Capsule v1.3.0

Capsule Protocol v1.3.0: CLI verifier and epoch-based key rotation

Added

• capsule CLI — verify, inspect, and manage keys from the command line
  • capsule verify <source> — structural, full (SHA3-256), and signature (Ed25519) verification
  • capsule inspect — display a capsule's full 6-section content
  • capsule keys info | rotate | export-public — keyring management
  • capsule hash <file> — SHA3-256 utility
• Epoch-based key rotation — NIST SP 800-57 aligned key lifecycle with backward-compatible verification across rotations
• Epoch-aware signature verification — Seal(keyring=kr) resolves the correct epoch's public key via fingerprint lookup

Install

pip install qp-capsule==1.3.0

See CHANGELOG.md for full details.

py-v1.3.0

Capsule 1.3.0

See CHANGELOG.md for details.

Install

pip install qp-capsule==1.3.0

What's Changed

• Add NIST RFI submission artifacts (Docket NIST-2025-0035) by @bradleygauthier in #6
• Expand compliance into per-framework mappings by @bradleygauthier in #7
• Add Security Considerations to spec and cryptographic chain verification by @bradleygauthier in #8
• ci: Separate Python and TypeScript release tag triggers by @bradleygauthier in #9
• Add CLI verifier and epoch-based key rotation (v1.3.0) by @bradleygauthier in #10

New Contributors

• @bradleygauthier made their first contribution in #6

Full Changelog: v1.2.0...py-v1.3.0

v1.2.0

Capsule 1.2.0

See CHANGELOG.md for details.

Install

pip install qp-capsule==1.2.0

Full Changelog: v1.1.0...v1.2.0

v1.1.0 — High-Level API

High-level API for zero-boilerplate integration. One class, one decorator, one context variable.

Added

• Capsules class — single entry point that owns storage, chain, and seal. Zero-config default (Capsules() uses SQLite), PostgreSQL via URL string, or custom storage backend via storage= kwarg.
• @capsules.audit() decorator — wraps any async or sync function with automatic Capsule creation, sealing, and storage. Supports type, tenant_from, tenant_id, trigger_from, source, domain, and swallow_errors parameters.
• capsules.current() context variable — access and enrich the active Capsule during execution (set model, confidence, session, resources, summary).
• mount_capsules() FastAPI integration — mount three read-only endpoints (GET /, GET /{id}, GET /verify) onto any FastAPI application. FastAPI is not a hard dependency.
• 33 new tests (23 audit + 10 FastAPI)

Design Principles

• Zero new dependencies — uses only stdlib (contextvars, logging, inspect, functools)
• Additive only — no existing files modified. All 361 existing tests pass unchanged.
• Never blocks user code — capsule errors are swallowed by default. Decorated function's return value, exceptions, and timing are preserved exactly.

Install

pip install qp-capsule==1.1.0

https://github.com/quantumpipes/capsule/blob/main/CHANGELOG.md#110---2026-03-07

Initial Release

v1.0.0

Initial: Capsule Protocol Specification v1.0.0