This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryAdded model‑interaction lifecycle governance, orchestration resilience and OWASP compliance features.
Full changelog
What''s changed
Network-AI now governs the layer most agent frameworks leave open: how an agent talks to the model. When a frontier model declines a request with a classifier refusal, Network-AI absorbs the refusal → fallback → billing chain and presents one governed, budgeted, audited call. 104 new tests; full suite 3,373 passing across 37 suites.
Added — Model-Interaction Lifecycle Governance (Tier 1)
GovernedModelGateway— detectstop_reason:refusal, audit which classifier fired, route to a fallback model, redeem the fallback-credit token. Provider-agnostic; distinct fromAdapterRegistry.fallbackChain(adapter-health failover).ModelBudget— per-model USD accounting with cache-read/write distinction and fallback-credit repricing;accountIterations()for server-sideusage.iterations. Never sums tokens across models.RefusalTelemetry— a refusal is an HTTP 200, invisible to error-rate monitoring; recorded as a discrete non-error signal with anunservedRefusalCountgap to alert on.AnthropicMessagesAdapter— dependency-free (BYOC) Anthropic Messages binding that drives the gateway.
Added — Orchestration Resilience (Tier 2)
RetryBudget— per-request (not per-session) retry accounting.EffortPolicy— turns theeffortcost lever into a policy object (per-agent ceilings + justification gating).- Per-sub-agent fallback —
FanOutFanInsteps andTeamRunnertasks each carry their own fallback agent and retry budget. Default paths unchanged.
Added — Thinking Lifecycle + Compliance (Tier 3)
ThinkingBlockManager— keep thinking blocks unchanged on the same model; strip them on a cross-model fallback (kept when redeeming a credit); guard prompts againstreasoning_extractionrefusals.- OWASP Agentic AI Top 10 (2026) matrix — all 10 risks mapped to deterministic engine controls, verifiable via
verifyOwaspCoverage().
Changed
- README lifecycle-governance section + OWASP coverage table; ARCHITECTURE/SKILL positioning; AUDIT_LOG_SCHEMA
model.*events. - Version 5.12.7 → 5.13.0.
Full changelog: https://github.com/Jovancoding/Network-AI/blob/main/CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jovancoding/Network-AI
Multi-agent orchestration MCP server with race-condition-safe shared blackboard. 20+ MCP tools: blackboard read/write, agent spawn/stop, FSM transitions, budget tracking, token management, and audit log query. `npx network-ai-server --port 3001`.
Related context
Beta — feedback welcome: [email protected]