This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
ReleasePort's take
Light signalAgent Workforce routing now leverages typed WorkOrder and Selection contracts with deterministic governance.
Why it matters: Enables precise, contract‑driven routing for the Agent Workforce system, improving reliability.
Summary
AI summaryAgent Workforce routing now uses typed WorkOrder and Selection contracts with deterministic governance.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Agent Workforce routing now uses host-LLM staffed via typed WorkOrder and Selection contracts. Agent Workforce routing now uses host-LLM staffed via typed WorkOrder and Selection contracts. Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Routing provides deterministic governance, privacy, provenance, and exact release pins. Routing provides deterministic governance, privacy, provenance, and exact release pins. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Network federates registered Local, owner Cloud, and public Hub sources. Network federates registered Local, owner Cloud, and public Hub sources. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Local, cloud, and hub scopes remain exact. Local, cloud, and hub scopes remain exact. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Refactor | Low |
Downloadable artifact is a minimal install/runtime allowlist. Downloadable artifact is a minimal install/runtime allowlist. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Refactor | Low |
Artifact excludes tests, benchmarks, internal documentation, credentials, and signing material. Artifact excludes tests, benchmarks, internal documentation, credentials, and signing material. Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
Full changelog
Agent Workforce routing is now host-LLM staffed through typed WorkOrder and Selection contracts, with deterministic governance, privacy, provenance, and exact release pins. Network federates registered Local, owner Cloud, and public Hub sources; local, cloud, and hub remain exact scopes. The downloadable artifact is a minimal install/runtime allowlist and excludes tests, benchmarks, internal documentation, credentials, and signing material.
Breaking Changes
- Agent Workforce routing changed to host-LLM staffed model using typed WorkOrder and Selection contracts
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Hephaestus
Open Agent OS for Claude Code, Codex, and Cursor with a meta-agent builder, A2A Hub routing, local ontology, and memory/security gates. Apache-2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]