Up @@ -78,7 +78,7 @@ pip install -e ".[dev]"
Pull the official image:

```bash
docker pull intentusnet/runtime:4.5.0
docker pull intentusnet/runtime:1.5.1
```

Run a container:
Expand All @@ -87,7 +87,7 @@ Run a container:
docker run -it --rm \
-v $(pwd)/config:/app/config \
-v $(pwd)/records:/app/.intentusnet/records \
intentusnet/runtime:4.5.0
intentusnet/runtime:1.5.1
```

## Verify Installation
Expand Down Expand Up @@ -123,7 +123,7 @@ Expected output:

```
Name: intentusnet
Version: 4.5.0
Version: 1.5.1
Summary: Deterministic execution runtime for multi-agent systems
Requires: cryptography, websockets, pyzmq, fastapi, uvicorn, python-dateutil
```
Expand Down
16 changes: 8 additions & 8 deletions docs-site/docs/guarantees/overview.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -21,17 +21,17 @@ Every production runtime needs a clear contract. IntentusNet's contract is:
| Structured Errors | **Provided** | Typed error codes, no silent failures |
| Crash Recovery | **Provided** | WAL-backed execution state with recovery |
| Signed WAL (REGULATED) | **Provided** | Ed25519 per-entry signatures for audit trail |
| Execution Fingerprinting | **Provided (v4.5)** | SHA-256 fingerprint proves deterministic execution |
| Deterministic-Safe CI/CD | **Provided (v4.5)** | 9-gate pipeline enforces determinism before deploy |
| Drift Detection | **Provided (v4.5)** | Automatic nondeterminism detection via fingerprints |
| Execution Fingerprinting | **Provided (v1.5.1)** | SHA-256 fingerprint proves deterministic execution |
| Deterministic-Safe CI/CD | **Provided (v1.5.1)** | 9-gate pipeline enforces determinism before deploy |
| Drift Detection | **Provided (v1.5.1)** | Automatic nondeterminism detection via fingerprints |

:::note Design Goals vs. Implemented Guarantees
Features marked as "Design Goal" are architecturally planned but may have implementation limitations in the current version. See individual guarantee pages for details.
:::

## Quick Reference

### What IS Guaranteed (v4.5)
### What IS Guaranteed (v1.5.1)

```
✓ Deterministic agent ordering
Expand All @@ -42,9 +42,9 @@ Features marked as "Design Goal" are architecturally planned but may have implem
✓ Trace span emission for every decision
✓ Policy allow/deny evaluation
✓ Signed WAL entries (REGULATED mode)
✓ Execution fingerprinting (v4.5)
✓ Deterministic-safe CI/CD enforcement (v4.5)
✓ Drift detection (v4.5)
✓ Execution fingerprinting (v1.5.1)
✓ Deterministic-safe CI/CD enforcement (v1.5.1)
✓ Drift detection (v1.5.1)
```

### What is NOT Guaranteed
Expand Down Expand Up @@ -140,7 +140,7 @@ Guarantees may evolve across versions:
| 0.3.x | Historical response retrieval, stable hashes |
| 1.0.x | WAL signing, compliance modes (Phase I) |
| 4.0.x | Enterprise features, gateway enforcement |
| 4.5.x | Execution fingerprinting, deterministic CI/CD, drift detection |
| 1.5.x | Execution fingerprinting, deterministic CI/CD, drift detection |

## Verifying Guarantees

Expand Down
2 changes: 1 addition & 1 deletion docs-site/docs/introduction/what-is-intentusnet.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@ IntentusNet may be overkill if:

| Property | Value |
| --------------- | ------------------------------------ |
| Current Version | 4.5.0 |
| Current Version | 1.5.1 |
| Python Support | 3.9+ |
| Status | Production-ready for core guarantees |
| License | MIT |
Expand Down
2 changes: 1 addition & 1 deletion docs-site/docs/production/observability.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -300,7 +300,7 @@ app = FastAPI()

@app.get("/health")
async def health():
return {"status": "healthy", "version": "4.5.0"}
return {"status": "healthy", "version": "1.5.1"}

@app.get("/health/ready")
async def ready():
Expand Down
86 changes: 86 additions & 0 deletions docs-site/docs/release-notes/v1-5-1.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,86 @@
---
sidebar_position: 1
title: "v1.5.1 — Provable Determinism"
description: "Release notes for IntentusNet v1.5.1"
---

# IntentusNet v1.5.1 — Provable Determinism

**Released:** 2026-02-12

## Summary

IntentusNet v1.5.1 introduces **provable determinism** — execution behavior can now be cryptographically verified, drift-detected, and CI-enforced. Determinism is no longer just a design property; it is a measurable, enforceable guarantee.

## New Features

### Execution Fingerprinting

Every execution produces a **SHA-256 fingerprint** computed from the intent sequence, agent call sequence, parameter hashes, output hashes, retry pattern, execution order, and timeout values.

- Same input + same runtime = same fingerprint
- Fingerprint mismatch = nondeterminism detected

### Deterministic-Safe CI/CD Pipeline

A 9-gate verification pipeline enforces determinism before deployment:

| Gate | Purpose |
|------|---------|
| Build Reproducibility | Same source → same binary SHA-256 |
| Deterministic Execution | Same input → same fingerprint across N runs |
| WAL Replay Final-State | Replayed response hash matches original |
| Entropy Detection | Static scan blocks unseeded randomness |
| Container Reproducibility | Same Dockerfile → same image hash |
| Routing Determinism | Same capabilities → same agent selection |
| Crash Recovery | Side-effect-aware resume/block decisions |
| WAL Integrity & Tamper | Hash chain + Ed25519 signature verification |
| Runtime Snapshot | Serialization round-trip integrity |

All 9 gates must pass. A single failure blocks deployment.

### Drift Detection

Automatic detection of nondeterministic execution through fingerprint comparison across runs.

### WAL Replay Verification

Stored responses can be proven to match original execution by comparing content hashes.

### Entropy Scanning

Static analysis gate scans deterministic-critical code paths for unseeded randomness, `uuid4()` in step IDs, `time()` in hashes, and `os.urandom()` in hash computation.

### Project Blackbox Demo

An 8-act end-to-end demonstration proving all deterministic guarantees. See [Project Blackbox](../demos/project-blackbox).

## New CI Gate Scripts

| Script | Gate |
|--------|------|
| `gate_deterministic_execution.py` | Evaluation report thresholds |
| `gate_wal_replay_state.py` | WAL replay hash verification |
| `gate_entropy_detection.py` | Static entropy scanning |
| `gate_routing_determinism.py` | Agent selection determinism |
| `gate_crash_recovery.py` | Recovery decision correctness |
| `gate_wal_integrity.py` | Hash chain and signature verification |
| `gate_runtime_snapshot.py` | Serialization round-trip verification |

## Updated Guarantees

Three new guarantees added to the execution contract:

| Guarantee | Status |
|-----------|--------|
| Execution Fingerprinting | **Provided (v1.5.1)** |
| Deterministic-Safe CI/CD | **Provided (v1.5.1)** |
| Drift Detection | **Provided (v1.5.1)** |

## Breaking Changes

None. v1.5.1 is fully backward-compatible with v1.x.

## Migration

No migration required. New features are additive.
2 changes: 1 addition & 1 deletion docs-site/docusaurus.config.ts
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ const config: Config = {
lastVersion: 'current',
versions: {
current: {
label: '4.5',
label: '1.5.1',
path: '',
},
},
Expand Down
2 changes: 1 addition & 1 deletion docs-site/sidebars.ts
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ const sidebars: SidebarsConfig = {
label: 'Release Notes',
collapsed: true,
items: [
'release-notes/v4-5',
'release-notes/v1-5-1',
],
},
],
Expand Down
2 changes: 1 addition & 1 deletion docs/ci-cd.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

## Overview

IntentusNet v4.5 includes a **9-gate CI/CD verification pipeline** that enforces determinism before deployment. This is not a test suite — it is a deployment gate. Every gate must pass, or the release is blocked.
IntentusNet v1.5.1 includes a **9-gate CI/CD verification pipeline** that enforces determinism before deployment. This is not a test suite — it is a deployment gate. Every gate must pass, or the release is blocked.

The pipeline is defined in `.github/workflows/deterministic-stability.yml`.

Expand Down
4 changes: 2 additions & 2 deletions docs/determinism.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

## Overview

IntentusNet v4.5 treats determinism as a **provable property**, not just a design goal. The runtime includes built-in mechanisms to verify, enforce, and prove that execution behavior is deterministic across runs, environments, and model swaps.
IntentusNet v1.5.1 treats determinism as a **provable property**, not just a design goal. The runtime includes built-in mechanisms to verify, enforce, and prove that execution behavior is deterministic across runs, environments, and model swaps.

This document covers:

Expand Down Expand Up @@ -188,4 +188,4 @@ These nondeterministic inputs are **recorded** so they can be inspected, but the
- [CI/CD Gate Specification](ci-cd.md)
- [WAL Format](wal-format.md)
- [Runtime Determinism Core](runtime-determinism.md)
- [Release Notes v4.5](release-notes/v4.5.md)
- [Release Notes v1.5.1](release-notes/v1.5.1.md)
Loading