Module muragent

Expand description

.muragent v2 portable agent package format.

manifest — type definitions for manifest.yaml
jcs_canonical — manifest → manifest.signed.json (RFC 8785 JCS via mur_common::jcs)
dsse — DSSE envelope sign/verify
statement — in-toto v1 Statement with subject hashes
writer — build .muragent tar.gz
reader — extract and validate .muragent tar.gz
validator — 11-step validation pipeline
executable_ban — MCP command deny-list and permit-list

Modules§

dsse: DSSE (Dead Simple Signing Envelope) over in-toto v1 Statement.
executable_ban: MCP command validation — deny-list, permit-list, metacharacter scan.
installer: Install a validated .muragent archive onto the local host.
jcs_canonical: Derive manifest.signed.json from manifest.yaml.
manifest: .muragent v2 manifest schema types.
reader: .muragent reader — extract and inspect a signed agent package.
statement: in-toto v1 Statement with subject hashes.
validator: 11-step validation pipeline (§6.4).
writer: .muragent writer — build a signed agent package tarball.