This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
ReleasePort's take
Light signalThe release v5.4.4 fixes a missing `import os` in `scripts/swarm_guard.py`, resolving a startup NameError that disabled budget and health‑check guards.
Why it matters: Patch to v5.4.4 immediately if your deployment uses swarm_guard.py; the fix prevents a critical startup failure causing guard disablement.
Summary
AI summaryFixed missing import os in scripts/swarm_guard.py that caused a startup NameError disabling budget and health‑check guards.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Missing `import os` in scripts/swarm_guard.py fixed, preventing startup NameError and disabling guards. Missing `import os` in scripts/swarm_guard.py fixed, preventing startup NameError and disabling guards. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Network-AI v5.4.4 — Fix missing import os in swarm_guard.py (ClawHub ASI08)
Fixed
import osmissing inscripts/swarm_guard.py—os.environ.get("NETWORK_AI_ENV", "")was called beforeoswas imported, causing aNameErroron startup and silently disabling all budget and health-check guards. This was flagged as ClawHub ASI08 (Cascading Failures).
Notes (by design — will always recur on scan)
- ASI03 Advisory token identity — grant tokens are advisory only, not authenticated credentials. Use real platform auth + human approval for sensitive resources.
- ASI06 Persistent context poisoning —
_validate_context()runs injection detection before inject; do not store secrets indata/; clear between projects. - ASI07 Inter-agent communication boundary — blackboard is local file-based; run in a trusted workspace with restricted
data/permissions.
Stats
- 29 test suites, 2,976 passing assertions (unchanged)
- Zero TypeScript compile errors
Full Changelog
https://github.com/Jovancoding/Network-AI/blob/main/CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jovancoding/Network-AI
Multi-agent orchestration MCP server with race-condition-safe shared blackboard. 20+ MCP tools: blackboard read/write, agent spawn/stop, FSM transitions, budget tracking, token management, and audit log query. `npx network-ai-server --port 3001`.
Related context
Beta — feedback welcome: [email protected]