From 904f149c12774359d61443b0244984be4e11c8ac Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Tue, 4 Aug 2026 11:07:17 -0700 Subject: [PATCH] chore(deps): ceiling agt-core below 5.0 so pip cannot break Cedar PolicyEvaluator imports agent_os.policies.backends.CedarBackend. AGT removed that module in #3444, when the v4 policy language was replaced by ACS v5, so it does not exist on any release after the 4.x line. We only work today because >=4.0 happens to resolve to 4.1.0, the last release that ships it. Nothing recorded that, and nothing prevented pip from choosing otherwise. Cedar evaluation is the enforcement path, so a resolver picking 5.x does not degrade cMCP, it stops it deciding anything correctly. >=4.1.0,<5.0 rather than ==4.1.0: the ceiling is the part that matters, and leaving the floor open means an agt-core 4.1.1 carrying the cryptography cap lift (#471, upstream #3614) is picked up without another PR. Tracked in #472. Co-Authored-By: Claude Opus 5 (1M context) --- pyproject.toml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 34f2672..fffc8f1 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -39,7 +39,14 @@ dependencies = [ "starlette>=0.37", "uvicorn>=0.29", "click>=8.1", - "agent-governance-toolkit-core>=4.0", + # Held on the 4.x line deliberately, see #472. PolicyEvaluator imports + # agent_os.policies.backends.CedarBackend, which AGT removed in #3444 when + # the v4 policy language was replaced by ACS v5. 4.1.0 (tagged 2026-06-09) + # is the last release that ships it, and >=4.0 with no ceiling let pip pick + # a 5.x that would break policy evaluation entirely. The ceiling is the + # constraint that matters; the floor stays open so an agt-core 4.1.1 with + # the cryptography cap lift (#471) is taken automatically when it ships. + "agent-governance-toolkit-core>=4.1.0,<5.0", "cedarpy>=4.0", ]