Issues

• Starter Cedar policy templates with tests

  help wanted
  agentrust-io/cmcp#707 · Filter by author imran-siddique opened on Sep 30, 2026

• check_docs_quickstart.py hides the real failure when the runtime exits early

  good first issue
  agentrust-io/cmcp#706 · Filter by author imran-siddique opened on Sep 30, 2026

• Quickstart still pins cmcp-runtime 0.5.0; the current release is 0.6.0

  good first issue
  agentrust-io/cmcp#705 · Filter by author imran-siddique opened on Sep 30, 2026

• Cedar policy walkthrough: every example policy denies every call

  good first issue
  agentrust-io/cmcp#704 · Filter by author imran-siddique opened on Sep 30, 2026
  3

  

• Durable stores are never closed on shutdown

  good first issue
  agentrust-io/cmcp#676 · Filter by author Yatsuiii opened on Sep 20, 2026
  6

  

• Session identity is minted fresh on every open, so a restarted or peer instance cannot resume a session

  help wanted
  agentrust-io/cmcp#675 · Filter by author Yatsuiii opened on Sep 20, 2026
  2

• Define explicit authorization for releasing confidential data and derived outputs

  agentrust-io/cmcp#660 · Filter by author imran-siddique opened on Sep 18, 2026
  3

• Separate workload identity, represented user, and delegated authority claims

  agentrust-io/cmcp#568 · Filter by author imran-siddique opened on Aug 24, 2026
  5

• Bind MCP Tasks and authenticated callbacks into cMCP evidence

  agentrust-io/cmcp#567 · Filter by author imran-siddique opened on Aug 24, 2026
  15

• Bind progressive MCP discovery to versioned catalog checkpoints

  agentrust-io/cmcp#566 · Filter by author imran-siddique opened on Aug 24, 2026
  8

• AARM listing: nobody is pursuing it, and the differentiator is unused

  agentrust-io/cmcp#555 · Filter by author imran-siddique opened on Aug 24, 2026
  1

  

• AARM R9: deny-based Cedar is not short-lived minimal-scope credentials

  security
  agentrust-io/cmcp#554 · Filter by author imran-siddique opened on Aug 24, 2026
  2

  

• feat(attestation): cryptographically verify NVIDIA GPU evidence end to end

  agentrust-io/cmcp#537 · Filter by author imran-siddique opened on Aug 20, 2026
  1

• feat(tee): seal the TRACE signing key to the gateway measurement (RFC P3)

  agentrust-io/cmcp#462 · Filter by author imran-siddique opened on Aug 1, 2026
  3

  

• [phase-2] Policy enforcement inside TEE — Cedar evaluation runs in the enclave, not at API boundary

  attestationphase-2security
  agentrust-io/cmcp#124 · Filter by author imran-siddique opened on Jun 6, 2026
  9