Skip to content

Releases: DilawarShafiq/unworldly

v0.4.0 — Python Rewrite + World-Class DevOps

25 Feb 21:38
@DilawarShafiq DilawarShafiq
v0.4.0
13748d2

Choose a tag to compare

View all tags
v0.4.0 — Python Rewrite + World-Class DevOps Latest
Latest

What's New

Python Rewrite

  • Complete rewrite from TypeScript to Python — same features, native Python packaging
  • pip install unworldly-recorder — works everywhere Python 3.10+ runs
  • CLI entry point: unworldly watch | replay | report | verify | list

World-Class DevOps Infrastructure

  • CI pipeline — Python 3.10-3.13 x Ubuntu/Windows/macOS (12 jobs)
  • Lint + type check — ruff + mypy strict mode, zero errors
  • 139 tests passing — comprehensive coverage of risk engine, integrity, sessions
  • PyPI publish automation — auto-publish on tag push via OIDC trusted publishers
  • Dependabot — auto-updates for pip + GitHub Actions dependencies
  • SECURITY.md — vulnerability disclosure policy
  • Pre-commit hooks — ruff + mypy enforcement

Demo GIF

  • python demo/simulate.py — choreographed 4-act demo using real display functions
  • 11 events: credential theft → data exfiltration → destructive commands
  • Risk score computed live: 7.2/10
  • python demo/render_cast.py → generates assets/demo.gif

Install

pip install unworldly-recorder
unworldly watch

Full Changelog: v0.3.0...v0.4.0

Assets 2
Loading

v0.3.0 — ISO 42001 Compliance

24 Feb 21:33
@DilawarShafiq DilawarShafiq
v0.3.0
b7e41e4

Choose a tag to compare

View all tags
v0.3.0 — ISO 42001 Compliance

The Flight Recorder for AI Agents — Now Tamper-Proof

This release adds ISO 42001 AI Management System compliance to Unworldly, making it the first CLI tool that produces cryptographically verifiable audit trails for AI agent activity.

What's New

Tamper-Proof Session Logs
Every event is SHA-256 hashed and chained to the previous event. Modify any event and the chain breaks. Sessions are sealed with an integrity hash on save.

unworldly verify Command
Cryptographic integrity verification of any session. Exit code 0 = valid, exit code 1 = tampered. Perfect for CI/CD pipelines.

unworldly verify
# ✓ SESSION INTEGRITY VERIFIED
# All 47 events have valid hash chain

Agent Identity Detection
Automatically detects which AI agent is running:

  • Claude Code, Cursor, GitHub Copilot, Windsurf, Devin, Aider, OpenClaw, Cline

Agent identity is recorded in the session and shown in watch output, replay, reports, and session list.

Compliance Reports
Security reports now include integrity verification status and agent identity — ready for ISO 42001 and HIPAA audit requirements.

ISO 42001 Controls Implemented

Control Description Feature
A.3.2 Roles & accountability Agent identity detection
A.6.2.8 Event logging SHA-256 hash-chained events
A.8 Transparency Session replay + reports
A.9 Accountability Verify command

Stats

  • 139 tests across 8 test suites
  • Cross-platform: macOS, Linux, Windows
  • Node.js 18, 20, 22

Install

npm install -g unworldly-recorder

Full Changelog: https://github.com/DilawarShafiq/unworldly/blob/master/CHANGELOG.md

Loading