verifyanything 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 3d831004a41675d6049ffefc897ec4f0608a5ac1cbc6de4bd4fca62c10cc2bef
+  data.tar.gz: 4411f858751f9c0f8cee37323296e418a145210df385245f2cda411e21f64e27
+SHA512:
+  metadata.gz: 38289a72f03a7558c750b933c8c7e37a109d95e6584f44f1a4a330a5e89d4fe265bde432da04bc2cdc311add3610a8d738267fba0f63f5a665f1fd41c9548e47
+  data.tar.gz: 22dad0c95b3bcbd82723a104fef87ff83433b83911f1ca975eaaef5884ae97074bad3c6bd8a2dd3c0002345da21cce1ad6dbb21ddd98b99ca93b3842d2a513c5

data/LICENSE

@@ -0,0 +1,45 @@
+MIT License
+
+Copyright (c) 2026 Openverify contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+Bundled JSON Schema metaschemas (jsonschema-specifications):
+
+Copyright (c) 2022 Julian Berman
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,69 @@
+# verifyanything
+
+VerifyAnything DRAFT wire SDK for ruby. Independently versioned package **0.1.0**,
+intended registry: RubyGems. Names/ownership must be confirmed before publication.
+
+VCP means portable verification semantics; Provider Contract means the portable
+verifier interface; Relay is the separate Python reference execution engine.
+
+This SDK bundles every normative VCP/Provider schema at source revision
+`5f17f402a270882f244a54dde25eda92a085eb39`. VCP marker: `draft`;
+Provider Contract: exact `0.1`. Both remain DRAFT with no stable 1.0 promise.
+Validation does not fetch schemas, artifact content or URLs.
+
+```ruby
+require 'verifyanything'
+object = VerifyAnything.parse('vcp', 'decision', '{"protocol":"draft","kind":"CONTINUE"}')
+puts VerifyAnything.serialize(object)
+```
+
+## Actual support
+
+The public wire object is a native JSON object view, retaining absent fields,
+explicit null payloads and unknown optional extensions. It is not a complete
+generated field-by-field static model of every protocol object. Structure-only
+validation covers all shipped schema roots. Parse/semantic validation supports
+Result, Decision, Resource, Evidence, ArtifactRef, Extension and ResourceDimension.
+It checks Result state axes, Decision destinations, meaningful Evidence,
+resource kinds/ranges, required extensions and nested evidence/usage/extensions.
+
+Provider standalone validation covers manifest structure, capability identity
+uniqueness and advertised VCP membership, self-contained capability schemas,
+Outcome state/output/error conditionals, and invocation version/resource-budget
+checks. `validateData` (snake_case in Python/Ruby/Rust) validates capability
+input, config or output with an explicit error classification; formats are
+annotations. There is no implicit capability matching or session initialization.
+
+Semantic validation of graphs, definitions, profiles, execution-policy objects,
+dataflow and provenance is **not implemented** in these new wire libraries.
+It fails with the local diagnostic `SDK_UNSUPPORTED`; callers may explicitly
+request structure-only validation. Provider session/lifecycle, transport,
+deadline enforcement and contextual invocation matching are also unimplemented.
+Parsing objects carrying deadline/timestamp fields fails with SDK_UNSUPPORTED;
+call structure-only validation if that explicit limitation is acceptable.
+Standalone parsing does not establish those properties. Detailed support/gaps and
+release gates are in the repository's `sdk/README.md` and `sdk/RELEASE.md`.
+
+Errors expose stable codes where the source contract specifies them. Decision
+rejection uses a local structural classification because the source prose does
+not specify a Decision-specific diagnostic. No portable canonicalization or
+hashing is claimed. Serialize preserves data and inserts no schema defaults.
+Mutable native containers must be validated again after mutation.
+
+## Build and test
+
+From this directory: `bundle install && bundle exec ruby test/shared_test.rb`.
+From the source repository root: `python tools/sdk_verify.py ruby` runs the
+native runner over the same versioned `conformance/sdk/manifest.json`, builds
+twice, compares package file contents and installs into a separate consumer.
+Dependency installation can use the network; actual schema validation is offline.
+The shared corpus is a bounded compatibility test, **not full protocol certification**.
+
+## Release
+
+Tag only this language: `sdk/ruby/vX.Y.Z` after updating only its package.
+The protected release environment is `sdk-ruby`. First publication requires
+owner setup and explicit approval; no package has been published by this change.
+License: MIT (included in the distribution).
+
+Package setup: [VerifyAnything publication guide](https://github.com/openverifyproject/openverify/blob/main/docs/releases/VERIFYANYTHING_SETUP.md).