This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryAdds a full SAP‑inspired configuration transport tier with gated promotion, canary testing, and automatic rollback.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Basis Transport Tier (SAP-inspired) introduced with full configuration-transport layer across deployment chain. Basis Transport Tier (SAP-inspired) introduced with full configuration-transport layer across deployment chain. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent implements state machine pending → draining → promoting → canary → complete (or rolled_back/failed). TransportAgent implements state machine pending → draining → promoting → canary → complete (or rolled_back/failed). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent enforces AuthGuardian permission gate via ENVIRONMENT_PROMOTE resource profile. TransportAgent enforces AuthGuardian permission gate via ENVIRONMENT_PROMOTE resource profile. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent includes fleet draining before config changes, waits for in-flight agents. TransportAgent includes fleet draining before config changes, waits for in-flight agents. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent supports prerequisite chaining with prior TR IDs required to be complete. TransportAgent supports prerequisite chaining with prior TR IDs required to be complete. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent provides advisory locking to prevent concurrent promotions to same environment. TransportAgent provides advisory locking to prevent concurrent promotions to same environment. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent features canary window re‑opening capacity, waits for violations, auto rolls back on spike. TransportAgent features canary window re‑opening capacity, waits for violations, auto rolls back on spike. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent automatically calls EnvironmentManager.restore() on canary failure. TransportAgent automatically calls EnvironmentManager.restore() on canary failure. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
TransportAgent appends every state transition to data/audit_log.jsonl for audit trail. TransportAgent appends every state transition to data/audit_log.jsonl for audit trail. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
LandscapeAgent slow‑poll tracker with configurable interval (default 30 s). LandscapeAgent slow‑poll tracker with configurable interval (default 30 s). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
LandscapeAgent writes landscape:health:<env> records to blackboard for each environment. LandscapeAgent writes landscape:health:<env> records to blackboard for each environment. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
LandscapeAgent status flags healthy/degraded/missing, marks degraded after failed or rolled_back transport. LandscapeAgent status flags healthy/degraded/missing, marks degraded after failed or rolled_back transport. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
AgentPool.setDispatchPause(paused, { percent? }) fully pauses or partially resumes dispatch. AgentPool.setDispatchPause(paused, { percent? }) fully pauses or partially resumes dispatch. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Basis:transport and Basis:landscape trust entries added to DEFAULT_AGENT_TRUST with high trust levels. Basis:transport and Basis:landscape trust entries added to DEFAULT_AGENT_TRUST with high trust levels. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
New est-transport.ts test suite (117 assertions) covering lifecycle, prerequisites, locks, auth denial, promote failure, canary pass/fail + rollback, AgentPool pause mechanics, LandscapeAgent health tracking, multi‑pool coordination. New est-transport.ts test suite (117 assertions) covering lifecycle, prerequisites, locks, auth denial, promote failure, canary pass/fail + rollback, AgentPool pause mechanics, LandscapeAgent health tracking, multi‑pool coordination. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Static TransportAgent.submitRequest(blackboard, request) allows any agent to queue a TR. Static TransportAgent.submitRequest(blackboard, request) allows any agent to queue a TR. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
LandscapeAgent includes lastTransportId and lastTransportStatus fields for diagnosis. LandscapeAgent includes lastTransportId and lastTransportStatus fields for diagnosis. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
AgentPool provides isDispatchPaused and dispatchAllowedPercent getters. AgentPool provides isDispatchPaused and dispatchAllowedPercent getters. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
AgentPool canSpawn getter respects pause state and partial‑capacity limits. AgentPool canSpawn getter respects pause state and partial‑capacity limits. Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
ENVIRONMENT_PROMOTE resource profile added to DEFAULT_RESOURCE_PROFILES (baseRisk 0.95, restrictions). ENVIRONMENT_PROMOTE resource profile added to DEFAULT_RESOURCE_PROFILES (baseRisk 0.95, restrictions). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
| Feature | Medium |
30 test suites with 3,093 passing assertions (+117 vs v5.4.5). 30 test suites with 3,093 passing assertions (+117 vs v5.4.5). Source: granite4.1:8b-q6_K@2026-05-21 Confidence: low |
— |
Full changelog
What's New
Basis Transport Tier (SAP-inspired)
Network-AI v5.5.0 ships a full configuration-transport layer modelled on the SAP Basis transport system — bringing safe, gated promotion of configuration artefacts across your deployment chain (dev → st → sit → qa → preprod → prod).
TransportAgent (lib/transport-agent.ts)
- Full state machine: pending → draining → promoting → canary → complete (or
olled_back\ / \ ailed) - Enforces AuthGuardian permission gate (\ENVIRONMENT_PROMOTE\ resource profile, baseRisk 0.95)
- Fleet draining — pauses dispatch on all \AgentPool\ instances tagged for the destination env before touching config; waits for in-flight agents to complete
- Prerequisite chaining — TRs can declare prior TR IDs that must be \complete\ before proceeding
- Advisory locking — prevents two concurrent promotions to the same environment via blackboard keys
- Canary window — re-opens a configurable percentage of pool capacity, waits for the canary window, counts new \ComplianceMonitor\ violations; rolls back automatically on spike
- Automatic rollback — calls \EnvironmentManager.restore()\ with the pre-promote backup on canary failure
- Audit trail — every state transition appended to \data/audit_log.jsonl\
- Static \TransportAgent.submitRequest(blackboard, request)\ — any agent can queue a TR
LandscapeAgent (lib/landscape-agent.ts)
- Slow-poll tracker (configurable interval, default 30 s)
- Writes \landscape:health:\ records to the blackboard for every known environment
- Status: \healthy\ / \degraded\ / \missing\ — marks \degraded\ after a \ ailed\ or
olled_back\ transport - \lastTransportId\ + \lastTransportStatus\ fields for quick diagnosis
AgentPool.setDispatchPause() (lib/strategy-agent.ts)
- \setDispatchPause(paused, { percent? })\ — fully pause or partially resume dispatch
- \isDispatchPaused\ and \dispatchAllowedPercent\ read-only getters
- \canSpawn\ getter updated to respect pause state and partial-capacity limits
Auth & trust
- \ENVIRONMENT_PROMOTE\ resource profile added to \DEFAULT_RESOURCE_PROFILES\ (baseRisk 0.95, restrictions: \asis_tier_only, \udit_required, \pproval_required)
- \asis:transport\ (trustLevel 0.95) and \asis:landscape\ (trustLevel 0.9) entries added to \DEFAULT_AGENT_TRUST\
Testing
- 30 test suites, 3,093 passing assertions (+117 vs v5.4.5)
- New: \ est-transport.ts\ — 117 assertions covering happy-path lifecycle, prerequisites, advisory lock exclusion, auth denial, promote failure, canary pass/fail + rollback, \AgentPool\ pause mechanics, \LandscapeAgent\ health tracking, and multi-pool fleet coordination
Exports
\TransportAgent, \LandscapeAgent, and all their types are exported from the package root.
Full changelog: https://github.com/Jovancoding/Network-AI/blob/main/CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jovancoding/Network-AI
Multi-agent orchestration MCP server with race-condition-safe shared blackboard. 20+ MCP tools: blackboard read/write, agent spawn/stop, FSM transitions, budget tracking, token management, and audit log query. `npx network-ai-server --port 3001`.
Related context
Beta — feedback welcome: [email protected]