Sowiedu/Edict

v1.8.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai ai-agents compiler effect-system formal-verification json-ast

+9 more

llm mcp model-context-protocol programming-language type-system typescript wasm webassembly z3

Affected surfaces

auth rbac

Summary

AI summary

Implement a security sandbox for filesystem and HTTP access.

Full changelog

1.8.0 (2026-03-09)

Features

add Docker image for Edict MCP server (#45) (44d6ba3)
arena memory management for WASM heap (#35) (adda3f8)
benchmarks: add benchmark suite for pipeline performance (closes #48) (f7c4ce3)
composable program fragments (issue #72) (c24e523)
contract verification coverage metrics — 55-contract corpus + measurement script (closes #52) (fc6338a)
edict_debug MCP tool — execution tracing and crash diagnostics (#41) (cb7d13a)
error recovery benchmark improvements — 76.7% recovery rate (d3177cf)
examples: add arrays, math, constants examples + fix docs (0b03737)
examples: add crypto, datetime, random, io, int64 example programs (86ee6de)
implement security sandbox for filesystem and HTTP (a0a1ce7), closes #88
implement semantic unit types (issue #28) (88acbe7)
implement Universal Agent Skill Format (UASF) #80 (0fabf38)
mcp: implement WASM Portable Agent Skills (e3536c7), closes #76
quantifier support in contracts — forall/exists (issue #31) (5cc6e44)
validator: schema-driven validation (#90) (a7cc325)
Z3 verification caching — structural hash + in-memory cache (issue #93 Phase 1) (34b4c40)
Z3 worker thread offloading — move contract verification to worker (issue #93 Phase 2) (eabb1e4)

Bug Fixes

add main functions to 7 examples that returned exit code 1 (a423371)
checker: resolve unused variable TypeScript error in generic AST visitor (8331121)
codegen: implement tuple field access in type checker and codegen (e5c1d52)
mcp: resolve test suite failures (call-indirect table & missing entry point) (df9bf2c)
meet CI coverage thresholds — exclude untestable files, add 28 targeted tests (0e46a27)
string + codegen emits string_concat instead of i32.add (418307e)

Security Fixes

Implement security sandbox for filesystem and HTTP access — closes issue #88

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Sowiedu/Edict

Get notified when new releases ship.

About Sowiedu/Edict

Agent-first programming language: agents produce JSON AST, the compiler validates, type-checks, effect-checks, verifies contracts via Z3/SMT, and compiles to WASM. 19 MCP tools for the full compile-and-execute loop.

All releases →