Version updated for https://github.com/msaleme/red-team-blue-team-agent-fabric to version v4.9.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Corrects a CVE misattribution. The MCP tool-poisoning suite was incorrectly anchored to CVE-2026-25253, which is an unrelated OpenClaw WebSocket vulnerability. Re-anchored to the Invariant Labs Tool Poisoning research (2025) and ClawHub RFC #99; fabricated statistics removed; module renamed cve_2026_25253_harness to mcp_tool_poisoning_harness (CLI id mcp-tool-poisoning). Test IDs CVE-001..CVE-010 unchanged; CVE-009/010 still map to the real CVE-2026-35625/35629. 540 tests.

Version updated for https://github.com/msaleme/red-team-blue-team-agent-fabric to version v4.9.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Closes the honest gap flagged in Discussion #231 and named by the ACM SIGOPS ATC ‘26 analysis Free-Riding the Agentic Web (arXiv:2605.30998). Three of that paper’s four x402 attack primitives were already covered. The fourth — denial of settlement (consume the resource while withholding or delaying finality) — is a liveness attack with a different shape than a tamper→reject differential, so it was an untested gap. This release closes it: 3-of-4 → 4-of-4.

Version updated for https://github.com/msaleme/red-team-blue-team-agent-fabric to version v4.8.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed Promotes the funding-instrument checks that were a single dimension of the AP2 harness (AP2-015) into a first-class module — the tokenized card credential (Visa Trusted Agent Protocol / Mastercard Agentic Tokens) that sits inside an AP2 Payment Mandate as the instrument that actually moves money.

Version updated for https://github.com/msaleme/red-team-blue-team-agent-fabric to version v4.7.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. What’s Changed The harness now tests all four layers of the agentic-payments stack. Since the last PyPI release (v4.5.0), two conformance layers landed — this release ships both. Highlights (v4.5.0 → v4.7.0: 474 → 520 tests, 33 → 36 modules) Merchant-journey layer — NEW (UCP/ACP), #228 ucp_acp_harness.py — 12 tests, stdlib-only, fail-closed reference verifier.