> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qwedai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# QWED Protocol releases: SDK versions and installs

> QWED Protocol release history with download links, installation instructions, version notes, and upgrade guidance across Python, TypeScript, Go, and Rust SDKs.

## Current release

<Card title="v7.2.0 — Security hardening batch + precision advisory" icon="shield-check" href="/changelog#v7-2-0-—-precision-advisory-and-security-hardening-batch">
  Fail-closed security hardening (expression, auth, sandbox, event loop) plus a new float-precision advisory. Additive minor — no breaking wire changes.
</Card>

### Install

<CodeGroup>
  ```bash pip theme={null}
  pip install qwed==7.2.0
  ```

  ```bash docker theme={null}
  docker pull qwedai/qwed-verification:7.2.0
  ```

  ```bash npm theme={null}
  npm install @qwed-ai/sdk@7.2.0
  ```

  ```bash cargo theme={null}
  cargo add qwed@7.2.0
  ```
</CodeGroup>

***

## Release history

<AccordionGroup>
  <Accordion title="v7.2.0 — Precision advisory and security hardening batch (September 7, 2026)" icon="shield-check" defaultOpen>
    **Fail-closed hardening batch + one additive capability.** Expression/auth/sandbox/event-loop security fixes restoring intended behavior, plus a new advisory flag for binary floating-point constants.

    <Warning>**API-key migration required.** API keys issued before v7.2 stop working — re-issue them after upgrading. Self-hosted deployments must also set a distinct `QWED_API_KEY_LOOKUP_SECRET` (the server fails closed at startup without it). See [Authentication](/api/authentication#api-key-storage-and-migration-v7-2).</Warning>

    [Full Release Notes →](/changelog#v7-2-0-—-precision-advisory-and-security-hardening-batch) · [GitHub Release](https://github.com/QWED-AI/qwed-verification/releases/tag/v7.2.0)
  </Accordion>

  <Accordion title="v7.1.0 — Verification Context v1.0 Rollout (August 16, 2026)" icon="shield-check">
    **Verification Context (VC) v1.0 shipped end-to-end (PRs #302–#316).** A formal specification with a machine-readable JSON Schema, a typed document model with fail-closed invariants, public [`proof_ref`](/api/endpoints#verification-context-endpoints) generation and resolution, `to_verification_context()` on all 13 verifiers, dedicated API endpoints, the `qwed context` CLI group, SDK re-exports on the Python client, and Docker-action VC outputs. Additive semver minor — no breaking wire changes.

    <Info>**Fail-closed conversion:** a `VERIFIED` diagnostic without a valid attestation demotes to `UNVERIFIABLE` in the VC document; malformed diagnostics convert to `BLOCKED` instead of crashing.</Info>

    [Full Release Notes →](/changelog#v7-1-0-%E2%80%94-verification-context-v10-rollout) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v7.1.0)
  </Accordion>

  <Accordion title="v7.0.0 — Full DiagnosticResult Engine Conformance (August 8, 2026)" icon="shield-check">
    **Engine migration to `DiagnosticResult` complete (META #216).** [`SchemaVerifier`](/engines/schema), [`SQLVerifier`](/engines/sql), [`CodeVerifier` and `SecureCodeExecutor`](/engines/code#security-scanning-codeverifier), and [`StatsVerifier`](/engines/stats) — plus fact/image batch verification — now return the unified `DiagnosticResult` contract. Truth and admission are separated: proven-unsafe code and proven-malicious SQL are `VERIFIED` (the proof succeeded) with an explicit `admission: BLOCKED`, and successful stats execution is `UNVERIFIABLE` because execution is not verification. SDK 6.0.0 → 7.0.0 across Python, TypeScript, and Rust.

    <Warning>**Breaking wire changes:** `POST /verify/code` returns `VERIFIED` for proven-unsafe code (gate on `admission` / `developer_fields.is_valid`, not `status`), and `POST /verify/stats` returns the `DiagnosticResult` shape with `UNVERIFIABLE` on execution success instead of the legacy `SUCCESS` shape.</Warning>

    [Full Release Notes →](/changelog#v7-0-0-—-full-diagnosticresult-engine-conformance) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v7.0.0)
  </Accordion>

  <Accordion title="v6.0.0 — Trust Boundary Completion (August 2, 2026)" icon="shield-check">
    **Trust Boundary Completion epic closed (Issue #263, 12/12 sub-issues, 21 PRs).** All `/verify/*` endpoints return unified [`DiagnosticResult`](/advanced/diagnostics). Control plane requires and verifies attestation at the admission boundary before admitting `VERIFIED`. VERIFIED is a protocol guarantee backed by deterministic `proof_ref` — heuristic and advisory analysis now reports `UNVERIFIABLE` with structured `advisory_checks`. Covers [consensus](/engines/consensus), [batch math](/api/endpoints#post-%2Fverify%2Fbatch), [control-plane attestation](/advanced/attestations), and [agent state](/advanced/agent-state-guard). SDK 5.3.0 → 6.0.0 across Python, TypeScript, Rust, Docker, and Kubernetes.

    <Warning>**Breaking change:** `/verify/*` responses now use the unified `DiagnosticResult` schema. Migrate consumers of the previous ad-hoc dict responses.</Warning>

    [Full Release Notes →](/changelog#v6-0-0-—-trust-boundary-completion) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v6.0.0)
  </Accordion>

  <Accordion title="v5.2.0 — Structured Verification Diagnostics (June 19, 2026)" icon="shield-check">
    Unified 3-layer `DiagnosticResult` model with `agent_message` (agent-safe), `developer_fields` (structured evidence), and `proof_ref` (sha256 proof hash — the authority bit). Tri-state status only (VERIFIED / UNVERIFIABLE / BLOCKED). Frozen dataclasses prevent post-construction bypass. Advisory checks structurally separated from verdicts. Migration helper for legacy engine dicts. 83 tests. Additive — no breaking changes.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v5.2.0)
  </Accordion>

  <Accordion title="v5.1.2 — SymPy Expression Injection Fix (June 14, 2026)" icon="shield-check">
    Emergency security patch fixing High severity (CVSS 8.8) authenticated RCE via unsafe SymPy `parse_expr()`. Added `safe_parse_expr()` wrapper with denylist, stripped `__builtins__`, allow-listed math namespace. Cache Redis fail-closed. CodSpeed benchmarks.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v5.1.2)
  </Accordion>

  <Accordion title="v5.1.1 — Trust Boundary Hardening (May 22, 2026)" icon="shield-check">
    Cache keys bound to full trust context (provider/model/policy/session) — prevents cross-context replay. Attestation path hardened with `AttestationStatus` enum and `is_issued` contract. Audit chain isolated per-org with `BEGIN IMMEDIATE` transactions. Reasoning proof prerequisites enforced. Symbolic/batch verifiers return `BLOCKED` on missing proof. Unknown agent actions denied. `additionalProperties: false` strictly enforced. SDK `5.1.1` across Python, TypeScript, Rust.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v5.1.1)
  </Accordion>

  <Accordion title="v5.1.0 — Agent State Governance and Fail-Closed Hardening (April 19, 2026)" icon="shield-check">
    AgentStateGuard for deterministic state verification · Legacy `CodeExecutor` hard-blocked · Default-deny for unknown tools · Bounded math tolerance · `verify_logic_rule` / `verify_identity` fail-closed · Ambiguous math expressions blocked · Schema `uniqueItems` fail-closed · SDK `5.1.0` across Python, TypeScript, Go.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v5.1.0)
  </Accordion>

  <Accordion title="v5.0.0 — Enforcement Boundary Hardening (April 4, 2026)" icon="shield-check">
    **98 commits** · Fail-closed verification boundary · `INCONCLUSIVE` status for LLM-translated math · `trust_boundary` metadata in responses · Mandatory `ActionContext` for agents · Replay/loop detection · Redis fail-closed rate limiting · Docker required for stats/consensus · `security_checks` field removed · Admin-only `/metrics` · SDK `5.0.0` across Python, TypeScript, Go.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v5.0.0)
  </Accordion>

  <Accordion title="v4.0.1 — Sentinel Guard Sync (March 23, 2026)" icon="arrows-rotate">
    TypeScript SDK alignment · `POST /verify/process` endpoint · Agent security checks (`exfiltration`, `mcp_poison`) · Security fixes (info disclosure, symbolic precision) · `@qwed-ai/sdk@4.0.1`.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v4.0.1)
  </Accordion>

  <Accordion title="v4.0.0 — Sentinel Edition (March 12, 2026)" icon="shield-check">
    **147 commits** · Agentic Security Guards (RAGGuard, ExfiltrationGuard, MCP Poison Guard) · SovereigntyGuard · ToxicFlowGuard · S-CoT Guard · Process Determinism (ProcessVerifier) · Critical security fixes (eval removal, sandbox escape, CVE patches) · Docker hardening · Sentry + CircleCI + SonarCloud + Snyk integration.

    [Full Release Notes →](/changelog) · [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v4.0.0)
  </Accordion>

  <Accordion title="v3.0.1 — Ironclad Update (February 4, 2026)" icon="lock">
    Security patch — CodeQL remediation (50+ alerts), workflow permissions lockdown, PII protection, Snyk partner attribution.

    [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v3.0.1)
  </Accordion>

  <Accordion title="v2.4.1 — The Reasoning Engine (January 20, 2026)" icon="brain">
    Optimization Engine, Vacuity Checker, Dockerized GitHub Action, improved logic verifier.

    [GitHub Release ↗](https://github.com/QWED-AI/qwed-verification/releases/tag/v2.4.1)
  </Accordion>
</AccordionGroup>

***

## Links

<CardGroup cols={3}>
  <Card title="PyPI" icon="python" href="https://pypi.org/project/qwed/">
    Python package
  </Card>

  <Card title="Docker Hub" icon="docker" href="https://hub.docker.com/r/qwedai/qwed-verification">
    Container image
  </Card>

  <Card title="npm" icon="npm" href="https://www.npmjs.com/package/@qwed-ai/sdk">
    TypeScript SDK
  </Card>

  <Card title="crates.io" icon="rust" href="https://crates.io/crates/qwed">
    Rust SDK
  </Card>

  <Card title="GitHub" icon="github" href="https://github.com/QWED-AI/qwed-verification/releases">
    All releases
  </Card>

  <Card title="Go Module" icon="golang" href="https://github.com/QWED-AI/qwed-verification/tree/main/sdk-go">
    Go SDK
  </Card>
</CardGroup>