🚀 apcore-a2a v0.8.0 is live across Rust, Python, and TS!
We raised the runtime floor to apcore 0.31.0 / apcore-toolkit 0.12.0 and fixed 3 silent cross-language divergences before they could break your production pipelines.
Here’s the breakdown 👇
🐛 The Fixes
Rust: Fixed an Agent Card ACL mismatch. acl_context stopped synthesizing a fake @external principal for null identities, bringing the discovery path back in 100% agreement with the real execution path.
Python: Fixed global_deadline mapping. We removed an old workaround for an internal time.monotonic() vs time.time() bug fixed in apcore 0.31.0—preventing calls from instantly expiring.
TypeScript: Updated global_deadline to use Context.globalDeadline (epoch seconds) instead of the deprecated data key, keeping task-timeout enforcement active.
📦 Runtime Floor Upgrades
Upgraded to apcore 0.31.0 / apcore-toolkit 0.12.0 across all 3 SDKs (settling 54 cross-language divergences upstream).
Schema Safety: Fully inherits upstream’s $REF sibling-key credential disclosure fixes automatically with zero local code changes.
sys_modules Enforcement: Compatible out-of-the-box with new per-group enforcement rules.
No breaking wire contract changes. Smooth upgrades all around. ⚡️
https://t.co/zFLCNeCDUN
🚀 apcore-mcp v0.22.0 is live across Python, TypeScript & Rust!
Highlights:
🔒 Critical Security Fix: $REF inlining was silently dropping x-sensitive tags, exposing sensitive credentials in plaintext. Sibling keys are now preserved during ref resolution.
⬆️ Dependency Floor Bump: Requires apcore >= 0.31.0 and apcore-toolkit >= 0.12.0 across all three bridges to bring 50+ cross-language divergence & security fixes.
Full details in the release notes! 📦✨
https://t.co/ACiswl4WN5
apcore-toolkit v0.12.0 is out! 📦
Big release packed with updates:
🔐 RFC 8628 Device Auth Flow — Pure state machine, zero terminal/HTTP assumptions, backed by 65 zero-mock conformance cases.
🔍 BindingLoader pattern support — Full alignment with apcore 0.30/0.31 defaults via Algorithm A25.
🛡️ Security fix — $REF sibling keys are now preserved during schema resolution, preventing silent x-sensitive redaction leaks.
📈 Upgraded apcore floor to 0.31.0.
Full details in the release notes! 👇
https://t.co/6NPUt80Rnl
For governed agent runtimes, open source is not just “nice to have.”
Security, platform, and AI teams all need to inspect:
• How schemas are enforced
• How ACL/approvals are applied
• What gets logged
Opaque runtimes make real governance nearly impossible.