This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+5 more
Affected surfaces
Summary
AI summaryFixed logo extraction performance and parser error fencing; added output_contract affordance on brand_context.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Added `output_contract` affordance on brand_context for deterministic delivery rules. Added `output_contract` affordance on brand_context for deterministic delivery rules. Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Bounded extractLogos on hostile pages reduces cost from 2.65s to ~180ms at 50k elements. Bounded extractLogos on hostile pages reduces cost from 2.65s to ~180ms at 50k elements. Source: llm_adapter@2026-07-19 Confidence: low |
— |
| Bugfix | Medium |
Handler errors are now fenced at the tool boundary with structured envelope and truncation. Handler errors are now fenced at the tool boundary with structured envelope and truncation. Source: llm_adapter@2026-07-19 Confidence: low |
— |
Full changelog
Robustness release closing #45 (both 0.14 ingestion-fuzzing findings) plus the output_contract affordance. (No 0.15 was released; the 0.15 candidate list shipped here.)
Fixed
- extractLogos bounded on hostile pages (#57): one context-scoped
find()inside logo-cloud detection cost 2.65s alone on a 50k-element body. Bounded manual walk + candidate caps + per-parent cache: 7.3s → ~180ms at 50k elements, linear to 100k. Also fixes a pre-existing flaw: a client-logo section anywhere on the page rejected the real header logo. - Handler errors fenced at the tool boundary (#57): parser throws (e.g. YAML alias-bomb messages quoting hostile input) return the structured envelope with the message fenced + truncated — never raw SDK isError text.
Added
output_contracton brand_context (#58): deterministic per-task_type delivery rules served adjacent to the brand data. Measured in a 6-run A/B: no effect distinguishable from noise (40% vs 33% mean completion, n=3/arm) — ships as a structural affordance, receipts committed, eval/RESULTS.md has the table.
1,004 tests.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Brand-System/brandsystem-mcp
Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and HTML/CSS preflight. Brandcode Studio connector for hosted brand sync.
Related context
Beta — feedback welcome: [email protected]