Skip to content

Keesan12/Martin-Loop

v0.3.19 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 28d AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-runtime ai-agent-runtime ai-coding-agents ai-control-plane ai-governance ai-safety
+13 more
audit-trail budget-enforcement claude-code codex coding-agents control-plane governed-runtime llmops mcp model-context-protocol observability policy-as-code rollback

Affected surfaces

breaking_upgrade

Summary

AI summary

Fixed governed config lookup, budget verification, Codex test integration, planning residue removal, and version truth resynchronization.

Full changelog

Fixed

  • Governed --cwd config lookup is now authoritative — live and proof runs now resolve the default martin.config.yaml from the governed workspace passed via --cwd instead of the invocation root. This fixes budget, token-cap, and verifier-policy drift when MartinLoop is launched from a different directory than the repo being governed.
  • Real Codex governed-budget verification now uses the correct workspace policy — the live Codex receipt-chain path now honors workspace-local budget normalization, including maxUsd, softLimitUsd, maxIterations, and maxTokens, instead of silently falling back to the caller's local defaults.
  • Public OSS Codex integration tests now reflect supported behavior — fake Codex subprocess helpers were removed from the governed integration lane. Codex-required tests are availability-gated and run against real Codex host readiness when the CLI is present.
  • Public repo planning residue removed — tracked .planning files were removed from the public repo and .planning/ is now ignored so internal planning artifacts cannot drift back into the public surface.
  • Version truth resynced — the public repo now reflects live package truth again: root release line advanced to 0.3.19, and standalone @martinloop/mcp metadata now matches the already-live 0.3.6 package line.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Keesan12/Martin-Loop

Get notified when new releases ship.

Sign up free

About Keesan12/Martin-Loop

All releases →

Related context

Earlier breaking changes

  • vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
  • vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
  • vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
  • vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.

Beta — feedback welcome: [email protected]