Release notes
What changed, and what was measured.
Latest verified PyPI release: AgentLeak 0.17.0, published 2026-09-27. Release catalog checked 2026-09-28.
The bundled-corpus benchmark is a separate snapshot: 266 scenarios measured on 2026-09-27 with AgentLeak 0.16.0. A newer release does not silently update those measurements. The research paper is versioned independently.
2026-09-27
AgentLeak 0.17.0 · Model gateway and evaluation integrations
- Adds an OpenAI-compatible LLM proxy and a LiteLLM guardrail.
- Adds a promptfoo assertion and optional task-success reporting alongside privacy scores.
2026-09-27
AgentLeak 0.16.0 · Response inspection and traceable policy decisions
- Adds opt-in tool-response inspection, tokenization, flow-rule groups and origin tracking.
- Adds signed evidence logs and MCP tool pinning; improves prose detection.
2026-09-26
AgentLeak 0.15.0 · Encoded disclosures between agents
- Detects supported encoded, obscured and fragmented copies of sensitive values across agent messages.
- Extends redaction and gateway handling to supported encoded values.
2026-08-30
AgentLeak 0.14.1 · Scenario-library count correction
- Distinguishes loaded scenarios from the 266 scenarios available in the bundled library.
Selected recent releases. Read the complete software changelog.