swt3-ai 0.1.1 → 0.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6b5ce85f7938c51d5738f838a78c3c5990c7ccc6ad8af7b79c9ea339231804e
-  data.tar.gz: c1e2e302c8d52759233e8fc46a22b411634144390e642b0b30d4ad161187b490
+  metadata.gz: 3c33738eca6af0da5f3b341aca0c44f10d97f646a0aed85bd57901081c2bc6f9
+  data.tar.gz: 26e63c59eb176fc1d7cdfda26eed9841c1fa8e242a97915885a3396f26c43099
 SHA512:
-  metadata.gz: 067bf588f7aefe172df7a74c712f0ae08d4182946bf2e074268d37d1f8af14c7c7b77c9ea198329dbd30df37e5669dcf5cfa9973319b22c5749095072504f8a4
-  data.tar.gz: bd21ed1a6572663fb04c49a92bedc86953bd2ec9bdc88354b99ab282483ad6b5555a3b7851f1c2928bc135ab95239d9a812619a2f0299d84a0ffaac70d6b5a6b
+  metadata.gz: c8472c6b851815fd18a8a0f8f1b896b4fd8e727b4a9d4fcc12629beca30294aba4f5b7c95b912d6c5274da0123777bab811fa6723b066b041d228caeae7b292c
+  data.tar.gz: f7eda3a4fbeea3e9c58f36cb298f65da87c37bc4798add45af5ac28a81f68776383ee97597a0efb2ed3880aa379976184c0e857dbdb30ccc468cff5897dd6b97

data/lib/swt3_ai/fingerprint.rb

@@ -0,0 +1,43 @@
+require "openssl"
+
+module Swt3Ai
+  module Fingerprint
+    # Mint an SWT3 fingerprint from the canonical formula.
+    #
+    # Returns the first 12 hex characters of:
+    #   SHA-256("WITNESS:{tenant}:{proc}:{fa}:{fb}:{fc}:{ts_ms}")
+    #
+    # This formula is locked and must produce identical output across
+    # all SWT3 SDK implementations (Python, TypeScript, Rust, C#, Ruby).
+    def self.mint_fingerprint(tenant_id, procedure_id, factor_a, factor_b, factor_c, timestamp_ms)
+      input = "WITNESS:#{tenant_id}:#{procedure_id}:#{num_str(factor_a)}:#{num_str(factor_b)}:#{num_str(factor_c)}:#{timestamp_ms}"
+      sha256_hex(input, 12)
+    end
+
+    # Compute a truncated SHA-256 hash. Default length is 16 hex characters.
+    def self.sha256_truncated(data, length = 16)
+      sha256_hex(data, length)
+    end
+
+    # Compute SHA-256 and return the first N hex characters.
+    def self.sha256_hex(data, length = 64)
+      digest = OpenSSL::Digest::SHA256.hexdigest(data.to_s)
+      digest[0, [length, 64].min]
+    end
+
+    # Get the current timestamp in milliseconds and epoch seconds.
+    def self.timestamp_ms
+      ms = (Time.now.to_f * 1000).to_i
+      epoch = ms / 1000
+      [ms, epoch]
+    end
+
+    # Format a numeric factor as a string matching the canonical formula.
+    # Integer-valued floats are formatted without decimals: 1.0 -> "1"
+    def self.num_str(v)
+      v == v.to_i ? v.to_i.to_s : v.to_s
+    end
+
+    private_class_method :num_str
+  end
+end

data/lib/swt3_ai/signing.rb

@@ -0,0 +1,15 @@
+require "openssl"
+
+module Swt3Ai
+  module Signing
+    # Sign a payload with HMAC-SHA256 for non-repudiation.
+    #
+    # If agent_id is provided, the message is "{fingerprint}:{agent_id}".
+    # Otherwise, the message is just the fingerprint.
+    # Returns a 64-character lowercase hex string.
+    def self.sign_payload(signing_key, anchor_fingerprint, agent_id = nil)
+      message = agent_id ? "#{anchor_fingerprint}:#{agent_id}" : anchor_fingerprint
+      OpenSSL::HMAC.hexdigest("SHA256", signing_key, message)
+    end
+  end
+end

data/lib/swt3_ai/types.rb

@@ -0,0 +1,27 @@
+module Swt3Ai
+  # A witness payload ready for transmission to the witness endpoint.
+  WitnessPayload = Struct.new(
+    :procedure_id, :factor_a, :factor_b, :factor_c,
+    :clearing_level, :anchor_fingerprint, :anchor_epoch,
+    :fingerprint_timestamp_ms, :ai_model_id, :ai_prompt_hash,
+    :ai_response_hash, :ai_latency_ms, :ai_input_tokens,
+    :ai_output_tokens, :agent_id, :cycle_id,
+    :payload_signature, :policy_version_hash,
+    keyword_init: true
+  )
+
+  # A receipt returned by the witness endpoint after successful anchoring.
+  WitnessReceipt = Struct.new(
+    :procedure_id, :verdict, :swt3_anchor, :clearing_level,
+    :witnessed_at, :verification_url, :ok, :error,
+    keyword_init: true
+  )
+
+  # Configuration for a Witness client.
+  WitnessConfig = Struct.new(
+    :endpoint, :api_key, :tenant_id, :clearing_level,
+    :buffer_size, :flush_interval, :timeout, :max_retries,
+    :agent_id, :signing_key, :cycle_id, :policy_version,
+    keyword_init: true
+  )
+end

data/lib/swt3_ai.rb

@@ -1,7 +1,11 @@
-# SWT3 Witness Anchors for AI systems.
-# Cryptographic accountability protocol for AI inference, training, and deployment.
+# SWT3 AI Witness SDK for Ruby.
+# Cryptographic attestation for AI inference.
 # See https://tenova.io for documentation.
 
+require_relative "swt3_ai/fingerprint"
+require_relative "swt3_ai/signing"
+require_relative "swt3_ai/types"
+
 module Swt3Ai
-  VERSION = "0.1.1"
+  VERSION = "0.3.6"
 end

metadata

@@ -1,17 +1,17 @@
 --- !ruby/object:Gem::Specification
 name: swt3-ai
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.4.1
 platform: ruby
 authors:
 - TeNova Labs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-22 00:00:00.000000000 Z
+date: 2026-04-28 00:00:00.000000000 Z
 dependencies: []
-description: Cryptographic accountability protocol for AI inference, training, and
-  deployment.
+description: Mint, verify, and sign SWT3 witness anchors for AI compliance. Cross-language
+  parity with Python and TypeScript SDKs. Zero external dependencies.
 email:
 - engineering@tenovaai.com
 executables: []
@@ -20,6 +20,9 @@ extra_rdoc_files: []
 files:
 - README.md
 - lib/swt3_ai.rb
+- lib/swt3_ai/fingerprint.rb
+- lib/swt3_ai/signing.rb
+- lib/swt3_ai/types.rb
 homepage: https://tenova.io
 licenses:
 - Apache-2.0
@@ -44,5 +47,5 @@ requirements: []
 rubygems_version: 3.4.20
 signing_key:
 specification_version: 4
-summary: SWT3 Witness Anchors for AI systems
+summary: 'SWT3 AI Witness SDK: cryptographic attestation for AI inference'
 test_files: []