This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryEnforces bounded output contracts across all context surfaces and adds registry v10 limit metadata.
Full changelog
ContextLattice v3.4.24 closes the agent/context overflow boundary gap across the public release lane.
Highlights:
- Enforces bounded output contracts for context-pack, tool context_pack, agent preflight, Codex preflight, policy context packages, CLI wrappers, and compaction hook stdout/handoff surfaces.
- Adds registry v10 limit metadata: max total JSON bytes, max string bytes, max list items, actual byte counts, truncation state, and omitted-count summaries.
- Adds the Go-native /ops/context-boundary audit surface for release/runtime verification.
- Keeps product boundary ownership Go-native while updating local agent utility scripts and audits so any script-emitted JSON is also clipped and contract-stamped.
- Adds oversized fixture coverage proving boundary responses stay contract-valid and avoid raw provider-overflow-shaped errors.
Verification:
- services/gateway-go: go test .
- Python dev/agent utility scripts: py_compile pass
- scripts/agent/audit-agent-output-contracts --pretty
- scripts/agent/audit-agent-preflight-matrix --pretty
- scripts/agent/audit-context-boundary --pretty: 11 bounded surfaces, zero violations
- Live ContextLattice gateway health: ok on 127.0.0.1:8075
Lane tags:
- public release tag: v3.4.24 -> 0e7b3172829751797b9081bf558433d85e94006d
- public companion tag: v3.4.24-public -> 0e7b3172829751797b9081bf558433d85e94006d
- private companion tag: v3.4.24-origin -> 63b885ef4a213957e96bb702fcc1486a69d490aa
- paid companion tag: v3.4.24-public-paid -> f7c3b55b71d99b4f479fec0752688317b72b1a37
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About sheawinkler/ContextLattice
Private-by-default memory and context layer for agents with Go/Rust runtime, staged retrieval across fused data backends, and long-horizon context continuity.
Related context
Related tools
Beta — feedback welcome: [email protected]