release: v0.3.0 - real framework integrations, security hardening, CI/CD

Minor version bump (0.2.5 -> 0.3.0) bundling seven previously merged but
unreleased pull requests.

Security:
- CRITICAL: delegation chain auth bypass fix (PR #45). Parent tokens and
  capability attenuation are now strictly verified on every delegation
  verify.
- SSRF hardening on agent discovery, DID resolution, credential fetch
  (PR #47).
- Timing-safe comparisons for signature and token equality checks
  (PR #47).
- Seven REST API router exception paths no longer leak internals to
  clients (PR #47).

Added:
- Real LangChain integration using BaseCallbackHandler (PR #42).
- Real OpenAI Agents SDK integration via MCPServerStdio (PR #48).
- Real CrewAI integration via MCPServerAdapter (PR #51).

Fixed:
- Article 43 Annex III conformity assessment now correctly differentiates
  categories that require a notified body versus permitted
  self-assessment (PR #46).
- EAS schema UID derivation matches the on-chain EAS encoding (PR #50).
- Attested event decoding prefers web3.py ABI decoding with a hardened
  topic-signature fallback (PR #50).
- tests/conftest.py blockchain_service_mock now emits an Attested log
  with the correct topic[0] so the hardened decoder is exercised end to
  end.

Infrastructure:
- GitHub Actions CI/CD: pytest matrix (py 3.10 through 3.13), ruff,
  mypy, bandit, pip-audit, plus a PyPI publish workflow on release
  creation (PR #49).
- Default pytest addopts now include "-p no:logfire" so that transitive
  installs of opentelemetry-sdk (via CrewAI) do not abort collection
  with ImportError: cannot import name 'ReadableLogRecord'.

Files updated: pyproject.toml (0.2.5 -> 0.3.0, addopts),
attestix/__init__.py (0.2.4 -> 0.3.0), server.json (0.2.4 -> 0.3.0),
CHANGELOG.md (0.3.0 section), tests/conftest.py (Attested log mock).

All 358 tests pass, 1 skipped. twine check on wheel and sdist: PASSED.

Author: ascender1729

CHANGELOG.md

@@ -4,6 +4,84 @@ All notable changes to Attestix are documented here.
 
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.3.0] - 2026-04-17
+
+Security hardening release bundling seven previously merged but unreleased
+pull requests (PR #45 through PR #51). The release ships a critical delegation
+auth bypass fix, corrects Article 43 Annex III conformity logic, lands three
+real framework integrations (LangChain, OpenAI Agents SDK, CrewAI), and adds
+GitHub Actions CI/CD.
+
+Minor version bump (0.2.5 -> 0.3.0) because the batch contains security
+fixes, new public integration surfaces, and an Article 43 behavior change.
+No breaking API changes for MCP tool callers.
+
+### Security
+
+- **CRITICAL: delegation chain auth bypass fixed** (PR #45). Parent tokens in
+  a delegation chain are now fully verified and capability attenuation is
+  strictly enforced. Previously a malicious delegate could craft a child
+  token whose claimed capabilities exceeded those of the parent. Any
+  long-lived delegation tokens issued prior to this release should be
+  reviewed and re-issued.
+- **SSRF hardening** (PR #47). Agent discovery, DID resolution, and credential
+  fetch paths now go through the centralized SSRF guard (private IP blocking,
+  metadata endpoint blocking, DNS rebind defense) on every outbound request.
+- **Timing-safe comparisons** (PR #47). Signature and token equality checks
+  switched to constant-time comparison (`hmac.compare_digest`) to remove a
+  timing oracle on credential and delegation verification.
+- **API error sanitization** (PR #47). Seven REST API router exception paths
+  no longer leak stack traces, file paths, or internal type names to
+  clients; errors are now structured and safe by default.
+
+### Added
+
+- **Real LangChain integration** (PR #42, released now). `integrations/langchain/`
+  ships an actual `BaseCallbackHandler` subclass that logs every LLM, chain,
+  and tool event into the Attestix audit trail. Replaces the previous
+  example-only shim.
+- **Real OpenAI Agents SDK integration** (PR #48). `integrations/openai_agents/`
+  uses `MCPServerStdio` to connect the OpenAI Agents runtime directly to the
+  Attestix MCP server, exposing all 47 tools as native agent capabilities.
+- **Real CrewAI integration** (PR #51). `integrations/crewai/` uses
+  `MCPServerAdapter` so CrewAI crews can load Attestix tools the same way
+  they load any other MCP toolset.
+
+### Fixed
+
+- **Article 43 Annex III conformity assessment correctness** (PR #46). The
+  compliance service now differentiates between Annex III categories when
+  deciding whether self-assessment is permitted versus notified-body
+  assessment being required. High-risk systems covered by Annex III point 1
+  (biometrics) and similar categories are blocked from self-assessment per
+  the Act.
+- **EAS schema UID derivation** (PR #50). On-chain schema UID is now derived
+  using the exact encoding EAS itself uses (schema string, resolver address,
+  revocable flag), matching anchors created on-chain with anchors looked up
+  on-chain. Previously mismatched schema UIDs could cause
+  `isAttestationValid` lookups to miss.
+- **Attested event decoding hardened** (PR #50). `_extract_attestation_uid`
+  now prefers web3.py's ABI-level `events.Attested().process_log` and falls
+  back to a topic-signature match on `keccak("Attested(address,address,bytes32,bytes32)")`.
+  Removes reliance on fragile byte offsets when reading receipt logs.
+- **Test mock log shape** (this release). `tests/conftest.py`
+  `blockchain_service_mock` now emits an Attested-event-shaped log with the
+  correct topic[0] signature so the hardened decoder path is exercised end
+  to end in CI.
+
+### Infrastructure
+
+- **GitHub Actions CI/CD** (PR #49). New `.github/workflows/` pipelines run
+  a pytest matrix (Python 3.10, 3.11, 3.12, 3.13) on pull requests, plus
+  `ruff`, `mypy`, `bandit`, and `pip-audit` jobs. A separate release
+  workflow publishes to PyPI on tag push when `PYPI_API_TOKEN` is set as a
+  repo secret.
+- **pytest plugin compatibility** (this release). Default `addopts` now
+  includes `-p no:logfire` so that transitive installs of
+  `opentelemetry-sdk` (pulled via CrewAI) do not abort collection with
+  `ImportError: cannot import name 'ReadableLogRecord'` when the installed
+  `logfire` version targets a different otel ABI.
+
 ## [0.2.3] - 2026-02-27
 
 ### Added

attestix/__init__.py

@@ -18,7 +18,7 @@
     - attestix.blockchain: Merkle trees and EAS anchoring
 """
 
-__version__ = "0.2.4"
+__version__ = "0.3.0"
 
 # Re-export submodules for convenient access
 from attestix import services

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "attestix"
-version = "0.2.5"
+version = "0.3.0"
 description = "Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable Credentials, EU AI Act compliance, delegation chains, and reputation scoring. 47 MCP tools across 9 modules."
 readme = "README.md"
 license = {file = "LICENSE"}
@@ -106,6 +106,11 @@ py-modules = ["main", "cli", "config", "errors"]
 [tool.pytest.ini_options]
 asyncio_mode = "auto"
 testpaths = ["tests"]
+# Disable the Pydantic logfire plugin by default. When CrewAI (or other deps)
+# pull in an opentelemetry-sdk version that is incompatible with the installed
+# logfire, the plugin raises ImportError at collection time and aborts the
+# whole suite. We do not need logfire for our tests.
+addopts = "-p no:logfire"
 markers = [
     "live_blockchain: requires funded Base Sepolia wallet (deselect with -m 'not live_blockchain')",
 ]

server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/VibeTensor/attestix",
     "source": "github"
   },
-  "version": "0.2.4",
+  "version": "0.3.0",
   "packages": [
     {
       "registryType": "pypi",
       "identifier": "attestix",
-      "version": "0.2.4",
+      "version": "0.3.0",
       "transport": {
         "type": "stdio"
       }

tests/conftest.py

@@ -142,13 +142,26 @@ def blockchain_service_mock():
             mock_w3.eth.max_priority_fee = 100000000  # 0.1 gwei
             mock_w3.eth.get_balance.return_value = 10**18  # 1 ETH
             mock_w3.eth.get_transaction_count.return_value = 0
+
+            # Build a realistic Attested event log so _extract_attestation_uid
+            # can decode it. Topic[0] must be keccak("Attested(address,address,bytes32,bytes32)").
+            # The single non-indexed uid bytes32 sits at the first 32 bytes of data.
+            from web3 import Web3 as _Web3
+            _attested_sig = bytes(
+                _Web3.keccak(text="Attested(address,address,bytes32,bytes32)")
+            )
+            _fake_uid = b"\x01" * 32  # deterministic non-zero UID
             mock_w3.eth.wait_for_transaction_receipt.return_value = {
                 "status": 1,
                 "blockNumber": 12345,
                 "gasUsed": 187000,
                 "logs": [{
-                    "data": b"\x00" * 32 + b"\x01" * 32,
-                    "topics": [b"\x00" * 32, b"\xaa" * 32],
+                    "data": _fake_uid,
+                    "topics": [
+                        _attested_sig,
+                        b"\x00" * 12 + bytes.fromhex("11" * 20),  # recipient
+                        b"\x00" * 12 + bytes.fromhex("11" * 20),  # attester
+                    ],
                 }],
             }
             mock_w3.from_wei = lambda val, unit: val / 10**18 if unit == "ether" else val / 10**9