From 685384bef8e840c7e7542bfdacff7ba802b863b3 Mon Sep 17 00:00:00 2001 From: dhb Date: Mon, 9 Nov 2026 07:27:20 +0800 Subject: [PATCH 1/2] docs: credit Tim Shing across MCP and Skill sources --- MCP_SERVER.md | 2 ++ README.md | 4 +++- README_zh-CN.md | 4 +++- mcp.json | 2 +- pyproject.toml | 1 + server.json | 2 +- skills/openworkproof-soc-review/SKILL.md | 4 ++++ 7 files changed, 15 insertions(+), 4 deletions(-) diff --git a/MCP_SERVER.md b/MCP_SERVER.md index 4b1f468..364ce50 100644 --- a/MCP_SERVER.md +++ b/MCP_SERVER.md @@ -1,5 +1,7 @@ # Use OpenWorkProof through MCP +Contributors: dengyier & Tim Shing（成孝添） + [English overview](README.md) · [中文说明](README_zh-CN.md) · [SOC guide](docs/integrations/soc-reference.md) · [Guard guide](docs/integrations/agent-guard-onboarding.en.md) OpenWorkProof exposes **32 local MCP tools in version 1.6.1**. Connect them to an existing Agent when you want to inspect signed work records, review supplied security alerts, or check an exported evidence bundle. diff --git a/README.md b/README.md index c28e77c..c58fa6f 100644 --- a/README.md +++ b/README.md @@ -4,6 +4,8 @@ **English** · [简体中文](https://github.com/dengyier/OpenWorkProof/blob/main/README_zh-CN.md) +Contributors: dengyier & Tim Shing（成孝添） + **Check what an AI agent was allowed to do, what it recorded, and whether its evidence holds up.** OpenWorkProof (OWP) is an open-source toolkit for developers and teams using AI agents. Use it to review signed work records, check exported evidence, or run a bounded Codex preview-editing task. Security engineers can also try a reference workflow for reviewing Slips alerts. @@ -131,4 +133,4 @@ Contribute a reproducible bug report, an integration, or a documentation improve ## License -OWP Core: [Apache-2.0](https://github.com/dengyier/OpenWorkProof/blob/main/LICENSE). Tim / alphatin123's contributed `aisoc` component: [MIT](https://github.com/dengyier/OpenWorkProof/blob/main/LICENSES/MIT-aisoc.txt). The combined package metadata uses `Apache-2.0 AND MIT`. +OWP Core: [Apache-2.0](https://github.com/dengyier/OpenWorkProof/blob/main/LICENSE). Tim Shing（成孝添）, GitHub `alphatin123`, contributed the `aisoc` component under [MIT](https://github.com/dengyier/OpenWorkProof/blob/main/LICENSES/MIT-aisoc.txt). The combined package metadata uses `Apache-2.0 AND MIT`. diff --git a/README_zh-CN.md b/README_zh-CN.md index 8ead063..bf2ca61 100644 --- a/README_zh-CN.md +++ b/README_zh-CN.md @@ -2,6 +2,8 @@ [English](README.md) · **简体中文** +Contributors: dengyier & Tim Shing（成孝添） + **核对 AI Agent 被允许做什么、记录了什么，以及这些证据能否经得起检查。** OpenWorkProof（OWP）是一套面向 Agent 开发者和团队的开源工具。你可以用它检查签名工作记录、核验导出的证据包，或让 Codex 在指定的预览目录内完成受限的文本修改。安全工程师还可以使用参考流程，整理和复核 Slips 告警。 @@ -129,4 +131,4 @@ OWP 是开源项目，当前软件包和 Skill 可按各自许可证免费使用 ## 许可证 -OWP Core：[Apache-2.0](LICENSE)。Tim / alphatin123 贡献的 `aisoc` 组件：[MIT](LICENSES/MIT-aisoc.txt)。组合软件包的元数据使用 `Apache-2.0 AND MIT`。 +OWP Core：[Apache-2.0](LICENSE)。Tim Shing（成孝添），GitHub 账号 `alphatin123`，贡献的 `aisoc` 组件：[MIT](LICENSES/MIT-aisoc.txt)。组合软件包的元数据使用 `Apache-2.0 AND MIT`。 diff --git a/mcp.json b/mcp.json index 24d5cf3..3d77012 100644 --- a/mcp.json +++ b/mcp.json @@ -8,7 +8,7 @@ }, "homepage": "https://github.com/dengyier/OpenWorkProof", "author": { - "name": "dengyier" + "name": "dengyier & Tim Shing（成孝添）" }, "license": "Apache-2.0 AND MIT", "version": "1.6.1", diff --git a/pyproject.toml b/pyproject.toml index 13fe8ac..7515879 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -7,6 +7,7 @@ name = "openworkproof" version = "1.6.1" description = "Agent work contracts and verifiable execution protocol — Ed25519-signed, offline-verifiable proof-carrying work for AI agents." readme = "README.md" +authors = [{name = "dengyier"}, {name = "Tim Shing（成孝添）"}] license = "Apache-2.0 AND MIT" license-files = ["LICENSE", "LICENSES/MIT-aisoc.txt"] classifiers = [ diff --git a/server.json b/server.json index 3f4701c..bd87d15 100644 --- a/server.json +++ b/server.json @@ -22,7 +22,7 @@ "_meta": { "io.modelcontextprotocol.registry/publisher-provided": { "author": { - "name": "dengyier" + "name": "dengyier & Tim Shing（成孝添）" }, "license": "Apache-2.0 AND MIT", "keywords": [ diff --git a/skills/openworkproof-soc-review/SKILL.md b/skills/openworkproof-soc-review/SKILL.md index 4ee570b..0fd4027 100644 --- a/skills/openworkproof-soc-review/SKILL.md +++ b/skills/openworkproof-soc-review/SKILL.md @@ -1,10 +1,14 @@ --- name: openworkproof-soc-review description: Review supplied Slips alerts with OpenWorkProof's reference SOC workflow and verify its signed evidence bundle. Use for alert investigation and evidence review; connecting MCP alone does not activate endpoint protection. +metadata: + author: "dengyier & Tim Shing（成孝添）" --- # OpenWorkProof SOC review +Contributors: dengyier & Tim Shing（成孝添） + Use an installed OpenWorkProof 1.6.0+ MCP server. The three reference tools are `owp_soc_sample_alerts`, `owp_soc_analyze_slips`, and `owp_soc_verify_bundle`. If they are absent, report the installed version/available tools and ask the user to upgrade their MCP package; do not invent results or replace verification with model judgment. ## Review From 8d5ae4dda16ce8a7bb8f4fb559975fea2d28947e Mon Sep 17 00:00:00 2001 From: dhb Date: Mon, 9 Nov 2026 07:35:43 +0800 Subject: [PATCH 2/2] docs: link attribution-revised Skill download --- README.md | 2 +- README_zh-CN.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index c58fa6f..dd00b14 100644 --- a/README.md +++ b/README.md @@ -60,7 +60,7 @@ The Skill gives your agent a repeatable procedure for using those tools. With No npx skills add dengyier/OpenWorkProof --skill openworkproof-soc-review ``` -Choose your agent and install scope in the installer. [Read the instructions first](https://github.com/dengyier/OpenWorkProof/blob/main/skills/openworkproof-soc-review/SKILL.md), or use the [release ZIP](https://github.com/dengyier/OpenWorkProof/releases/download/v1.6.0/openworkproof-soc-review-1.6.0.zip). +Choose your agent and install scope in the installer. [Read the instructions first](https://github.com/dengyier/OpenWorkProof/blob/main/skills/openworkproof-soc-review/SKILL.md), or use the [Skill ZIP with the 2026-11-09 credit revision](https://github.com/dengyier/OpenWorkProof/releases/download/v1.6.1/openworkproof-soc-review-1.6.1-credits-20261109.zip). The Skill does not configure MCP or enable Guard. Configure the MCP server above separately. Your client's usual model charges still apply. diff --git a/README_zh-CN.md b/README_zh-CN.md index bf2ca61..e8a0e6e 100644 --- a/README_zh-CN.md +++ b/README_zh-CN.md @@ -58,7 +58,7 @@ Skill 为 Agent 提供一套调用这些工具的操作步骤。安装了 Node.j npx skills add dengyier/OpenWorkProof --skill openworkproof-soc-review ``` -在安装器里选择 Agent 和安装范围。可以先[阅读 Skill 内容](skills/openworkproof-soc-review/SKILL.md)，也可使用[发行包中的 ZIP](https://github.com/dengyier/OpenWorkProof/releases/download/v1.6.0/openworkproof-soc-review-1.6.0.zip)。 +在安装器里选择 Agent 和安装范围。可以先[阅读 Skill 内容](skills/openworkproof-soc-review/SKILL.md)，也可使用[2026-11-09 署名修订版 Skill ZIP](https://github.com/dengyier/OpenWorkProof/releases/download/v1.6.1/openworkproof-soc-review-1.6.1-credits-20261109.zip)。 Skill 不会自动配置 MCP 或开启 Guard，仍需单独完成前面的 MCP 配置。客户端原有的模型费用由对应服务商收取。