All notable changes to TealTiger are documented in this file.
- TealEngine v1.3 — Pre/post evaluation pipeline with sequential short-circuit stages
- Automation Levels —
auto_allow,auto_deny,auto_sanitize,approval_required - FREEZE Rules — Immutable emergency kill switches with tamper detection
- PLAN_ONLY Mode — Block side-effects while allowing read-only operations
- Policy Hot-Swap — Live bundle replacement with validation and rollback
- Anti-Tamper Controls — Signed bundles, forbidden config key rejection, workload identity binding
- Non-Human Identity (NHI) — Agent lifecycle management (active, suspended, revoked), scope enforcement, Zero Standing Privilege (JIT grants), agent attestation
- TealProof — Cryptographic governance receipts using Merkle trees + RFC 3161 timestamping, Governance Passport, standalone Verification SDK
- TealFlow — Declarative YAML governance workflows with org-level inheritance and floor enforcement
- TealClassifier — Local ONNX-based ML inference for content classification (≤20ms, deterministic)
- TealDrift — Behavioral drift detection with statistical baselines and min_samples guard
- TealState — Context size governance with provenance metadata and mutation governance
- TealTemporal — Session TTL enforcement, cooldown periods, time-of-day restrictions
- TealMonitor v2 — Governance-owned cost ceilings, anomaly detection, reasoning-token budgets, per-agent/per-workflow attribution
- TealGuard v2 — Unicode normalization stripping, encoded output detection, control character sanitization, markdown exfiltration detection, multimodal input governance
- TealMemory v2 — Write provenance tagging with transitive propagation, instruction injection detection, exfiltration prevention
- TealRegistry v2 — MCP definition-drift monitoring, tool description injection scanning, adapter composition allowlist
- OWASP Agentic Top 10 Policy Pack — Zero-config governance for all 10 ASI risks
- SOC/IR Pipeline — SIEM export (JSON, CEF, LEEF), OpenTelemetry spans, response hooks with dedup and rate limiting
- TEEC v2.0.0 — Enhanced evidence envelopes with NHI identity, proof, cost evidence, OWASP category
- Secure Change Governance — CODE_CHANGE action class with path/branch allowlists and two-person rule
- Platform Adapters — AWS Bedrock Agents, AWS AgentCore, Azure AI Agent Service
- 5 New Providers — DeepSeek, Groq, Together AI, HuggingFace TGI, xAI (Grok) — total 12
- GovernanceProvider Interface — Portable, versioned evaluation context schema
- Backward Compatibility — v1.2 configs produce identical behavior, all new fields optional
- Full Python SDK Parity — All v1.3 modules ported with identical schemas and decisions
- Governance Documentation — Enterprise operating model, persona definitions, RACI matrix, policy lifecycle, audit guides
- Reasoning-Trace Governance — PII and secret redaction in chain-of-thought traces
- OPA-Compatible Rego Export — Export governance policies to OPA Rego format
- TealEngine evaluation pipeline now supports pre-evaluation and post-evaluation stages
- Cost tracking uses longest-prefix model matching for accurate pricing
- Provider count increased from 7 to 12 (95%+ market coverage)
- GPT-4 Turbo preview models now use correct Turbo pricing instead of GPT-4 pricing
- TealEngineV12 — Parallel module evaluation with "most restrictive action wins" merge
- TealSecrets — Secret detection (500+ patterns, 9 categories, confidence scoring)
- TealRegistry — Model/tool allowlisting with provenance verification
- TealReliability — Retry budgets, circuit breakers, fallback chains
- TealMemory — Memory governance (5 scopes, 4 classifications)
- GovernanceDashboard — Governance visibility UI
- BundleExporter — SARIF v2.1.0, JUnit XML, JSON evidence export
- Docker governance sidecar (language-agnostic HTTP API)
- TEEC v1.0 evidence contract (32 reason codes, 18 event types, 12 decision actions)
- Python SDK feature parity with TypeScript (7/7 providers)
- Documentation fixes and Apache 2.0 license update
- TealEngine — Deterministic policy evaluation
- TealGuard — PII detection, prompt injection, content moderation
- TealMonitor — Cost tracking and budget management
- TealCircuit — Circuit breaker for failure isolation
- TealAudit — Audit logging with correlation IDs
- 7 LLM providers (OpenAI, Anthropic, Gemini, Bedrock, Azure OpenAI, Cohere, Mistral)
- Policy test harness with JUnit XML export
- Three policy modes (ENFORCE, MONITOR, REPORT_ONLY)