From 38186dba87c30a49953d7b357bf030a3a13eb2ee Mon Sep 17 00:00:00 2001 From: Teodor Calin Date: Thu, 24 Sep 2026 13:11:33 +0300 Subject: [PATCH 1/2] update io.pilot.aegis 0.1.5: darwin/amd64, prod natives, no leaked children MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - version 0.1.3 -> 0.1.5. The native aegis is v0.1.5 (pilot-protocol/aegis fix/aegis-lifecycle, ce5be55): nothing it starts (the L2 judge server, the model download) outlives it any more. - artifacts: all four platforms. darwin/amd64 is new: 0.1.3 had no darwin/amd64 native, so v1.12+ pilotctl refused to install the app on Intel Macs and older pilotctl installed the linux/amd64 ELF, which fails with "exec format error". - artifacts move from the dev R2 bucket (pub-2328865f…) to the prod bucket (pub-f09f9a4e…), under io.pilot.aegis/0.1.5/-/. - drop the submission's own aegis.help. The generated .help handler is registered under the same name and replaced it, so `aegis --help` was unreachable and the manifest listed aegis.help twice. The four native tarballs (sha256 + size in artifacts[]) must be on the prod bucket, and the four adapter bundles built from a template that has the cli lifecycle fixes, before this merges. See the PR for the order. Co-Authored-By: Claude Opus 5.5 (1M context) --- submissions/io.pilot.aegis/submission.json | 53 +++++++++++----------- 1 file changed, 27 insertions(+), 26 deletions(-) diff --git a/submissions/io.pilot.aegis/submission.json b/submissions/io.pilot.aegis/submission.json index f7af49d..13c137f 100644 --- a/submissions/io.pilot.aegis/submission.json +++ b/submissions/io.pilot.aegis/submission.json @@ -1,6 +1,6 @@ { "id": "io.pilot.aegis", - "version": "0.1.3", + "version": "0.1.5", "description": "AEGIS is a runtime firewall for AI agents: scan files, commands, and tool results for prompt injection, jailbreaks, homoglyph/leetspeak obfuscation, and impersonation before your agent acts on them. An 880 KB, fully-offline Rust binary — L1 Aho-Corasick pattern matching (microseconds) plus an optional local judge model. 90% recall / 95% precision on a held-out set.", "email": "apps@pilotprotocol.network", "backend": { @@ -94,16 +94,6 @@ "cli": { "passthrough": true } - }, - { - "name": "aegis.help", - "description": "Print the AEGIS usage and subcommand list. This is `aegis --help`.", - "latency": "fast", - "cli": { - "args": [ - "--help" - ] - } } ], "listing": { @@ -133,41 +123,52 @@ "url": "https://aegis.pilotprotocol.network", "contact": "apps@pilotprotocol.network", "agent_usage": "Scan untrusted content before acting on it: aegis.scan for files/dirs; aegis.exec {\"args\":[\"scan-cmd\"],\"stdin\":...} as a PreToolUse gate (exit 0 allow / 2 block) and {\"args\":[\"scan-result\"],\"stdin\":...} as a PostToolUse check. aegis.status tails the audit log; aegis.targets/aegis.config introspect. Fully offline.", - "capabilities": "Delivers the AEGIS 0.1.3 runtime firewall as a sha-pinned, relocatable per-OS/arch bundle. L1 Aho-Corasick patterns (pure Rust, microseconds) plus an optional local Qwen3-1.7B judge (llama.cpp, offline). 90% recall / 95% precision on a held-out set. HMAC-chained audit log. MIT." + "capabilities": "Delivers the AEGIS 0.1.5 runtime firewall as a sha-pinned, relocatable per-OS/arch bundle. L1 Aho-Corasick patterns (pure Rust, microseconds) plus an optional local Qwen3-1.7B judge (llama.cpp, offline). 90% recall / 95% precision on a held-out set. HMAC-chained audit log. MIT." }, "artifacts": [ { "role": "binary", "os": "darwin", "arch": "arm64", - "url": "https://pub-2328865fa11041b8a5efba00b940ec14.r2.dev/io.pilot.aegis/0.1.3/darwin-arm64/aegis-0.1.3-darwin-arm64.tar.gz", - "sha256": "dc20fc8c70aa0516d5fd503709a5c3c1e7f91964591bfa378c8bfe946db85b01", - "size": 448175, + "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/darwin-arm64/aegis-0.1.5-darwin-arm64.tar.gz", + "sha256": "b9fb30772a109d307d769672765bd9e3ce1deda911a5724a9dd45193ff761469", + "size": 470891, "unpack": "tar.gz", - "exec_path": "aegis-0.1.3-darwin-arm64/bin/aegis", + "exec_path": "aegis-0.1.5-darwin-arm64/bin/aegis", "order": 1 }, { "role": "binary", - "os": "linux", + "os": "darwin", "arch": "amd64", - "url": "https://pub-2328865fa11041b8a5efba00b940ec14.r2.dev/io.pilot.aegis/0.1.3/linux-amd64/aegis-0.1.3-linux-amd64.tar.gz", - "sha256": "5cb700460a4072894429fa0f90038d9d597fac0b9e160d7c1090a04ad3ea3745", - "size": 571791, + "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/darwin-amd64/aegis-0.1.5-darwin-amd64.tar.gz", + "sha256": "a2351b01c3af3bebaf11beaff17ed8aafa35ad870f044b6736696596d5241e7a", + "size": 531002, "unpack": "tar.gz", - "exec_path": "aegis-0.1.3-linux-amd64/bin/aegis", + "exec_path": "aegis-0.1.5-darwin-amd64/bin/aegis", "order": 2 }, { "role": "binary", "os": "linux", - "arch": "arm64", - "url": "https://pub-2328865fa11041b8a5efba00b940ec14.r2.dev/io.pilot.aegis/0.1.3/linux-arm64/aegis-0.1.3-linux-arm64.tar.gz", - "sha256": "1fd9156ef23bb755965d9d6511f6ba2345bc409233dd010acb20be0ea956b857", - "size": 505315, + "arch": "amd64", + "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/linux-amd64/aegis-0.1.5-linux-amd64.tar.gz", + "sha256": "700e70fd610cd7db221b4cdb19df6b0a7ee1711e594f1d182f1455d42f44273d", + "size": 599685, "unpack": "tar.gz", - "exec_path": "aegis-0.1.3-linux-arm64/bin/aegis", + "exec_path": "aegis-0.1.5-linux-amd64/bin/aegis", "order": 3 + }, + { + "role": "binary", + "os": "linux", + "arch": "arm64", + "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/linux-arm64/aegis-0.1.5-linux-arm64.tar.gz", + "sha256": "38df7c1ab700a55dfb0f41776445e1e741be4d5b13a40492dea1a1738a473a06", + "size": 538309, + "unpack": "tar.gz", + "exec_path": "aegis-0.1.5-linux-arm64/bin/aegis", + "order": 4 } ], "product_demo": { From 9d4f860197bd88815892090fa62f317ada70d4e1 Mon Sep 17 00:00:00 2001 From: Teodor Calin Date: Thu, 24 Sep 2026 14:20:53 +0300 Subject: [PATCH 2/2] aegis 0.1.5: pin the darwin natives that exist now MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The darwin tarballs the first commit pinned (b9fb3077…, a2351b01…) were local build outputs that are gone; they were never uploaded, so nothing could ever serve those bytes. Rebuilt from aegis 8ceabce with the same flags and packaging. The Linux natives reproduce byte for byte (same sha256 as before); the Mach-O ones differ only in LC_UUID and the ad-hoc signature page hash, which ld64 derives from the build location. darwin/arm64 d3541bf9…be9975 470891 B (bin 079fd32d…) darwin/amd64 bb46a068…c3077b 531001 B (bin 78223796…) Co-Authored-By: Claude Opus 5.5 (1M context) --- submissions/io.pilot.aegis/submission.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/submissions/io.pilot.aegis/submission.json b/submissions/io.pilot.aegis/submission.json index 13c137f..ed535ff 100644 --- a/submissions/io.pilot.aegis/submission.json +++ b/submissions/io.pilot.aegis/submission.json @@ -131,7 +131,7 @@ "os": "darwin", "arch": "arm64", "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/darwin-arm64/aegis-0.1.5-darwin-arm64.tar.gz", - "sha256": "b9fb30772a109d307d769672765bd9e3ce1deda911a5724a9dd45193ff761469", + "sha256": "d3541bf9c9e657b38e7d1375c3b8065c578f7aa0889533a98e6709a017be9975", "size": 470891, "unpack": "tar.gz", "exec_path": "aegis-0.1.5-darwin-arm64/bin/aegis", @@ -142,8 +142,8 @@ "os": "darwin", "arch": "amd64", "url": "https://pub-f09f9a4ea848491198d48e329ba030e3.r2.dev/io.pilot.aegis/0.1.5/darwin-amd64/aegis-0.1.5-darwin-amd64.tar.gz", - "sha256": "a2351b01c3af3bebaf11beaff17ed8aafa35ad870f044b6736696596d5241e7a", - "size": 531002, + "sha256": "bb46a068142208376b4cf5fa9487f51337940331c8cfb56f6899cc86c8c3077b", + "size": 531001, "unpack": "tar.gz", "exec_path": "aegis-0.1.5-darwin-amd64/bin/aegis", "order": 2