[AAASM-2718] 🔧 (agent-assembly): Use canonical lowercase org ID ai-agent-assembly

.github/workflows/ci.yml

@@ -264,7 +264,7 @@ jobs:
       - name: Checkout sibling node-sdk (for e2e_sdk_node fixtures)
         uses: actions/checkout@v6
         with:
-          repository: AI-agent-assembly/node-sdk
+          repository: ai-agent-assembly/node-sdk
           path: node-sdk
       - name: Install protobuf compiler
         run: sudo apt-get install -y protobuf-compiler
@@ -378,7 +378,7 @@ jobs:
       - name: Checkout sibling node-sdk (for e2e_sdk_node fixtures)
         uses: actions/checkout@v6
         with:
-          repository: AI-agent-assembly/node-sdk
+          repository: ai-agent-assembly/node-sdk
           path: node-sdk
       - name: Install protobuf compiler
         run: sudo apt-get install -y protobuf-compiler
@@ -466,7 +466,7 @@ jobs:
         with:
           files: ./codecov.xml
           name: Rust unit tests
-          slug: AI-agent-assembly/agent-assembly
+          slug: ai-agent-assembly/agent-assembly
           token: ${{ secrets.CODECOV_TOKEN }}
           flags: unit
           verbose: true

.github/workflows/dev-verify.yml

@@ -44,9 +44,9 @@ jobs:
         # sdk-repos.txt lists SSH URLs; CI uses HTTPS equivalents.
         run: |
           parent="$(dirname "$GITHUB_WORKSPACE")"
-          git clone https://github.com/AI-agent-assembly/python-sdk.git "$parent/python-sdk"
-          git clone https://github.com/AI-agent-assembly/node-sdk.git "$parent/node-sdk"
-          git clone https://github.com/AI-agent-assembly/go-sdk.git "$parent/go-sdk"
+          git clone https://github.com/ai-agent-assembly/python-sdk.git "$parent/python-sdk"
+          git clone https://github.com/ai-agent-assembly/node-sdk.git "$parent/node-sdk"
+          git clone https://github.com/ai-agent-assembly/go-sdk.git "$parent/go-sdk"
 
       - uses: actions/setup-python@v6
         with:

.github/workflows/docker.yml

@@ -3,7 +3,7 @@ name: Docker
 permissions:
   contents: read
 
-# Prerequisite: the AI-agent-assembly org must have
+# Prerequisite: the ai-agent-assembly org must have
 # Actions → Settings → Actions → Workflow permissions → "Read and write permissions" enabled.
 # Without this, the GHCR publish step (on tag push) will fail with HTTP 403.
 
@@ -78,9 +78,9 @@ jobs:
             {"lang":"python","version":"3.14-slim","dockerfile":"docker/Dockerfile.python-3.14-slim","smoke_run":"python -c \"from agent_assembly import init_assembly\"","is_latest":true},
             {"lang":"python","version":"3.13-slim","dockerfile":"docker/Dockerfile.python-3.13-slim","smoke_run":"python -c \"from agent_assembly import init_assembly\""},
             {"lang":"python","version":"3.12-slim","dockerfile":"docker/Dockerfile.python-3.12-slim","smoke_run":"python -c \"from agent_assembly import init_assembly\""},
-            {"lang":"go","version":"1.26-alpine","dockerfile":"docker/Dockerfile.go-1.26-alpine","smoke_run":"go list -m github.com/AI-agent-assembly/go-sdk@latest","is_latest":true},
-            {"lang":"go","version":"1.25-alpine","dockerfile":"docker/Dockerfile.go-1.25-alpine","smoke_run":"go list -m github.com/AI-agent-assembly/go-sdk@latest"},
-            {"lang":"go","version":"1.24-alpine","dockerfile":"docker/Dockerfile.go-1.24-alpine","smoke_run":"go list -m github.com/AI-agent-assembly/go-sdk@latest"}
+            {"lang":"go","version":"1.26-alpine","dockerfile":"docker/Dockerfile.go-1.26-alpine","smoke_run":"go list -m github.com/ai-agent-assembly/go-sdk@latest","is_latest":true},
+            {"lang":"go","version":"1.25-alpine","dockerfile":"docker/Dockerfile.go-1.25-alpine","smoke_run":"go list -m github.com/ai-agent-assembly/go-sdk@latest"},
+            {"lang":"go","version":"1.24-alpine","dockerfile":"docker/Dockerfile.go-1.24-alpine","smoke_run":"go list -m github.com/ai-agent-assembly/go-sdk@latest"}
           ]'
           if [ "${{ github.event_name }}" = "pull_request" ]; then
             sel=$(printf '%s' "$full" | jq -c '[.[] | select(.is_latest == true)]')

.github/workflows/integration-tests.yml

@@ -59,19 +59,19 @@ jobs:
       - name: Checkout sibling python-sdk
         uses: actions/checkout@v6
         with:
-          repository: AI-agent-assembly/python-sdk
+          repository: ai-agent-assembly/python-sdk
           path: python-sdk
 
       - name: Checkout sibling go-sdk
         uses: actions/checkout@v6
         with:
-          repository: AI-agent-assembly/go-sdk
+          repository: ai-agent-assembly/go-sdk
           path: go-sdk
 
       - name: Checkout sibling node-sdk
         uses: actions/checkout@v6
         with:
-          repository: AI-agent-assembly/node-sdk
+          repository: ai-agent-assembly/node-sdk
           path: node-sdk
 
       - name: Install protobuf compiler

CHANGELOG.md

@@ -77,7 +77,7 @@ docker pull ghcr.io/ai-agent-assembly/python:3.14-slim
 # Language SDKs
 pip install --pre agent-assembly==0.0.1a5
 npm install @agent-assembly/sdk@0.0.1-alpha.5
-go get github.com/AI-agent-assembly/go-sdk@v0.0.1-alpha.5
+go get github.com/ai-agent-assembly/go-sdk@v0.0.1-alpha.5
 ```
 
 ### Behaviour delta on the crates.io `aasm` binary
@@ -158,7 +158,7 @@ brew install ai-agent-assembly/homebrew-agent-assembly/aasm
 docker pull ghcr.io/ai-agent-assembly/aa-runtime:v0.0.1-alpha.4
 pip install --pre agent-assembly==0.0.1a4
 npm install @agent-assembly/sdk@0.0.1-alpha.4
-go get github.com/AI-agent-assembly/go-sdk@v0.0.1-alpha.4
+go get github.com/ai-agent-assembly/go-sdk@v0.0.1-alpha.4
 ```
 
 ### Behaviour delta on the published `aasm` binary
@@ -305,4 +305,4 @@ version (or skip pre-releases entirely):
 For the GA release scope, see the upcoming [0.0.1] entry, which will be authored
 under AAASM-1247 once the alpha-1 dry-run passes and the GA tag is cut.
 
-[0.0.1-alpha.1]: https://github.com/AI-agent-assembly/agent-assembly/releases/tag/v0.0.1-alpha.1
+[0.0.1-alpha.1]: https://github.com/ai-agent-assembly/agent-assembly/releases/tag/v0.0.1-alpha.1

CONTRIBUTING.md

@@ -12,7 +12,7 @@ Thank you for your interest in contributing! This guide explains how to set up y
 ## Setup
 
 ```bash
-git clone https://github.com/AI-agent-assembly/agent-assembly.git
+git clone https://github.com/ai-agent-assembly/agent-assembly.git
 cd agent-assembly
 
 # Install git hooks (runs fmt, clippy, deny on commit; doc on push)

Cargo.toml

@@ -43,8 +43,8 @@ resolver = "2"
 version = "0.0.1-alpha.5"
 edition = "2021"
 license = "Apache-2.0"
-repository = "https://github.com/AI-agent-assembly/agent-assembly"
-homepage = "https://github.com/AI-agent-assembly/agent-assembly"
+repository = "https://github.com/ai-agent-assembly/agent-assembly"
+homepage = "https://github.com/ai-agent-assembly/agent-assembly"
 authors = ["Agent Assembly Contributors"]
 
 # Single source of version truth for third-party crates shared by two or more

README.md

@@ -2,11 +2,11 @@
 
 > Governance-native runtime for AI agents — open-source core.
 
-[![CI](https://github.com/AI-agent-assembly/agent-assembly/actions/workflows/ci.yml/badge.svg)](https://github.com/AI-agent-assembly/agent-assembly/actions/workflows/ci.yml)
-[![Docs](https://github.com/AI-agent-assembly/agent-assembly/actions/workflows/docs.yml/badge.svg)](https://github.com/AI-agent-assembly/agent-assembly/actions/workflows/docs.yml)
-[![codecov](https://codecov.io/gh/AI-agent-assembly/agent-assembly/branch/master/graph/badge.svg)](https://codecov.io/gh/AI-agent-assembly/agent-assembly)
+[![CI](https://github.com/ai-agent-assembly/agent-assembly/actions/workflows/ci.yml/badge.svg)](https://github.com/ai-agent-assembly/agent-assembly/actions/workflows/ci.yml)
+[![Docs](https://github.com/ai-agent-assembly/agent-assembly/actions/workflows/docs.yml/badge.svg)](https://github.com/ai-agent-assembly/agent-assembly/actions/workflows/docs.yml)
+[![codecov](https://codecov.io/gh/ai-agent-assembly/agent-assembly/branch/master/graph/badge.svg)](https://codecov.io/gh/ai-agent-assembly/agent-assembly)
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
-[![Release](https://img.shields.io/github/v/release/AI-agent-assembly/agent-assembly?include_prereleases&sort=semver)](https://github.com/AI-agent-assembly/agent-assembly/releases)
+[![Release](https://img.shields.io/github/v/release/ai-agent-assembly/agent-assembly?include_prereleases&sort=semver)](https://github.com/ai-agent-assembly/agent-assembly/releases)
 
 
 ## Install the CLI
@@ -16,7 +16,7 @@ curl -sSf https://install.ai-agent-assembly.dev | sh
 ```
 
 This downloads and installs the `aasm` binary to `~/.local/bin`. Requires a
-[published release](https://github.com/AI-agent-assembly/agent-assembly/releases).
+[published release](https://github.com/ai-agent-assembly/agent-assembly/releases).
 The installer script lives at [`scripts/install-cli.sh`](scripts/install-cli.sh).
 
 ```sh
@@ -34,7 +34,7 @@ brew install ai-agent-assembly/homebrew-agent-assembly/aasm
 ```
 
 Installs the latest tagged `aasm` release from the
-[Homebrew tap](https://github.com/AI-agent-assembly/homebrew-agent-assembly).
+[Homebrew tap](https://github.com/ai-agent-assembly/homebrew-agent-assembly).
 During the `v0.0.1` alpha series the published releases are pre-releases — see
 [Project Status](#project-status).
 
@@ -53,10 +53,10 @@ can move from this repo to the SDKs, the install tap, or the canonical docs.
 | Repository | Role | Status |
 |---|---|---|
 | **agent-assembly** (this repo) | Core runtime — gateway, policy engine, eBPF / proxy / SDK interception | Public · Alpha |
-| [python-sdk](https://github.com/AI-agent-assembly/python-sdk) | Python SDK (PyO3 native + pure-Python client) | Public · Alpha |
-| [node-sdk](https://github.com/AI-agent-assembly/node-sdk) | TypeScript / Node.js SDK (napi-rs native + JS client) | Public · Alpha |
-| [go-sdk](https://github.com/AI-agent-assembly/go-sdk) | Go SDK | Public · Alpha |
-| [homebrew-agent-assembly](https://github.com/AI-agent-assembly/homebrew-agent-assembly) | Homebrew tap for the `aasm` CLI | Public |
+| [python-sdk](https://github.com/ai-agent-assembly/python-sdk) | Python SDK (PyO3 native + pure-Python client) | Public · Alpha |
+| [node-sdk](https://github.com/ai-agent-assembly/node-sdk) | TypeScript / Node.js SDK (napi-rs native + JS client) | Public · Alpha |
+| [go-sdk](https://github.com/ai-agent-assembly/go-sdk) | Go SDK | Public · Alpha |
+| [homebrew-agent-assembly](https://github.com/ai-agent-assembly/homebrew-agent-assembly) | Homebrew tap for the `aasm` CLI | Public |
 | [agent-assembly-docs](https://ai-agent-assembly.github.io/agent-assembly-docs/) | Canonical documentation site | Public |
 | agent-assembly-cloud | Hosted SaaS control plane | Private · in development |
 | agent-assembly-enterprise | Enterprise extensions (delivered via SaaS) | Private · in development |
@@ -101,7 +101,7 @@ These two are built by `aa-ebpf/build.rs` (via `aya-build`) for the BPF target 
 public API and wire protocol are **not** stable; do not use in production.
 
 Releases are published as GitHub pre-releases — latest
-[`v0.0.1-alpha.5`](https://github.com/AI-agent-assembly/agent-assembly/releases/tag/v0.0.1-alpha.5)
+[`v0.0.1-alpha.5`](https://github.com/ai-agent-assembly/agent-assembly/releases/tag/v0.0.1-alpha.5)
 (2026-06-03). The coordinated release tag also publishes the CLI, crates, SDK
 packages, and container image:
 
@@ -147,15 +147,15 @@ requirements.
 
 > **Demo recording:** `asciinema play docs/quickstart.cast`
 >
-> **Prefer Codespaces?** [![Open in GitHub Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/AI-agent-assembly/agent-assembly)
+> **Prefer Codespaces?** [![Open in GitHub Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/ai-agent-assembly/agent-assembly)
 > The `.devcontainer/` config installs all dependencies automatically.
 
 Get from a fresh clone to a verified local environment in under 10 minutes.
 
 ### 1. Clone the repository
 
 ```bash
-git clone https://github.com/AI-agent-assembly/agent-assembly.git
+git clone https://github.com/ai-agent-assembly/agent-assembly.git
 cd agent-assembly
 ```
 
@@ -298,7 +298,7 @@ mdbook serve docs --open
 ## Security & Support
 
 - **Security:** Report vulnerabilities **privately** via
-  [GitHub Security Advisories](https://github.com/AI-agent-assembly/agent-assembly/security)
+  [GitHub Security Advisories](https://github.com/ai-agent-assembly/agent-assembly/security)
   or email `security@agent-assembly.dev`. Please do not open public issues for
   security reports. See [`SECURITY.md`](SECURITY.md) for the disclosure policy
   and response SLA.

SECURITY.md

@@ -12,7 +12,7 @@
 
 To report a security issue, use GitHub's private vulnerability reporting:
 
-1. Go to the [Security tab](https://github.com/AI-agent-assembly/agent-assembly/security) of this repository.
+1. Go to the [Security tab](https://github.com/ai-agent-assembly/agent-assembly/security) of this repository.
 2. Click **"Report a vulnerability"**.
 3. Fill in the details and submit.
 

aa-api/src/openapi.rs

@@ -31,7 +31,7 @@ use crate::routes::{
         version = "0.0.1",
         description = "REST API for the Agent Assembly governance gateway.\n\nThis spec is auto-generated from `aa-api` route annotations via `utoipa`. CI fails if the generated spec drifts from the committed `openapi/v1.yaml`.",
         license(name = "Apache 2.0", url = "https://www.apache.org/licenses/LICENSE-2.0.html"),
-        contact(name = "Agent Assembly Contributors", url = "https://github.com/AI-agent-assembly/agent-assembly")
+        contact(name = "Agent Assembly Contributors", url = "https://github.com/ai-agent-assembly/agent-assembly")
     ),
     servers(
         (url = "http://localhost:7700", description = "Local development gateway")

aa-ebpf-programs/Cargo.toml

@@ -3,7 +3,7 @@ name = "aa-ebpf-programs"
 version = "0.0.1"
 edition = "2021"
 license = "Apache-2.0"
-repository = "https://github.com/AI-agent-assembly/agent-assembly"
+repository = "https://github.com/ai-agent-assembly/agent-assembly"
 description = "eBPF kernel-space programs for Agent Assembly — compiled for the bpf target"
 publish = false
 

aa-integration-tests/tests/common/node_sdk.rs

@@ -1,5 +1,5 @@
 //! Sibling-repo lookup helpers for the Node.js SDK
-//! (`AI-agent-assembly/node-sdk`).
+//! (`ai-agent-assembly/node-sdk`).
 //!
 //! The TypeScript fixtures under
 //! `aa-integration-tests/tests/fixtures/agents/typescript/` resolve
@@ -31,7 +31,7 @@ use anyhow::{anyhow, Context, Result};
 /// Order:
 /// 1. `NODE_SDK_PATH` env var (absolute or relative).
 /// 2. `<parent of CARGO_MANIFEST_DIR>/../node-sdk` — the layout used
-///    by the workspace (`AI-agent-assembly/{agent-assembly,node-sdk}/`).
+///    by the workspace (`ai-agent-assembly/{agent-assembly,node-sdk}/`).
 pub fn node_sdk_dir() -> Result<PathBuf> {
     if let Ok(p) = std::env::var("NODE_SDK_PATH") {
         let path = PathBuf::from(p);

aa-integration-tests/tests/e2e_sdk_runtime_lifecycle.rs

@@ -178,7 +178,7 @@ fn probe_go_dir() -> PathBuf {
 /// overwrites any existing directive for the same module.
 fn refresh_go_replace_directive() -> bool {
     let arg = format!(
-        "-replace=github.com/AI-agent-assembly/go-sdk={}",
+        "-replace=github.com/ai-agent-assembly/go-sdk={}",
         go_sdk_path().display()
     );
     Command::new("go")

aa-integration-tests/tests/fixtures/agents/python/pyproject.toml

@@ -28,18 +28,18 @@ default-groups = []
 
 [tool.uv.sources]
 # Mode 1: Local sibling checkout (PRIMARY — default for CI + local dev side-by-side)
-# Local dev:  6 levels up from fixtures/agents/python/ = AI-agent-assembly/python-sdk/
+# Local dev:  6 levels up from fixtures/agents/python/ = ai-agent-assembly/python-sdk/
 # CI:  sibling-repo checkout via actions/checkout@v4 (path: python-sdk)
 agent-assembly = { path = "../../../../../../python-sdk", editable = true }
 
 # Mode 2: GitHub URL fallback (use when only agent-assembly is checked out)
 # Uncomment one of these and comment out Mode 1:
 #
 # Latest master:
-# agent-assembly = { git = "https://github.com/AI-agent-assembly/python-sdk.git", branch = "master" }
+# agent-assembly = { git = "https://github.com/ai-agent-assembly/python-sdk.git", branch = "master" }
 #
 # Pinned commit (preferred for reproducibility):
-# agent-assembly = { git = "https://github.com/AI-agent-assembly/python-sdk.git", rev = "COMMIT_SHA" }
+# agent-assembly = { git = "https://github.com/ai-agent-assembly/python-sdk.git", rev = "COMMIT_SHA" }
 
 # Mode 3: PyPI version pin (future — once SDK is published to PyPI)
 # agent-assembly = ">=0.0.1,<1.0"

aa-integration-tests/tests/fixtures/f115/probe_go/go.mod

@@ -2,7 +2,7 @@ module probe_go
 
 go 1.26.0
 
-require github.com/AI-agent-assembly/go-sdk v0.0.0
+require github.com/ai-agent-assembly/go-sdk v0.0.0
 
 require (
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
@@ -17,4 +17,4 @@ require (
 	google.golang.org/protobuf v1.36.11 // indirect
 )
 
-replace github.com/AI-agent-assembly/go-sdk => /tmp/aa-go-sdk-for-test
+replace github.com/ai-agent-assembly/go-sdk => /tmp/aa-go-sdk-for-test

aa-integration-tests/tests/fixtures/f115/probe_go/main.go

@@ -16,7 +16,7 @@ import (
 	"fmt"
 	"os"
 
-	"github.com/AI-agent-assembly/go-sdk/assembly"
+	"github.com/ai-agent-assembly/go-sdk/assembly"
 )
 
 func main() {

aa-proxy/Dockerfile

@@ -34,7 +34,7 @@ FROM gcr.io/distroless/static:nonroot AS runtime
 
 COPY --from=builder /app/aa-proxy-bin /aa-proxy
 
-LABEL org.opencontainers.image.source="https://github.com/AI-agent-assembly/agent-assembly" \
+LABEL org.opencontainers.image.source="https://github.com/ai-agent-assembly/agent-assembly" \
       org.opencontainers.image.description="aa-proxy sidecar — AAASM traffic interception proxy" \
       org.opencontainers.image.licenses="Apache-2.0"
 

aa-runtime/Dockerfile

@@ -57,7 +57,7 @@ FROM gcr.io/distroless/static:nonroot AS runtime
 
 COPY --from=builder /app/aa-runtime /aa-runtime
 
-LABEL org.opencontainers.image.source="https://github.com/AI-agent-assembly/agent-assembly" \
+LABEL org.opencontainers.image.source="https://github.com/ai-agent-assembly/agent-assembly" \
       org.opencontainers.image.description="aa-runtime sidecar — AI agent assembly runtime" \
       org.opencontainers.image.licenses="Apache-2.0"
 

docker/Dockerfile.go-1.24-alpine

@@ -69,6 +69,13 @@ ENV GOTOOLCHAIN=auto
 
 # Install the AAASM Go SDK. `go install` uses Go's native git-based
 # distribution model — no registry-publish prerequisite (unlike pip/npm).
+#
+# NOTE: this go-sdk module path stays mixed-case `AI-agent-assembly` (not the
+# canonical lowercase org ID) on purpose. `@latest` resolves to the published
+# go-sdk tag whose go.mod declares `module github.com/AI-agent-assembly/go-sdk`,
+# and Go enforces a case-sensitive module-path match — lowercasing it breaks the
+# image build until go-sdk publishes a lowercase-module-path tag (AAASM-2729,
+# Epic AAASM-2715).
 RUN go install github.com/AI-agent-assembly/go-sdk/...@latest
 
 # Build-time smoke tests — fail the image build (not a runtime surprise)
@@ -83,6 +90,6 @@ RUN go install github.com/AI-agent-assembly/go-sdk/...@latest
 RUN aasm --version
 RUN go list -m github.com/AI-agent-assembly/go-sdk@latest
 
-LABEL org.opencontainers.image.source="https://github.com/AI-agent-assembly/agent-assembly" \
+LABEL org.opencontainers.image.source="https://github.com/ai-agent-assembly/agent-assembly" \
       org.opencontainers.image.description="AAASM governed Go 1.24 agent base image" \
       org.opencontainers.image.licenses="Apache-2.0"

docker/Dockerfile.go-1.25-alpine

@@ -69,6 +69,13 @@ ENV GOTOOLCHAIN=auto
 
 # Install the AAASM Go SDK. `go install` uses Go's native git-based
 # distribution model — no registry-publish prerequisite (unlike pip/npm).
+#
+# NOTE: this go-sdk module path stays mixed-case `AI-agent-assembly` (not the
+# canonical lowercase org ID) on purpose. `@latest` resolves to the published
+# go-sdk tag whose go.mod declares `module github.com/AI-agent-assembly/go-sdk`,
+# and Go enforces a case-sensitive module-path match — lowercasing it breaks the
+# image build until go-sdk publishes a lowercase-module-path tag (AAASM-2729,
+# Epic AAASM-2715).
 RUN go install github.com/AI-agent-assembly/go-sdk/...@latest
 
 # Build-time smoke tests — fail the image build (not a runtime surprise)
@@ -83,6 +90,6 @@ RUN go install github.com/AI-agent-assembly/go-sdk/...@latest
 RUN aasm --version
 RUN go list -m github.com/AI-agent-assembly/go-sdk@latest
 
-LABEL org.opencontainers.image.source="https://github.com/AI-agent-assembly/agent-assembly" \
+LABEL org.opencontainers.image.source="https://github.com/ai-agent-assembly/agent-assembly" \
       org.opencontainers.image.description="AAASM governed Go 1.25 agent base image" \
       org.opencontainers.image.licenses="Apache-2.0"