This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryAdd AWS Nitro Enclave deployment infrastructure and ERC-8004 identity registration with reputation.
Full changelog
0.1.1 (2026-03-10)
Features
- add --device /dev/vsock to app container for enclave access (d136ac5)
- add A2A task execution with Redis queue worker (d4015c4)
- add active:true to ERC-8004 on-chain metadata (3600e64)
- add all status + signing endpoints to swagger docs (e6fc245)
- add attestation URL buttons and QR to Telegram bot (70ba6be)
- add automated A2A E2E test suite (1cc17a7)
- add AWS EC2 Nitro Enclave deployment infrastructure (b62a136)
- add bb CLI prover and on-chain verifier (9958a1b)
- add circuit artifact manager and input builder (162ddf7)
- add comprehensive E2E test suites for all interfaces (47afa7f)
- add CORS middleware and fix A2A discovery routes (4b0947b)
- add Docker test stack with a2a-ui and Phoenix (78a6b6d)
- add Dockerfile.enclave for Nitro Enclave prover image (195006f)
- add E2E encryption for TEE blind relay proof generation (f358ac4)
- add ERC-8004 discovery endpoints for 8004scan (7aff3e3)
- add ERC-8004 identity registration and reputation (8c36724)
- add ERC-8004 metadata fields for 8004scan compliance (e473b37)
- add ERC-8128 agent auth middleware and free tier config (b476a50)
- add expiry info, JSON download, and expired message to verification pages (6d376d3)
- add get_guide tool and restructure guide/SKILL.md for local MCP (de4d5f0)
- add interim progress messages to Telegram bot (0a4f25b)
- add local stdio MCP server package with CDP wallet support (ca5b2d7)
- add MCP server with StreamableHTTP transport (2e29deb)
- add MCP web signing flow and discovery route updates (3b64913)
- add multi-provider LLM chat endpoint (OpenAI + Gemini fallback) (9e97638)
- add named SSE step events for real-time progress reporting (6a36abc)
- add OpenAI chat endpoint, x402 payment enforcement, verify_proof free (8335834)
- add OpenTelemetry tracing with Phoenix OTLP exporter (e52fd72)
- add payment page for conversational x402 flow (95df731)
- add pino structured logger with redaction and pretty-print (24081d4)
- add proof session routes with x402 guide and two-chain RPC (82b9c73)
- add QR verification URL for proof results (3c81087)
- add RainbowKit payment page and wallet disconnect for Telegram bot (3f05a65)
- add Redis rate limiting and proof caching (76d6098)
- add release-please for root server and show version in health endpoint (040021a)
- add REST API routes and OpenAPI spec for GPT Actions (d583500)
- add Rust prover microservice with noir_rs (b6d5f2f)
- add supportedTrusts metadata for 8004scan TEE badge (4ef2903)
- add TEE attestation with COSE/CBOR validation (442afaa)
- add TEE hardware detection and attestation generation (4794c8b)
- add TEE retry logic, fatal NSM attestation, CloudWatch logging (0e07729)
- add TEE ValidationRegistry integration for 8004scan badge (2ef4850)
- add Telegram bot for ZKProofport Chat API (97e1250)
- add verification page, attestation endpoint, and discovery metadata (d8dbdb3)
- add vsock transport for Nitro Enclave communication (e4dff4f)
- add web signing flow to A2A task worker (8e16e11)
- add web signing page improvements and Docker updates (7d0e786)
- add web signing providers and sign page (ca7c28e)
- add websiteUrl config for web service endpoint (dec2ceb)
- add x402 payment E2E test script (9efdbe3)
- add x402 payment system with on-chain settlement (3ab7815)
- add x402Support and services to on-chain agent metadata (cd0a3ad)
- aws: codify EC2 instance setup for spot instance recovery (cdd4f82)
- bot: replace raw URLs with HTML links, clean up message formatting (fc84929)
- centralize on-chain link enrichment in skillHandler (366d69d)
- enable HTTPS with self-signed cert for Cloudflare Full SSL mode (276873a)
- enhance bb prover with off-chain verification and source artifact downloads (e40ba97)
- extract params from natural language text in A2A message handler (c38028b)
- extract unified skillHandler and flowManager (8d84b75)
- identity: add categories to on-chain metadata (00e5997)
- identity: add tags and tools/skills to on-chain ERC-8004 metadata (271df35)
- implement COSE_Sign1 cryptographic signature verification (2be1da4)
- implement full A2A v0.3 protocol compliance (4ae22b0)
- implement full AWS Nitro off-chain attestation verification (df8e986)
- implement real-time SSE streaming for chat completions (e98d27d)
- improve chat UX with CLI-style progress reporting (4083e3f)
- include payment tx BaseScan link in proof result (35a8147)
- include proof and publicInputs in verify/attestation API responses (adf7df4)
- integrate REST + chat routes with payment gate and swagger (dc2c2a3)
- integrate TEE provider into proof generation flow (e3efcd3)
- remove 12-step manual guide, add blue-green zero-downtime deploy (41d6315)
- replace direct USDC transfer with x402 facilitator (EIP-3009) (238883f)
- replace regex skill extraction with LLM tool-calling inference (f0eefa7)
- resolve all ERC-8004 best practices GAP items (d7e371d)
- send proverToml to enclave instead of raw JSON params (563cd60)
- send QR code image in Telegram bot after proof generation (d6eb376)
- separate TEE attestation page from verify page (25a0a6d)
- server-driven SDK config, rename to @zkproofport-ai/sdk, move CdpWalletSigner to SDK (1d8ae53)
- tee: use TCP bridge for enclave vsock communication (86fe186)
- unified proof download endpoint with on-chain + attestation data (6bce20b)
Bug Fixes
- add --oracle_hash keccak to enclave bb prove command (98c0aaf)
- add explicit tool names to MCP to prevent agent hallucination (7bb3f82)
- add granular staleness detection for A2A endpoint and agentType (eac89ab)
- add missing endpoints to OpenAPI spec (77a7179)
- add name and image to metadata update check (23cdcaa)
- add NONCE_EXPIRED to retryable errors in TEE validation (6f428e7)
- add payment verification retry logic and ensure Redis on deploy (6b11c3a)
- add retry and logging for TEE attestation failures (b8d27e3)
- add retry with backoff for TEE validation RPC rate limits (bea41e6)
- add timeouts and step logging to identity registration (c1c4eca)
- add totalSupply+ownerOf fallback and increase event scan range (dcd3efe)
- add x402 payment gate to Chat API endpoint (b289180)
- add x402 payment gate to chat endpoint (fe8ebeb)
- align ERC-8004 metadata with 8004scan validation spec (ea06ff3)
- allow CORS on discovery endpoints and return 200 on GET /mcp for 8004scan health checks (d9c9a7d)
- change A2A service endpoint to RPC URL and add agentType to metadata (44b61bb)
- ci: remove lock file before install for cross-platform compat (571d072)
- ci: replace full test suite with typecheck in publish workflow (4039a96)
- ci: use npm install instead of npm ci for cross-platform deps (a5bb497)
- context flow resolution for text-inferred A2A skills (13b0343)
- convert Docker ARG to ENV for Next.js build (8294829)
- convert keccak256 from git to local path dependency (397df07)
- copy public/ directory to Docker image for agent icon (60f8c37)
- detect empty registrations in needsUpdate check (245a4ce)
- docker: use --ignore-scripts to avoid native module build failures (e2b1ef3)
- export CADDY_DOMAIN so caddy reload can resolve {$CADDY_DOMAIN} (7f1712b)
- filter raw proof data from DSL, add QR codes for verify/receipt (c392315)
- fix retry detection for RPC rate limit in TEE validation (8824f5f)
- handle BigInt serialization in agent card JSON response (c836662)
- handle expired sessions on signing and payment pages (875791b)
- handle string publicInputs in verify_proof and add contract call error handling (859fe46)
- identity: include tags in on-chain metadata, fix service field names (dee34d8)
- improve A2A streaming format and error handling for a2a-ui (e1ebf6c)
- improve LLM skill routing for generate_proof vs request_signing (69fe73a)
- include agentType in createMetadataUri serialization (0662eb5)
- include all keccak256 source files (keccak256.nr + tests.nr) (cf54634)
- include verification info in E2E encrypted proof response (b4e11fb)
- increase E2E test timeouts for remote endpoints (a3da508)
- increase getRegistration timeout from 30s to 120s (173dd45)
- increase getRegistration timeout to 120s for mainnet token scan (8bccc2d)
- make metadata update non-blocking to prevent startup timeout (bbaaa41)
- make TEE attestation line conditional in system prompt (513e276)
- make TEE validation non-blocking to prevent startup hang (2259ffa)
- MCP payment gate only on tools/call, not initialize/tools/list (2ce3b98)
- mcp: rename to zkproofport-mcp, add PAYMENT_KEY support, fix default URL (3da6d49)
- mobile payment page connector.getChainId error (a4a0b4e)
- mobile signing page connector.getChainId error (26e6290)
- move download button handler to script scope for variable access (cba7975)
- pass paymentFacilitator to A2A handler + unify verifier ABI (0b69456)
- payment gate per A2A method + swagger dynamic URL and A2A docs (7ac4590)
- payment page balance check and error UX (3a7418c)
- persist countryList/isIncluded in signing record for country attestation (194d4f9)
- prioritize event scan over ownerOf iteration for tokenId resolution (3b74ae8)
- proof cache missing attestation + sign-page SSR hydration (27ad72e)
- propagate tokenId to discovery endpoints via mutable ref (adf5bca)
- proper tool_call_id tracking and safe history trimming (e0662b9)
- read tokenId from correct Transfer event topic index (a749b1a)
- remove backtick fences from system prompt and clean bot display (ec7f83e)
- remove code_examples from guide response (d2b8e62)
- remove duplicate buttons from Telegram bot QR messages (58dd1c2)
- remove history trimming — store full conversation history (6c56054)
- remove log truncation in examples, clean stale step refs in guide (cad0fa4)
- remove read-only flag from circuits volume mount (98317ae)
- replace hardcoded Sepolia references with paymentMode-driven chain config (94461be)
- replace history trimming with hard session limit (100 messages) (416b5e4)
- resolve metadata update skip when Transfer event not found (f35cd7d)
- resolve nonce conflict for sequential on-chain transactions (d48e372)
- resolve scope/circuitId from signing record when not in args (49d0d72)
- resolve TEE test mocking and isolation issues (e53dcb7)
- resolve TEE validation "Not authorized" by cross-registering on ValidationRegistry's Identity (39cfea3)
- restore ExecStartPre for ECR login in systemd service (8ad63cb)
- restore ssr: true to prevent connector getChainId error (d38ba09)
- retry RPC on transient errors + preserve signing record on proof failure (c2e65ec)
- revert agentId to number type per ERC-8004 spec (b1ad943)
- rewrite NSM attestation ioctl for correct enclave attestation (1ad0196)
- run ERC-8004 registration in background to avoid blocking startup (c5f24c7)
- safe rolling history trim that preserves tool call pairs (9dd83b6)
- security hardening and session isolation for chat endpoint (ca0f512)
- set on-chain active flag via setMetadata to resolve WA080 conflict (90d565c)
- sign-page: use wallet chain instead of wagmi default for network check (24172da)
- simplify deliverable to plain URL for ACP evaluator (77aaec3)
- split publicInputs into bytes32[] for on-chain verification (d6eb376)
- swagger A2A examples match handler shape + remove legacy test string (b2b3c9e)
- TEE public inputs + attestation in generate_proof response (900c69d)
- tee: fix enclave proof generation (SRS, VK path, proof output) (e03ec02)
- tee: include circuit source in Docker image for enclave build (16e542c)
- tests: make nonce tests nitro-mode aware for staging E2E (f310e62)
- unify step numbering to consistent 4-step flow in chat handler (125e94b)
- update chatHandler and agentCard tests for enrichment refactor (9d9724a)
- update ERC-8004 reputation to correct contract ABI (9558a91)
- update unit tests for A2A streaming, worker, and chat changes (63bad84)
- update ValidationRegistry addresses to canonical in contracts.ts and docs (369130b)
- USDC domain name per network and remove redundant x402 txused (8e80b2a)
- use .well-known/agent-card.json as A2A discovery endpoint per IA024 (adee478)
- use AGENT_TOKEN_ID env var to skip slow tokenId RPC scan on mainnet (a814f79)
- use awslogs-stream instead of ECS-only awslogs-stream-prefix (76bf9c7)
- use chainRpcUrl for on-chain verification (Base Sepolia not Mainnet) (0a4f25b)
- use correct bytes type for setMetadata/getMetadata ABI (fixes WA080) (bde04be)
- use ERC-721 Enumerable tokenOfOwnerByIndex for tokenId resolution (e8103a4)
- use job.name for deliverable routing (2603564)
- use mainnet-capable x402 facilitator (x402.org is testnet-only) (5eb1426)
- use raw EIP-1193 provider for wallet signing on sign/pay pages (d39bf4c)
- use real bb prove when TEE_MODE=local instead of mock proof (eebe738)
- use string type for agentId in OASF agent.json registrations (77313e6)
- use string type for tag param in ValidationRegistry ABI (674b7bd)
- validate nonce before plaintext rejection in nitro mode (877501d)
- wait for 2 block confirmations before validationResponse (45f9fdc)
- wallet address overflow on signing page (39e8791)
- wire x402 payment recording middleware into request pipeline (c45d107)
Refactoring
- guide: replace inline MCP docs with npm README reference (81f16b9)
- guide: update local_mcp_server to use npm package instead of git clone (9fe1ca1)
- improve A2A skill logging and move params to debug level (732b0e3)
- migrate A2A handler to skillHandler with LLM inference (08dc693)
- migrate A2A to SDK, add flowGuidance, unify 5-step flow (4ff52e8)
- migrate REST, MCP, and chat to unified skillHandler (2bcf2ba)
- move Chat payment from x402 gate to LLM-driven flow (4ab1950)
- overhaul structured logging with action labels, ISO timestamps, and request tracing (87a28a9)
- remove NullifierRegistry and add runtime verifier address sync (e7332ab)
- remove unused createMetadataUri import (6b13ca0)
- remove x402 HTTP middleware from all protocol routes (ffa0df7)
- rename agent to proveragent.eth (101ebd6)
- rename packages/client to sdk, mcp-server to mcp (fcf1e4b)
- rename proveragent.eth to proveragent.base.eth and add agent icon (7e1a27b)
- replace console calls with pino in identity, tee, and chat (71e224c)
- replace console calls with pino in server and config (59d11b9)
- replace console calls with pino in skills and payment (3092072)
- simplify A2A executor, MCP tools, and swagger for x402 flow (9d8215b)
- simplify entry point, config, and skill handlers (54d5fd8)
- standardize agent name to proveragent.eth across source and tests (78d5a63)
- standardize OpenAI Chat Completions response format (d835231)
- update A2A, MCP, swagger for x402 payment protocol (e4119c0)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About zkproofport/proofport-ai
Zero-knowledge proof generation MCP server for AI agents. Lets agents prove identity claims (Coinbase KYC, Country, Google OIDC, Google Workspace, Microsoft 365) without revealing personal information. Server-side proving in AWS Nitro Enclave TEE, paid via x402 USDC on Base. Built on Noir circuits (Aztec) and ERC-8004 agent identity. Reference application OpenStoa won 1st place at The Synthesis Hackathon ("Agents That Keep Secrets" track).
Related context
Related tools
Beta — feedback welcome: [email protected]