actenon-kernel 1.0.0__tar.gz → 1.2.0__tar.gz

{actenon_kernel-1.0.0/actenon_kernel.egg-info → actenon_kernel-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: actenon-kernel
-Version: 1.0.0
+Version: 1.2.0
 Summary: Open proof-required execution kernel for consequential actions.
 Author: Ross Buckley
 License-Expression: Apache-2.0
@@ -20,6 +20,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: actenon-protocol<2,>=1.1.0
 Requires-Dist: pyyaml<7,>=6.0
+Requires-Dist: cryptography>=42
 Provides-Extra: asymmetric
 Requires-Dist: cryptography>=42; extra == "asymmetric"
 Provides-Extra: aws
@@ -42,6 +43,8 @@ Dynamic: license-file
 
 # Actenon Kernel
 
+<!-- mcp-name: io.github.actenon/kernel -->
+
 > The open verifier for proof-bound consequential execution. Defines what a valid proof is. Verifies proofs at the execution edge; issues no grants; runs no policy decisions.
 
 [![License: Apache-2.0](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](LICENSE)
@@ -55,11 +58,41 @@ Dynamic: license-file
 [![SDKs: Py · TS · Go · Rust](https://img.shields.io/badge/SDKs-Py%20%C2%B7%20TS%20%C2%B7%20Go%20%C2%B7%20Rust-orange.svg)](docs/SDK_SELECTION_GUIDE.md)
 [![CI](https://github.com/Actenon/actenon-kernel/actions/workflows/ci.yml/badge.svg)](https://github.com/Actenon/actenon-kernel/actions/workflows/ci.yml)
 [![Invariants](https://github.com/Actenon/actenon-kernel/actions/workflows/invariants.yml/badge.svg)](https://github.com/Actenon/actenon-kernel/actions/workflows/invariants.yml)
+[![claims: machine-verified](https://img.shields.io/github/actions/workflow/status/Actenon/actenon-kernel/verify-claims.yml?branch=main&label=claims%3A%20machine-verified)](https://github.com/Actenon/actenon-kernel/actions/workflows/verify-claims.yml)
+[![MCP server](https://img.shields.io/badge/MCP-connectable%20server-8A2BE2.svg)](docs/integrations/MCP_QUICKSTART.md)
 [![Code style: ruff](https://img.shields.io/badge/Code%20style-ruff-black.svg)](https://docs.astral.sh/ruff/)
 [![No runtime cloud dependency](https://img.shields.io/badge/Runtime-no%20cloud%20calls-2ea44f.svg)](#independence)
 [![Offline verification](https://img.shields.io/badge/Verify-offline%20capable-2ea44f.svg)](tests/test_neutrality.py)
 [![Kernel independence](https://img.shields.io/badge/Deps-kernel%20independent-2ea44f.svg)](tests/test_independence.py)
 
+### Every claim above is machine-verified
+
+The `claims: machine-verified` badge links to a CI gate
+([`verify-claims.yml`](.github/workflows/verify-claims.yml)) that fails on
+every PR, push to `main`, and once a day if any factual claim this README
+makes about the kernel stops being true:
+
+- **Zero network calls during verification** — [`tests/test_neutrality.py`](tests/test_neutrality.py)
+  runs in the gate, not just behind a badge link.
+- **Runs without Permit, Cloud, or Scan** — [`tests/test_independence.py`](tests/test_independence.py),
+  plus a source scan proving the kernel never imports Cloud or Permit, plus
+  [`scripts/assert_dep_direction.py`](scripts/assert_dep_direction.py)
+  (runtime deps are exactly `actenon-protocol`).
+- **The conformance count** — "51 conformance vectors" is compared against
+  what `actenon-kernel conformance run` actually executes; the vector files
+  themselves are hash-locked by
+  [`scripts/verify_conformance_manifest.py`](scripts/verify_conformance_manifest.py).
+- **Install commands** — every `pip install` in this README is resolved
+  against the live registry; the Python badge is generated, not hand-edited.
+- **The ecosystem table** — rendered from the protocol's `ecosystem.yaml`,
+  never hand-edited.
+
+The [Invariants](.github/workflows/invariants.yml) workflow additionally
+proves on every PR that a clean, no-extras install verifies the full
+conformance surface — 33/33 tests, zero skips — including Ed25519.
+
+If a claim drifts, the badge goes red before a human notices.
+
 ---
 
 ## The Actenon ecosystem
@@ -189,10 +222,44 @@ For deployments that need portable cryptographic attestation of origin, the Kern
 Python 3.10+ for the Kernel alone. The full stack including Permit requires 3.11+.
 
 ```bash
-pip install actenon-kernel            # core verifier (pure Python, no asymmetric extra)
-pip install "actenon-kernel[asymmetric]"   # Ed25519 + Outcome Attestation verification
+pip install actenon-kernel            # full verifier: HMAC and Ed25519
+```
+
+Since 1.1.0 the base install verifies everything the ecosystem produces,
+including Ed25519 proofs and Outcome Attestations. (The `[asymmetric]` extra
+still resolves for backward compatibility; it installs nothing additional.)
+
+## Connect it to an agent (MCP, 60 seconds, zero install)
+
+The Kernel ships a runnable MCP server, so a model can ask it whether an
+action is allowed *before* the action runs — and read back exactly why it was
+refused. Paste this into any MCP client (Claude Desktop, ChatGPT, or anything
+else that speaks MCP):
+
+```json
+{
+  "mcpServers": {
+    "actenon": {
+      "command": "uvx",
+      "args": ["--from", "actenon-kernel[mcp]", "actenon-mcp", "--demo"]
+    }
+  }
+}
 ```
 
+`uvx` fetches and runs it — nothing to install first. `--demo` runs offline
+with an ephemeral key and in-memory state; it is clearly marked **DEMO MODE**
+in every tool description and must not be used in production.
+
+Three tools: `actenon_verify` (is this proof good for this exact action?),
+`actenon_gate` (ALLOW or a typed refusal), `actenon_receipt` (the
+hash-chained receipt for a prior decision). Every refusal carries both the
+machine code and the human-readable reason.
+
+Full walkthrough, including a real transcript of an agent being refused for
+widening a refund and then succeeding within scope:
+[`docs/integrations/MCP_QUICKSTART.md`](docs/integrations/MCP_QUICKSTART.md).
+
 ## Use as a verifier (resource boundary)
 
 ```python
@@ -235,7 +302,7 @@ result = verifier.verify_boundary(BoundaryVerificationRequest(
 ## Use as a minter + executor (brokered mode, full local proof)
 
 ```bash
-python3 -m pip install -e ".[asymmetric]"
+python3 -m pip install -e .
 python3 -m actenon.cli up
 python3 -m actenon.cli doctor
 python3 -m actenon.cli simulate --incident replit

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/README.md

@@ -1,5 +1,7 @@
 # Actenon Kernel
 
+<!-- mcp-name: io.github.actenon/kernel -->
+
 > The open verifier for proof-bound consequential execution. Defines what a valid proof is. Verifies proofs at the execution edge; issues no grants; runs no policy decisions.
 
 [![License: Apache-2.0](https://img.shields.io/badge/License-Apache--2.0-blue.svg)](LICENSE)
@@ -13,11 +15,41 @@
 [![SDKs: Py · TS · Go · Rust](https://img.shields.io/badge/SDKs-Py%20%C2%B7%20TS%20%C2%B7%20Go%20%C2%B7%20Rust-orange.svg)](docs/SDK_SELECTION_GUIDE.md)
 [![CI](https://github.com/Actenon/actenon-kernel/actions/workflows/ci.yml/badge.svg)](https://github.com/Actenon/actenon-kernel/actions/workflows/ci.yml)
 [![Invariants](https://github.com/Actenon/actenon-kernel/actions/workflows/invariants.yml/badge.svg)](https://github.com/Actenon/actenon-kernel/actions/workflows/invariants.yml)
+[![claims: machine-verified](https://img.shields.io/github/actions/workflow/status/Actenon/actenon-kernel/verify-claims.yml?branch=main&label=claims%3A%20machine-verified)](https://github.com/Actenon/actenon-kernel/actions/workflows/verify-claims.yml)
+[![MCP server](https://img.shields.io/badge/MCP-connectable%20server-8A2BE2.svg)](docs/integrations/MCP_QUICKSTART.md)
 [![Code style: ruff](https://img.shields.io/badge/Code%20style-ruff-black.svg)](https://docs.astral.sh/ruff/)
 [![No runtime cloud dependency](https://img.shields.io/badge/Runtime-no%20cloud%20calls-2ea44f.svg)](#independence)
 [![Offline verification](https://img.shields.io/badge/Verify-offline%20capable-2ea44f.svg)](tests/test_neutrality.py)
 [![Kernel independence](https://img.shields.io/badge/Deps-kernel%20independent-2ea44f.svg)](tests/test_independence.py)
 
+### Every claim above is machine-verified
+
+The `claims: machine-verified` badge links to a CI gate
+([`verify-claims.yml`](.github/workflows/verify-claims.yml)) that fails on
+every PR, push to `main`, and once a day if any factual claim this README
+makes about the kernel stops being true:
+
+- **Zero network calls during verification** — [`tests/test_neutrality.py`](tests/test_neutrality.py)
+  runs in the gate, not just behind a badge link.
+- **Runs without Permit, Cloud, or Scan** — [`tests/test_independence.py`](tests/test_independence.py),
+  plus a source scan proving the kernel never imports Cloud or Permit, plus
+  [`scripts/assert_dep_direction.py`](scripts/assert_dep_direction.py)
+  (runtime deps are exactly `actenon-protocol`).
+- **The conformance count** — "51 conformance vectors" is compared against
+  what `actenon-kernel conformance run` actually executes; the vector files
+  themselves are hash-locked by
+  [`scripts/verify_conformance_manifest.py`](scripts/verify_conformance_manifest.py).
+- **Install commands** — every `pip install` in this README is resolved
+  against the live registry; the Python badge is generated, not hand-edited.
+- **The ecosystem table** — rendered from the protocol's `ecosystem.yaml`,
+  never hand-edited.
+
+The [Invariants](.github/workflows/invariants.yml) workflow additionally
+proves on every PR that a clean, no-extras install verifies the full
+conformance surface — 33/33 tests, zero skips — including Ed25519.
+
+If a claim drifts, the badge goes red before a human notices.
+
 ---
 
 ## The Actenon ecosystem
@@ -147,10 +179,44 @@ For deployments that need portable cryptographic attestation of origin, the Kern
 Python 3.10+ for the Kernel alone. The full stack including Permit requires 3.11+.
 
 ```bash
-pip install actenon-kernel            # core verifier (pure Python, no asymmetric extra)
-pip install "actenon-kernel[asymmetric]"   # Ed25519 + Outcome Attestation verification
+pip install actenon-kernel            # full verifier: HMAC and Ed25519
+```
+
+Since 1.1.0 the base install verifies everything the ecosystem produces,
+including Ed25519 proofs and Outcome Attestations. (The `[asymmetric]` extra
+still resolves for backward compatibility; it installs nothing additional.)
+
+## Connect it to an agent (MCP, 60 seconds, zero install)
+
+The Kernel ships a runnable MCP server, so a model can ask it whether an
+action is allowed *before* the action runs — and read back exactly why it was
+refused. Paste this into any MCP client (Claude Desktop, ChatGPT, or anything
+else that speaks MCP):
+
+```json
+{
+  "mcpServers": {
+    "actenon": {
+      "command": "uvx",
+      "args": ["--from", "actenon-kernel[mcp]", "actenon-mcp", "--demo"]
+    }
+  }
+}
 ```
 
+`uvx` fetches and runs it — nothing to install first. `--demo` runs offline
+with an ephemeral key and in-memory state; it is clearly marked **DEMO MODE**
+in every tool description and must not be used in production.
+
+Three tools: `actenon_verify` (is this proof good for this exact action?),
+`actenon_gate` (ALLOW or a typed refusal), `actenon_receipt` (the
+hash-chained receipt for a prior decision). Every refusal carries both the
+machine code and the human-readable reason.
+
+Full walkthrough, including a real transcript of an agent being refused for
+widening a refund and then succeeding within scope:
+[`docs/integrations/MCP_QUICKSTART.md`](docs/integrations/MCP_QUICKSTART.md).
+
 ## Use as a verifier (resource boundary)
 
 ```python
@@ -193,7 +259,7 @@ result = verifier.verify_boundary(BoundaryVerificationRequest(
 ## Use as a minter + executor (brokered mode, full local proof)
 
 ```bash
-python3 -m pip install -e ".[asymmetric]"
+python3 -m pip install -e .
 python3 -m actenon.cli up
 python3 -m actenon.cli doctor
 python3 -m actenon.cli simulate --incident replit

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/actenon/cli.py

@@ -313,9 +313,11 @@ def _print_simulation_report(*, args: argparse.Namespace, report) -> None:
         print(f"  Artifacts: {result['artifact_dir']}")
         if result.get("summary_path") is not None:
             print(f"  Incident summary: {result['summary_path']}")
-        if result["refusal_code"] is not None:
+        # Incident results carry a different shape than scenario results
+        # and may omit these keys entirely.
+        if result.get("refusal_code") is not None:
             print(f"  Refusal code: {result['refusal_code']}")
-        if result["receipt_id"] is not None:
+        if result.get("receipt_id") is not None:
             print(f"  Receipt: {result['receipt_id']}")
         if result.get("perspectives"):
             print("  Perspectives:")

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/actenon/conformance/test_countersignature_conformance.py

@@ -27,7 +27,7 @@ def _load(relative_path: str) -> dict[str, object]:
 
 @unittest.skipUnless(
     find_spec("cryptography") is not None,
-    "receipt counter-signature conformance requires the 'asymmetric' extra",
+    "receipt counter-signature conformance requires the 'cryptography' package (a base dependency since 1.1.0)",
 )
 class CounterSignatureConformanceTests(unittest.TestCase):
     def test_valid_historical_kid_verifies_offline(self) -> None:

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/actenon/conformance/test_transparency_log_conformance.py

@@ -32,7 +32,7 @@ def _load(relative_path: str) -> dict[str, object]:
 
 @unittest.skipUnless(
     find_spec("cryptography") is not None,
-    "transparency-log conformance requires the 'asymmetric' extra",
+    "transparency-log conformance requires the 'cryptography' package (a base dependency since 1.1.0)",
 )
 class TransparencyLogConformanceTests(unittest.TestCase):
     def test_checkpoint_rotation_inclusion_and_consistency_verify_offline(self) -> None:

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/actenon/conformance/test_trust_artifacts_conformance.py

@@ -30,7 +30,7 @@ def _load(relative_path: str) -> dict[str, object]:
 
 @unittest.skipUnless(
     find_spec("cryptography") is not None,
-    "trust-artifact conformance requires the 'asymmetric' extra",
+    "trust-artifact conformance requires the 'cryptography' package (a base dependency since 1.1.0)",
 )
 class TrustArtifactConformanceTests(unittest.TestCase):
     def test_good_status_and_exact_action_approval_verify(self) -> None:

{actenon_kernel-1.0.0 → actenon_kernel-1.2.0}/actenon/local_runtime.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import base64
+import gc
 import hashlib
 import json
 import shutil
@@ -2740,6 +2741,32 @@ def _simulate_replay_refused(scenario_dir: Path) -> SimulationScenarioResult:
     )
 
 
+def _stabilize_sqlite_state(paths: LocalRuntimePaths) -> None:
+    """Settle SQLite files under the runtime root before they are hashed.
+
+    Replay stores may hold connections whose WAL content is checkpointed
+    into the main database file only when the connection is finalized —
+    which CPython may do at any point, including between the manifest
+    hash pass and the archive write. That produces a bundle whose
+    ``*.sqlite3`` bytes no longer match the manifest ("File hash
+    mismatch: .../replay.sqlite3"). Collect garbage so lingering
+    connections close now, then force a TRUNCATE checkpoint so every
+    database file is complete and byte-stable before hashing.
+    """
+    gc.collect()
+    for db_path in sorted(paths.root.rglob("*.sqlite3")):
+        try:
+            connection = sqlite3.connect(db_path)
+            try:
+                connection.execute("PRAGMA wal_checkpoint(TRUNCATE);")
+            finally:
+                connection.close()
+        except sqlite3.Error:
+            # A corrupt or locked database is the verifier's finding to
+            # report, not the exporter's to mask — hash whatever is there.
+            continue
+
+
 def export_local_runtime_bundle(
     runtime_dir: str | Path | None = None,
     *,
@@ -2760,6 +2787,7 @@ def export_local_runtime_bundle(
             raise ValueError(f"bundle output already exists at {target}; pass --force to replace it")
         _ensure_removed(target)
 
+    _stabilize_sqlite_state(paths)
     bundle_manifest = _build_bundle_manifest(paths)
 
     target.parent.mkdir(parents=True, exist_ok=True)