Merge remote-tracking branch 'origin/main' into p98

# Conflicts:
#	.github/workflows/validate.yml

Author: imran-siddique

.github/workflows/validate.yml

@@ -21,25 +21,20 @@ jobs:
       - name: Validate integration manifests against schema
         run: |
           pip install jsonschema pyyaml
-          python - <<'PY'
-          import json, sys, pathlib, yaml, jsonschema
-          schema = json.loads(pathlib.Path("schema/integration.schema.json").read_text())
-          failures = 0
-          dirs = [d for d in pathlib.Path("integrations").iterdir() if d.is_dir() and not d.name.startswith("_")]
-          for d in dirs:
-              manifest = d / "integration.yaml"
-              readme = d / "README.md"
-              if not manifest.exists():
-                  print(f"FAIL {d.name}: missing integration.yaml"); failures += 1; continue
-              if not readme.exists():
-                  print(f"FAIL {d.name}: missing README.md"); failures += 1; continue
-              try:
-                  jsonschema.validate(yaml.safe_load(manifest.read_text()), schema)
-                  print(f"OK   {d.name}")
-              except jsonschema.ValidationError as e:
-                  print(f"FAIL {d.name}: {e.message}"); failures += 1
-          print(f"{len(dirs)} integration(s), {failures} failure(s)")
-          sys.exit(1 if failures else 0)
-          PY
+          python scripts/validate_integrations.py
+      - name: Test manifest validation
+        run: |
+          pip install pytest
+          python -m pytest tests/test_validate_integrations.py -q
+      - name: Test conditional schema rules
+        run: |
+          pip install pytest
+          python -m pytest tests/test_integration_schema.py -q
+      - name: Validate compatibility declarations
+        run: |
+          pip install packaging
+          python scripts/validate_compatibility.py
+          pip install pytest
+          python -m pytest tests/test_validate_compatibility.py -q
       - name: Check generated integration index
         run: python scripts/generate_integration_index.py --check

CONTRIBUTING.md

@@ -30,6 +30,12 @@ Every PR runs: schema validation of `integration.yaml`, link checking, and the c
 
 Want the **Verified** tier? Say so in the PR and include exact reproduction steps. We run it end-to-end; if the documented behavior holds, the tier flips and the index badge follows.
 
+Package support floors are declared once in `compatibility.yaml`. An
+integration's `tested_against` block records an exact run, not a version range,
+and CI rejects declarations below the repository floor. Raising a floor is a
+separate compatibility change and must update affected integrations or explain
+their archival path.
+
 ## What this repo is not
 
 - Not a place to ship product code that *requires* changes to core repos - propose those upstream as issues first.

claude-code/integration.yaml

@@ -10,6 +10,8 @@ repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
 trace_conformance_level: 0
+trace_roles:
+  - record-producer
 tested_against:
   agent-manifest: 0.3.0
   agentrust-trace: 0.5.0

compatibility.yaml

@@ -0,0 +1,13 @@
+# Repository-wide support policy. Exact integration runs remain recorded in
+# each integration.yaml under tested_against.
+python:
+  supported: ["3.11", "3.12", "3.13"]
+packages:
+  agentrust-trace:
+    minimum: "0.5.0"
+  agentrust-trace-tests:
+    minimum: "0.4.0"
+  cmcp-runtime:
+    minimum: "0.2.0"
+  agent-manifest:
+    minimum: "0.3.0"

integrations/_template/integration.yaml

@@ -13,5 +13,7 @@ license: Apache-2.0
 tier: community   # set by maintainers during review; submissions start here
 # Required if you emit or consume TRACE records:
 # trace_conformance_level: 1
+# trace_roles:
+#   - record-producer  # or record-consumer / external-evidence-source
 tested_against:
   cmcp-runtime: "0.2.0"

integrations/aeoess-aps/integration.yaml

@@ -16,5 +16,7 @@ tier: community
 # cryptographically verified. The signed form is written alongside it and
 # verifies via agentrust_trace.verify_record (see README).
 trace_conformance_level: 0
+trace_roles:
+  - record-producer
 tested_against:
   agentrust-trace: "0.5.1"

integrations/comply54/integration.yaml

@@ -13,5 +13,7 @@ homepage: https://comply54.io
 license: Apache-2.0
 tier: community
 trace_conformance_level: 0
+trace_roles:
+  - record-producer
 tested_against:
   agentrust-trace: "0.5.0"

integrations/decisionassure/integration.yaml

@@ -8,3 +8,6 @@ maintainer:
 repository: https://github.com/a1k7/DecisionAssure-Runtime-Governance
 license: MIT
 tier: community
+trace_roles:
+  - record-producer
+trace_conformance_level: 0

integrations/langchain/integration.yaml

@@ -8,3 +8,6 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+trace_roles:
+  - record-producer
+trace_conformance_level: 0

integrations/llamaindex/integration.yaml

@@ -8,3 +8,6 @@ maintainer:
 repository: https://github.com/agentrust-io/integrations
 license: Apache-2.0
 tier: community
+trace_roles:
+  - record-producer
+trace_conformance_level: 0