swt3-ai 0.1.1 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6b5ce85f7938c51d5738f838a78c3c5990c7ccc6ad8af7b79c9ea339231804e
-  data.tar.gz: c1e2e302c8d52759233e8fc46a22b411634144390e642b0b30d4ad161187b490
+  metadata.gz: 91d5ca9a917067963c5ab81b0a3cf7a90b092122e278342d8615df04f577778e
+  data.tar.gz: 7f4cfc6fa1073306cb6467893aa79004bcddd04c26ef9cf3da4238eaded93404
 SHA512:
-  metadata.gz: 067bf588f7aefe172df7a74c712f0ae08d4182946bf2e074268d37d1f8af14c7c7b77c9ea198329dbd30df37e5669dcf5cfa9973319b22c5749095072504f8a4
-  data.tar.gz: bd21ed1a6572663fb04c49a92bedc86953bd2ec9bdc88354b99ab282483ad6b5555a3b7851f1c2928bc135ab95239d9a812619a2f0299d84a0ffaac70d6b5a6b
+  metadata.gz: 7e627e85595287b88a118ca68fa7ff794728527fdeec26243632fd8fd17aada1c3e8e2a6f6372ae782bc3e7c7a3f004d195c8346da5f11201b7227da177c0d82
+  data.tar.gz: 551f2f3bc32b4bb5d80a620e44bc6d163296d148e9c029402ac21cfd4fcc4a12f7141563209a3db6feb6efeee664c840ad68e2ff66d5e62a83cfc37e7e697675

data/README.md

@@ -13,7 +13,7 @@ The EU AI Act takes effect **August 2, 2026**. When regulators ask "prove your A
 
 This package reserves the `swt3-ai` namespace on RubyGems. The full Ruby SDK is under development.
 
-Production SDKs are available today for Python and TypeScript:
+Production SDKs are available today for Python, TypeScript, Rust, C#, and Ruby:
 
 ```bash
 # Python

data/lib/swt3_ai/fingerprint.rb

@@ -0,0 +1,43 @@
+require "openssl"
+
+module Swt3Ai
+  module Fingerprint
+    # Mint an SWT3 fingerprint from the canonical formula.
+    #
+    # Returns the first 12 hex characters of:
+    #   SHA-256("WITNESS:{tenant}:{proc}:{fa}:{fb}:{fc}:{ts_ms}")
+    #
+    # This formula is locked and must produce identical output across
+    # all SWT3 SDK implementations (Python, TypeScript, Rust, C#, Ruby).
+    def self.mint_fingerprint(tenant_id, procedure_id, factor_a, factor_b, factor_c, timestamp_ms)
+      input = "WITNESS:#{tenant_id}:#{procedure_id}:#{num_str(factor_a)}:#{num_str(factor_b)}:#{num_str(factor_c)}:#{timestamp_ms}"
+      sha256_hex(input, 12)
+    end
+
+    # Compute a truncated SHA-256 hash. Default length is 16 hex characters.
+    def self.sha256_truncated(data, length = 16)
+      sha256_hex(data, length)
+    end
+
+    # Compute SHA-256 and return the first N hex characters.
+    def self.sha256_hex(data, length = 64)
+      digest = OpenSSL::Digest::SHA256.hexdigest(data.to_s)
+      digest[0, [length, 64].min]
+    end
+
+    # Get the current timestamp in milliseconds and epoch seconds.
+    def self.timestamp_ms
+      ms = (Time.now.to_f * 1000).to_i
+      epoch = ms / 1000
+      [ms, epoch]
+    end
+
+    # Format a numeric factor as a string matching the canonical formula.
+    # Integer-valued floats are formatted without decimals: 1.0 -> "1"
+    def self.num_str(v)
+      v == v.to_i ? v.to_i.to_s : v.to_s
+    end
+
+    private_class_method :num_str
+  end
+end

data/lib/swt3_ai/signing.rb

@@ -0,0 +1,15 @@
+require "openssl"
+
+module Swt3Ai
+  module Signing
+    # Sign a payload with HMAC-SHA256 for non-repudiation.
+    #
+    # If agent_id is provided, the message is "{fingerprint}:{agent_id}".
+    # Otherwise, the message is just the fingerprint.
+    # Returns a 64-character lowercase hex string.
+    def self.sign_payload(signing_key, anchor_fingerprint, agent_id = nil)
+      message = agent_id ? "#{anchor_fingerprint}:#{agent_id}" : anchor_fingerprint
+      OpenSSL::HMAC.hexdigest("SHA256", signing_key, message)
+    end
+  end
+end

data/lib/swt3_ai/types.rb

@@ -0,0 +1,29 @@
+module Swt3Ai
+  # A witness payload ready for transmission to the witness endpoint.
+  WitnessPayload = Struct.new(
+    :procedure_id, :factor_a, :factor_b, :factor_c,
+    :clearing_level, :anchor_fingerprint, :anchor_epoch,
+    :fingerprint_timestamp_ms, :ai_model_id, :ai_prompt_hash,
+    :ai_response_hash, :ai_latency_ms, :ai_input_tokens,
+    :ai_output_tokens, :agent_id, :cycle_id,
+    :payload_signature, :signing_key_id, :signing_key_version,
+    :policy_version_hash,
+    keyword_init: true
+  )
+
+  # A receipt returned by the witness endpoint after successful anchoring.
+  WitnessReceipt = Struct.new(
+    :procedure_id, :verdict, :swt3_anchor, :clearing_level,
+    :witnessed_at, :verification_url, :ok, :error,
+    keyword_init: true
+  )
+
+  # Configuration for a Witness client.
+  WitnessConfig = Struct.new(
+    :endpoint, :api_key, :tenant_id, :clearing_level,
+    :buffer_size, :flush_interval, :timeout, :max_retries,
+    :agent_id, :signing_key, :signing_key_id, :signing_key_version,
+    :cycle_id, :policy_version,
+    keyword_init: true
+  )
+end

data/lib/swt3_ai.rb

@@ -1,7 +1,11 @@
-# SWT3 Witness Anchors for AI systems.
-# Cryptographic accountability protocol for AI inference, training, and deployment.
+# SWT3 AI Witness SDK for Ruby.
+# Cryptographic attestation for AI inference.
 # See https://tenova.io for documentation.
 
+require_relative "swt3_ai/fingerprint"
+require_relative "swt3_ai/signing"
+require_relative "swt3_ai/types"
+
 module Swt3Ai
-  VERSION = "0.1.1"
+  VERSION = "0.3.6"
 end

metadata

@@ -1,17 +1,17 @@
 --- !ruby/object:Gem::Specification
 name: swt3-ai
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.5.0
 platform: ruby
 authors:
 - TeNova Labs
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-22 00:00:00.000000000 Z
+date: 2026-05-05 00:00:00.000000000 Z
 dependencies: []
-description: Cryptographic accountability protocol for AI inference, training, and
-  deployment.
+description: Mint, verify, and sign SWT3 witness anchors for AI compliance. Cross-language
+  parity with Python and TypeScript SDKs. Zero external dependencies.
 email:
 - engineering@tenovaai.com
 executables: []
@@ -20,12 +20,16 @@ extra_rdoc_files: []
 files:
 - README.md
 - lib/swt3_ai.rb
+- lib/swt3_ai/fingerprint.rb
+- lib/swt3_ai/signing.rb
+- lib/swt3_ai/types.rb
 homepage: https://tenova.io
 licenses:
 - Apache-2.0
 metadata:
   source_code_uri: https://github.com/tenova-labs/swt3-ai
   homepage_uri: https://tenova.io
+  keywords: ai,compliance,witness,swt3,eu-ai-act,nist-ai-rmf,ai-governance,ai-audit,ai-safety,agentic-ai,guardrails,model-governance,cryptographic-attestation
 post_install_message:
 rdoc_options: []
 require_paths:
@@ -44,5 +48,5 @@ requirements: []
 rubygems_version: 3.4.20
 signing_key:
 specification_version: 4
-summary: SWT3 Witness Anchors for AI systems
+summary: 'SWT3 AI Witness SDK: cryptographic attestation for AI inference'
 test_files: []