reputrans 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sibrox Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,114 @@
+# reputrans-core
+
+Zero-knowledge credential verification for portable reputation. Issue signed credentials, generate ZK proofs about them, verify proofs without seeing the underlying data. Built on Noir circuits with Barretenberg UltraHonk proofs. 91/91 tests pass. Real cryptography, not simulations.
+
+## Quick Start
+
+```bash
+git clone https://github.com/danielabrahamx/reputrans-core.git
+cd reputrans-core
+npm install
+```
+
+### Try it - zero-argument flow
+
+Every command auto-detects files from previous steps. Just run them in order:
+
+```bash
+# 1. Generate an issuer keypair
+npx tsx cli/src/index.ts keygen
+
+# 2. Issue a credential (uses example data if no --claims given)
+npx tsx cli/src/index.ts issue
+
+# 3. See what's inside
+npx tsx cli/src/index.ts inspect
+
+# 4. Generate a ZK proof - prove field_of_study without revealing name or GPA
+npx tsx cli/src/index.ts prove --disclose field_of_study
+
+# 5. Verify the proof (works without the original credential)
+npx tsx cli/src/index.ts verify
+```
+
+### Custom credentials
+
+Create a `claims.json` file with your own fields:
+
+```json
+{
+  "role": "engineer",
+  "clearance": "3",
+  "department": "R&D"
+}
+```
+
+Then issue, prove, and verify:
+
+```bash
+npx tsx cli/src/index.ts keygen --name "Acme Corp"
+npx tsx cli/src/index.ts issue --key acme-corp-key.json --claims claims.json
+npx tsx cli/src/index.ts prove --disclose department --range clearance:gte:2
+npx tsx cli/src/index.ts verify
+```
+
+The proof reveals only `department = "R&D"` and that `clearance >= 2`. The verifier never sees the actual clearance value or the role.
+
+### Run tests
+
+```bash
+npm test   # 91/91 pass, including real ZK proof generation
+```
+
+## How it works
+
+1. **Issuer** generates a keypair and signs claims into a credential (Poseidon Merkle tree + EdDSA signature)
+2. **Provar** (credential holder) generates a ZK proof revealing only selected fields
+3. **Arbiter** (verifier) checks the proof - mathematically, no trust required
+
+The proof is portable. Verify it on any machine, via REST API, or on-chain. No blockchain needed for the basic flow.
+
+## Architecture
+
+```
+reputrans-core/
+  circuits/     7 Noir circuits (compiled to Barretenberg UltraHonk)
+  sdk/src/      TypeScript SDK (poseidon, eddsa, encoder, identity, prover, verifier)
+  cli/src/      CLI tool (keygen, issue, inspect, prove, verify)
+  verifier/     REST verifier service with DID resolution
+```
+
+## Circuits
+
+| Circuit | Purpose | Used by CLI |
+|---|---|---|
+| `composite` | EdDSA sig verify + Merkle selective disclosure + range proof | Yes - the main circuit |
+| `field_disclosure` | Standalone selective disclosure | No |
+| `range_proof` | Standalone range check | No |
+| `set_membership` | Merkle tree membership proof | No |
+| `signature_verify` | Standalone EdDSA verification | No |
+| `poseidon_compat` | Cross-boundary hash validation | Testing only |
+| `map_to_curve` | BabyJubjub point mapping | Optimization, not required |
+
+## CLI Reference
+
+| Command | Required args | Optional args | Auto-detects |
+|---|---|---|---|
+| `keygen` | none | `--name`, `--out` | - |
+| `issue` | none | `--key`, `--claims`, `--out` | `*-key.json` |
+| `inspect` | none | `--credential` | `credential-*.json` |
+| `prove` | `--disclose` or `--range` | `--credential`, `--out` | `credential-*.json` |
+| `verify` | none | `--proof` | `proof-*.json` |
+
+Range format: `field:operator:threshold` (e.g. `gpa:gte:3`, `age:lte:65`)
+
+## Protocol
+
+- **Provar** - credential holder, generates proofs
+- **Arbiter** - verifier of proofs
+
+Anyone can be an issuer. The Provar does not need their own keys - the credential file contains everything needed for proof generation. Anonymous identity (master secret, nullifiers) is an upgrade path for the Enterprise product.
+
+## License
+
+MIT