Rahul Vishwakarma

All PRs

• add dev into main

  aflock-ai/aflock · Aug 2026 · comments 1

• fix(deps): resolve all open Dependabot alerts

  aflock-ai/aflock · Aug 2026

• supply-chain: sign + attest the build with cilock (keyless)

  manzil-infinity180/console · Jul 2026 · comments 6

• fix(install.sh): use 'cilock version' (no --version flag exists)

  aflock-ai/rookery · Jun 2026

• fix(verify): prove paper §4.4 Order and Distance on session merkle

  aflock-ai/aflock · May 2026

• fix(verify): enforce sublayout namespacing on child attestations

  aflock-ai/aflock · May 2026

• feat(mcp): expose paper-named tools

  aflock-ai/aflock · May 2026

• feat(policy): Sigstore-keyless signed policy verification

  aflock-ai/aflock · May 2026 · comments 4

• merge main in wasm-imp branch

  aflock-ai/aflock · May 2026 · comments 1

• fix(mcp): enforce policy Expires in MCP mode (closes #136)

  aflock-ai/aflock · May 2026 · comments 1

• fix(policy): expand ${...} placeholders at Load

  aflock-ai/aflock · May 2026 · comments 1

• fix(verify): precise sublayout match + Inherit overlay

  aflock-ai/aflock · May 2026

• fix(verify): expose attestations and envelopes to Rego/AI evaluators (paper §4.5.1)

  aflock-ai/aflock · May 2026

• fix(state): auto-populate session merkleRoot at SessionEnd so Phase 3 fires

  aflock-ai/aflock · May 2026

• fix(policy): enforce maxWallTimeSeconds at PostToolUse and Stop

  aflock-ai/aflock · May 2026

• fix(identity): enforce allowedModels/allowedEnvironments at SessionStart and PreToolUse

  aflock-ai/aflock · May 2026

• fix(verify): preserve costUSD decimal so Rego %.2f works

  aflock-ai/aflock · May 2026

• fix(hooks): stamp sublayout binding into attestation predicates

  aflock-ai/aflock · May 2026

• fix(hooks): match Agent/Task spawns to declared sublayouts at PreToolUse

  aflock-ai/aflock · May 2026

• fix(state): write each propagation to a unique filename

  aflock-ai/aflock · May 2026

• fix(auth): persist Policy.RawDigest so hook subprocesses can validate the JWT

  aflock-ai/aflock · May 2026

• fix(attestation): require JWT to sign once auth is active

  aflock-ai/aflock · May 2026

• fix(mcp): gate HTTP get_token on bootstrap secret

  aflock-ai/aflock · May 2026

• fix(hooks): pin signer pubkey to close Stop-gate forgery

  aflock-ai/aflock · May 2026

• feat(attestation): bind JWT claims to action attestation predicate

  aflock-ai/aflock · May 2026

• feat(hooks): validate JWT in PreToolUse via persisted public key

  aflock-ai/aflock · May 2026

• docs: add example for archivistactl and archivista endpoints

  in-toto/archivista · May 2026 · comments 2

• fix(mcp): reuse SPIRE SVID key for JWT signing

  aflock-ai/aflock · May 2026 · ▲ 1

• fix(attestation): drop trailing @ in agentIdentity.binary when version empty

  aflock-ai/aflock · May 2026

• feat(rego): auto-wrap fragment policies missing package declaration

  aflock-ai/aflock · May 2026 · comments 1