admina-framework 0.9.4__tar.gz → 0.9.5__tar.gz

{admina_framework-0.9.4/admina_framework.egg-info → admina_framework-0.9.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: admina-framework
-Version: 0.9.4
+Version: 0.9.5
 Summary: Admina — governed AI development framework
 Author-email: Stefano Noferi <info@admina.org>
 Maintainer-email: Stefano Noferi <info@admina.org>
@@ -40,7 +40,6 @@ Requires-Dist: pydantic-settings<3,>=2.3; extra == "proxy"
 Requires-Dist: python-dotenv<2,>=1.0; extra == "proxy"
 Requires-Dist: redis<6,>=5.0; extra == "proxy"
 Requires-Dist: boto3<2,>=1.34; extra == "proxy"
-Requires-Dist: minio<8,>=7.2; extra == "proxy"
 Requires-Dist: clickhouse-connect<1,>=0.7; extra == "proxy"
 Requires-Dist: typer<1,>=0.9; extra == "proxy"
 Requires-Dist: numpy<2,>=1.24; extra == "proxy"
@@ -60,7 +59,7 @@ Dynamic: license-file
 
 <!--
 <p align="center">
-  <img src="resources/banner.png" alt="Admina — Governed AI by Default" width="100%">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/banner.png" alt="Admina — Governed AI by Default" width="100%">
 </p>
 -->
 
@@ -71,9 +70,9 @@ Dynamic: license-file
 
 <p align="center">
   <a href="https://pypi.org/project/admina-framework/"><img src="https://img.shields.io/pypi/v/admina-framework?style=flat-square&color=32CD32" alt="PyPI version"></a>
-  &nbsp;<a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-32CD32?style=flat-square" alt="License"></a>
+  &nbsp;<a href="https://github.com/admina-org/admina/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-32CD32?style=flat-square" alt="License"></a>
   &nbsp;<img src="https://img.shields.io/badge/python-3.11%2B-32CD32?style=flat-square&logo=python&logoColor=white" alt="Python 3.11+">
-  &nbsp;<img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS-6C757D?style=flat-square" alt="Platform">
+  &nbsp;<img src="https://img.shields.io/github/last-commit/admina-org/admina?style=flat-square" alt="Last commit">
 </p>
 
 <p align="center">
@@ -85,7 +84,6 @@ Dynamic: license-file
 
 <p align="center">
   <a href="https://deepwiki.com/admina-org/admina"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/discussions"><img src="https://img.shields.io/github/discussions/admina-org/admina?style=flat-square&logo=github" alt="Discussions"></a>
   &nbsp;<a href="https://admina.org/docs"><img src="https://img.shields.io/badge/docs-admina.org-blue?style=flat-square" alt="Docs"></a>
 </p>
 
@@ -96,13 +94,6 @@ Dynamic: license-file
   &nbsp;<a href="https://deepwiki.com/admina-org/admina"><img src="https://img.shields.io/badge/🤖%20Ask%20DeepWiki-AI%20wiki-7C3AED?style=for-the-badge" alt="DeepWiki" height="40"></a>
 </p>
 
-<p align="center">
-  <a href="https://github.com/admina-org/admina/stargazers"><img src="https://img.shields.io/github/stars/admina-org/admina?style=social" alt="Stars"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/network/members"><img src="https://img.shields.io/github/forks/admina-org/admina?style=social" alt="Forks"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/graphs/contributors"><img src="https://img.shields.io/github/contributors/admina-org/admina?style=flat-square&label=contributors" alt="Contributors"></a>
-  &nbsp;<img src="https://img.shields.io/github/last-commit/admina-org/admina?style=flat-square" alt="Last commit">
-</p>
-
 ---
 
 ## See it in action
@@ -110,13 +101,13 @@ Dynamic: license-file
 **Scaffold a project and boot the governed proxy + dashboard — no Docker:**
 
 <p align="center">
-  <img src="resources/admina-init-dev.gif" alt="admina init → admina dev → Ready on localhost:3000" width="900">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/admina-init-dev.gif" alt="admina init → admina dev → Ready on localhost:3000" width="900">
 </p>
 
 **Wrap any model in a few lines — PII is stripped before the model ever sees it:**
 
 <p align="center">
-  <img src="resources/sdk-3lines.gif" alt="GovernedModel redacts PERSON, EMAIL and credit card before the LLM call" width="900">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/sdk-3lines.gif" alt="GovernedModel redacts PERSON, EMAIL and credit card before the LLM call" width="900">
 </p>
 
 **The governance dashboard, before and after simulated traffic — Admina Score 40 → 60:**
@@ -124,11 +115,11 @@ Dynamic: license-file
 <table>
   <tr>
     <td align="center" width="50%">
-      <img src="resources/dashboard-firstuser.png" alt="Dashboard at first boot — score 40/100" width="100%"><br>
+      <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/dashboard-firstuser.png" alt="Dashboard at first boot — score 40/100" width="100%"><br>
       <em>First boot — Admina Score <strong>40/100</strong></em>
     </td>
     <td align="center" width="50%">
-      <img src="resources/dashboard-traffic.png" alt="Dashboard after simulated traffic — score 60/100" width="100%"><br>
+      <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/dashboard-traffic.png" alt="Dashboard after simulated traffic — score 60/100" width="100%"><br>
       <em>After <code>python scripts/simulate.py</code> — <strong>60/100</strong></em>
     </td>
   </tr>
@@ -306,7 +297,7 @@ from admina import GovernedModel, GovernedData, GovernedAgent, ComplianceKit
 | Governance Domain | GuardrailsAI (toxic, jailbreak, bias, PII) |
 | Compliance Template | EU AI Act |
 | Transport Adapter | MCP, HTTP REST |
-| Forensic Store | Filesystem, S3-compatible (boto3), MinIO (legacy) |
+| Forensic Store | Filesystem, S3-compatible (boto3 — AWS S3, MinIO, R2, …) |
 | Auth Provider | API Key |
 | PII Engine | spaCy + Regex |
 | Alert Channel | Log, Webhook |
@@ -322,7 +313,7 @@ admina plugin create my-domain        # Scaffold a new plugin
 ```bash
 admina init my-project     # Scaffold project with admina.yaml + docker-compose.yml
 admina dev                 # Local mode: proxy + dashboard on :3000 (no Docker)
-admina dev --stack         # Docker stack: + redis + clickhouse + minio + grafana
+admina dev --stack         # Docker stack: + redis + clickhouse + grafana
 admina dev --with-llm      # --stack + ollama + chromadb + open-webui
 admina plugin list         # List all registered plugins
 admina plugin install X    # Install a plugin from path or registry
@@ -341,7 +332,7 @@ Real-time governance dashboard on port 3000:
 - **Governance Score** — 0-100 composite metric (data residency, audit coverage, attack rate, forensic integrity, EU AI Act compliance)
 - **Live Feed** — streaming governance events via WebSocket
 - **Compliance Gaps** — EU AI Act gap analysis with article-level detail
-- **Infrastructure Health** — proxy, Redis, MinIO, ClickHouse, OTEL status
+- **Infrastructure Health** — proxy, Redis, forensic store, ClickHouse, OTEL status
 
 API backend: `GET /api/dashboard/score`, `/feed`, `/compliance`, `/sovereignty`, `/infra`, `/models`
 
@@ -353,7 +344,7 @@ Admina uses `admina.yaml` as the primary config file (with `.env` fallback for b
 cp admina.yaml.example admina.yaml   # Copy and customize
 ```
 
-See [`admina.yaml.example`](admina.yaml.example) for all options including domains, AI infra, plugins, dashboard, forensic storage, alert channels, and integrations.
+See [`admina.yaml.example`](https://github.com/admina-org/admina/blob/main/admina.yaml.example) for all options including domains, AI infra, plugins, dashboard, forensic storage, alert channels, and integrations.
 
 <a id="compliance-scope"></a>
 
@@ -376,7 +367,7 @@ See [`admina.yaml.example`](admina.yaml.example) for all options including domai
 > 2027** (postponed from 2 Aug 2026); Annex I high-risk from 2 August
 > 2028 (postponed from 2 Aug 2027). The full machine-readable timeline
 > ships with Admina as `admina.domains.compliance.eu_ai_act.EU_AI_ACT_DEADLINES`.
-> See [`MODEL_CARD.md`](MODEL_CARD.md) for the full scope, limitations,
+> See [`MODEL_CARD.md`](https://github.com/admina-org/admina/blob/main/MODEL_CARD.md) for the full scope, limitations,
 > and known failure modes of every Admina component.
 
 </details>
@@ -478,7 +469,7 @@ crew = Crew(agents=[agent], tasks=[task], task_callback=admina_task_callback)
 
 </details>
 
-See [full integration docs](docs/guides/integrations.md) for details.
+See [full integration docs](https://github.com/admina-org/admina/blob/main/docs/guides/integrations.md) for details.
 
 ## Performance — Hybrid Python + Rust engine
 
@@ -487,7 +478,7 @@ The Rust core engine is an optional accelerator. The default
 enable the Rust engine with the opt-in extra `pip install
 "admina-framework[rust]"` (or build from source for local development —
 `maturin develop --release --manifest-path core-rust/Cargo.toml`, see
-[CONTRIBUTING.md](CONTRIBUTING.md)). At runtime Admina auto-detects
+[CONTRIBUTING.md](https://github.com/admina-org/admina/blob/main/CONTRIBUTING.md)). At runtime Admina auto-detects
 whichever is available and falls back transparently to Python if the Rust
 extension is not installed.
 
@@ -558,7 +549,6 @@ The full stack (`docker compose up`) runs 9 containers:
 | `8080` | Proxy | MCP proxy + REST API + OpenAPI docs |
 | `3000` | Dashboard | Real-time governance web UI |
 | `3001` | Grafana | Metrics dashboards |
-| `9090` | MinIO Console | Forensic storage browser |
 | `4317` | OTEL Collector | OTLP gRPC ingestion |
 
 ClickHouse and Redis are internal only (not exposed to host).
@@ -569,45 +559,20 @@ ClickHouse and Redis are internal only (not exposed to host).
 <br>
 
 The forensic blackbox (the SHA-256 hash chain that makes the audit trail
-tamper-evident) supports four backends. Read this before picking one for
+tamper-evident) supports three backends. Read this before picking one for
 production.
 
 | Backend | License | When to use | Caveats |
 |---------|---------|-------------|---------|
 | **`memory`** *(default)* | n/a | Local development, tests, demos | Records are LOST on restart — no audit persistence. Loud warning at startup. |
 | **`filesystem`** | n/a | Single-host on-prem, air-gapped, smaller deployments | Persistence depends on the host filesystem; not ideal for HA. Requires `FORENSIC_BASE_DIR`. |
-| **`s3`** *(boto3)* | Apache 2.0 (boto3) | Production / HA / multi-region | Works with **any S3-compatible service** — AWS S3, Cloudflare R2, Backblaze B2, **SeaweedFS** (Apache 2.0), **Garage** (AGPLv3), **Ceph RGW** (LGPLv2). Recommended new default. |
-| **`minio`** *(legacy)* | see below ⚠️ | Backwards compatibility with existing MinIO clusters | Two distinct concerns; read the disclaimer. |
+| **`s3`** *(boto3)* | Apache 2.0 (boto3) | Production / HA / multi-region | Works with **any S3-compatible service** — AWS S3, **MinIO** servers, Cloudflare R2, Backblaze B2, **SeaweedFS** (Apache 2.0), **Garage** (AGPLv3), **Ceph RGW** (LGPLv2). Supports WORM Object Lock. |
 
-> ⚠️ **MinIO disclaimer — what users of Admina need to know.**
->
-> MinIO has two separate licensing/maintenance issues that can affect
-> downstream users of Admina, even though Admina itself is Apache 2.0:
->
-> 1. **MinIO Server is AGPLv3.** If you deploy MinIO Server as part of a
->    network-accessible service (e.g. a SaaS that exposes Admina's
->    dashboard or API to the public Internet), AGPLv3's network clause
->    can be read to require you to publish the source code of the
->    *combined* application that interacts with MinIO over the network.
->    The MinIO commercial license removes this obligation, but is paid.
->    This is **not** an Admina obligation — Apache 2.0 is permissive —
->    but it is an obligation MinIO Server itself imposes on whoever
->    runs it.
-> 2. **The MinIO Python SDK has been archived.** No more security
->    patches, no support for new Python releases. Continuing to depend
->    on it is a supply-chain risk.
->
-> **Recommendation:** for new deployments, use `FORENSIC_BACKEND=s3`.
-> The `boto3` client is Apache 2.0 and works against any S3-compatible
-> service. Two open-source FOSS-friendly options that don't trigger the
-> AGPL network clause for typical Admina deployments:
-> - **SeaweedFS** (Apache 2.0, S3 gateway, lightweight, single binary)
-> - **Garage** (AGPLv3, but as a backend — Garage's AGPL applies to
->   Garage itself, not to applications that connect to it via S3 API)
->
-> Existing MinIO deployments keep working through `FORENSIC_BACKEND=minio`,
-> but plan a migration. The `minio` backend will be removed in a future
-> release.
+> **Using MinIO?** Point the `s3` backend at your MinIO server via
+> `FORENSIC_S3_ENDPOINT` — MinIO speaks the S3 API, so no MinIO-specific
+> client is needed. The legacy `minio`-SDK backend was removed in 0.9.5
+> (the MinIO Python SDK is archived); `FORENSIC_BACKEND=minio` now
+> transparently routes to the `s3` backend with a migration warning.
 
 </details>
 
@@ -621,7 +586,7 @@ production.
 | `ADMINA_API_KEY` | *(empty)* | API key for all endpoints |
 | `UPSTREAM_MCP_URL` | `http://localhost:9000` | Default upstream MCP server |
 | `REDIS_URL` | `redis://localhost:6379/0` | Session state + rate limiting |
-| `MINIO_SECRET_KEY` | *(required)* | MinIO secret key for forensic storage |
+| `FORENSIC_BACKEND` | `memory` | Forensic store: `memory` \| `filesystem` \| `s3` |
 | `LOG_LEVEL` | `INFO` | Logging verbosity |
 
 </details>
@@ -646,7 +611,7 @@ admina/
 |   +-- domains/            GuardrailsAI
 |   +-- compliance/         EU AI Act template
 |   +-- transports/         MCP, HTTP REST
-|   +-- forensic/           MinIO, Filesystem
+|   +-- forensic/           Filesystem
 |   +-- auth/               API Key
 |   +-- pii/                spaCy + Regex
 |   +-- alerts/             Log, Webhook
@@ -705,12 +670,12 @@ curl http://localhost:8080/api/dashboard/score
 
 ## Project documents
 
-- [CONTRIBUTING.md](CONTRIBUTING.md) — development setup, testing, and pull request workflow
-- [MODEL_CARD.md](MODEL_CARD.md) — transparency artifact for every Admina governance component (intended use, scope, limitations, known failure modes), aligned with EU AI Act Art. 13 and NIST AI RMF
-- [ROADMAP.md](ROADMAP.md) — planned milestones from 0.9.x to 1.0 and beyond
-- [CHANGELOG.md](CHANGELOG.md) — release notes
-- [SECURITY.md](SECURITY.md) — coordinated disclosure policy
-- [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) — Contributor Covenant 2.1
+- [CONTRIBUTING.md](https://github.com/admina-org/admina/blob/main/CONTRIBUTING.md) — development setup, testing, and pull request workflow
+- [MODEL_CARD.md](https://github.com/admina-org/admina/blob/main/MODEL_CARD.md) — transparency artifact for every Admina governance component (intended use, scope, limitations, known failure modes), aligned with EU AI Act Art. 13 and NIST AI RMF
+- [ROADMAP.md](https://github.com/admina-org/admina/blob/main/ROADMAP.md) — planned milestones from 0.9.x to 1.0 and beyond
+- [CHANGELOG.md](https://github.com/admina-org/admina/blob/main/CHANGELOG.md) — release notes
+- [SECURITY.md](https://github.com/admina-org/admina/blob/main/SECURITY.md) — coordinated disclosure policy
+- [CODE_OF_CONDUCT.md](https://github.com/admina-org/admina/blob/main/CODE_OF_CONDUCT.md) — Contributor Covenant 2.1
 - **Browse the AI-generated wiki** → [deepwiki.com/admina-org/admina](https://deepwiki.com/admina-org/admina)
 
 Admina is Apache 2.0. Contributions are welcome.
@@ -719,7 +684,7 @@ Admina is Apache 2.0. Contributions are welcome.
 
 Copyright © 2025–2026 [Stefano Noferi](https://github.com/stefanoferi) & Admina contributors
 
-Licensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for the full text.
+Licensed under the Apache License, Version 2.0. See [LICENSE](https://github.com/admina-org/admina/blob/main/LICENSE) for the full text.
 
 ---
 

{admina_framework-0.9.4 → admina_framework-0.9.5}/README.md

@@ -1,6 +1,6 @@
 <!--
 <p align="center">
-  <img src="resources/banner.png" alt="Admina — Governed AI by Default" width="100%">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/banner.png" alt="Admina — Governed AI by Default" width="100%">
 </p>
 -->
 
@@ -11,9 +11,9 @@
 
 <p align="center">
   <a href="https://pypi.org/project/admina-framework/"><img src="https://img.shields.io/pypi/v/admina-framework?style=flat-square&color=32CD32" alt="PyPI version"></a>
-  &nbsp;<a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-32CD32?style=flat-square" alt="License"></a>
+  &nbsp;<a href="https://github.com/admina-org/admina/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-32CD32?style=flat-square" alt="License"></a>
   &nbsp;<img src="https://img.shields.io/badge/python-3.11%2B-32CD32?style=flat-square&logo=python&logoColor=white" alt="Python 3.11+">
-  &nbsp;<img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS-6C757D?style=flat-square" alt="Platform">
+  &nbsp;<img src="https://img.shields.io/github/last-commit/admina-org/admina?style=flat-square" alt="Last commit">
 </p>
 
 <p align="center">
@@ -25,7 +25,6 @@
 
 <p align="center">
   <a href="https://deepwiki.com/admina-org/admina"><img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/discussions"><img src="https://img.shields.io/github/discussions/admina-org/admina?style=flat-square&logo=github" alt="Discussions"></a>
   &nbsp;<a href="https://admina.org/docs"><img src="https://img.shields.io/badge/docs-admina.org-blue?style=flat-square" alt="Docs"></a>
 </p>
 
@@ -36,13 +35,6 @@
   &nbsp;<a href="https://deepwiki.com/admina-org/admina"><img src="https://img.shields.io/badge/🤖%20Ask%20DeepWiki-AI%20wiki-7C3AED?style=for-the-badge" alt="DeepWiki" height="40"></a>
 </p>
 
-<p align="center">
-  <a href="https://github.com/admina-org/admina/stargazers"><img src="https://img.shields.io/github/stars/admina-org/admina?style=social" alt="Stars"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/network/members"><img src="https://img.shields.io/github/forks/admina-org/admina?style=social" alt="Forks"></a>
-  &nbsp;<a href="https://github.com/admina-org/admina/graphs/contributors"><img src="https://img.shields.io/github/contributors/admina-org/admina?style=flat-square&label=contributors" alt="Contributors"></a>
-  &nbsp;<img src="https://img.shields.io/github/last-commit/admina-org/admina?style=flat-square" alt="Last commit">
-</p>
-
 ---
 
 ## See it in action
@@ -50,13 +42,13 @@
 **Scaffold a project and boot the governed proxy + dashboard — no Docker:**
 
 <p align="center">
-  <img src="resources/admina-init-dev.gif" alt="admina init → admina dev → Ready on localhost:3000" width="900">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/admina-init-dev.gif" alt="admina init → admina dev → Ready on localhost:3000" width="900">
 </p>
 
 **Wrap any model in a few lines — PII is stripped before the model ever sees it:**
 
 <p align="center">
-  <img src="resources/sdk-3lines.gif" alt="GovernedModel redacts PERSON, EMAIL and credit card before the LLM call" width="900">
+  <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/sdk-3lines.gif" alt="GovernedModel redacts PERSON, EMAIL and credit card before the LLM call" width="900">
 </p>
 
 **The governance dashboard, before and after simulated traffic — Admina Score 40 → 60:**
@@ -64,11 +56,11 @@
 <table>
   <tr>
     <td align="center" width="50%">
-      <img src="resources/dashboard-firstuser.png" alt="Dashboard at first boot — score 40/100" width="100%"><br>
+      <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/dashboard-firstuser.png" alt="Dashboard at first boot — score 40/100" width="100%"><br>
       <em>First boot — Admina Score <strong>40/100</strong></em>
     </td>
     <td align="center" width="50%">
-      <img src="resources/dashboard-traffic.png" alt="Dashboard after simulated traffic — score 60/100" width="100%"><br>
+      <img src="https://raw.githubusercontent.com/admina-org/admina/main/resources/dashboard-traffic.png" alt="Dashboard after simulated traffic — score 60/100" width="100%"><br>
       <em>After <code>python scripts/simulate.py</code> — <strong>60/100</strong></em>
     </td>
   </tr>
@@ -246,7 +238,7 @@ from admina import GovernedModel, GovernedData, GovernedAgent, ComplianceKit
 | Governance Domain | GuardrailsAI (toxic, jailbreak, bias, PII) |
 | Compliance Template | EU AI Act |
 | Transport Adapter | MCP, HTTP REST |
-| Forensic Store | Filesystem, S3-compatible (boto3), MinIO (legacy) |
+| Forensic Store | Filesystem, S3-compatible (boto3 — AWS S3, MinIO, R2, …) |
 | Auth Provider | API Key |
 | PII Engine | spaCy + Regex |
 | Alert Channel | Log, Webhook |
@@ -262,7 +254,7 @@ admina plugin create my-domain        # Scaffold a new plugin
 ```bash
 admina init my-project     # Scaffold project with admina.yaml + docker-compose.yml
 admina dev                 # Local mode: proxy + dashboard on :3000 (no Docker)
-admina dev --stack         # Docker stack: + redis + clickhouse + minio + grafana
+admina dev --stack         # Docker stack: + redis + clickhouse + grafana
 admina dev --with-llm      # --stack + ollama + chromadb + open-webui
 admina plugin list         # List all registered plugins
 admina plugin install X    # Install a plugin from path or registry
@@ -281,7 +273,7 @@ Real-time governance dashboard on port 3000:
 - **Governance Score** — 0-100 composite metric (data residency, audit coverage, attack rate, forensic integrity, EU AI Act compliance)
 - **Live Feed** — streaming governance events via WebSocket
 - **Compliance Gaps** — EU AI Act gap analysis with article-level detail
-- **Infrastructure Health** — proxy, Redis, MinIO, ClickHouse, OTEL status
+- **Infrastructure Health** — proxy, Redis, forensic store, ClickHouse, OTEL status
 
 API backend: `GET /api/dashboard/score`, `/feed`, `/compliance`, `/sovereignty`, `/infra`, `/models`
 
@@ -293,7 +285,7 @@ Admina uses `admina.yaml` as the primary config file (with `.env` fallback for b
 cp admina.yaml.example admina.yaml   # Copy and customize
 ```
 
-See [`admina.yaml.example`](admina.yaml.example) for all options including domains, AI infra, plugins, dashboard, forensic storage, alert channels, and integrations.
+See [`admina.yaml.example`](https://github.com/admina-org/admina/blob/main/admina.yaml.example) for all options including domains, AI infra, plugins, dashboard, forensic storage, alert channels, and integrations.
 
 <a id="compliance-scope"></a>
 
@@ -316,7 +308,7 @@ See [`admina.yaml.example`](admina.yaml.example) for all options including domai
 > 2027** (postponed from 2 Aug 2026); Annex I high-risk from 2 August
 > 2028 (postponed from 2 Aug 2027). The full machine-readable timeline
 > ships with Admina as `admina.domains.compliance.eu_ai_act.EU_AI_ACT_DEADLINES`.
-> See [`MODEL_CARD.md`](MODEL_CARD.md) for the full scope, limitations,
+> See [`MODEL_CARD.md`](https://github.com/admina-org/admina/blob/main/MODEL_CARD.md) for the full scope, limitations,
 > and known failure modes of every Admina component.
 
 </details>
@@ -418,7 +410,7 @@ crew = Crew(agents=[agent], tasks=[task], task_callback=admina_task_callback)
 
 </details>
 
-See [full integration docs](docs/guides/integrations.md) for details.
+See [full integration docs](https://github.com/admina-org/admina/blob/main/docs/guides/integrations.md) for details.
 
 ## Performance — Hybrid Python + Rust engine
 
@@ -427,7 +419,7 @@ The Rust core engine is an optional accelerator. The default
 enable the Rust engine with the opt-in extra `pip install
 "admina-framework[rust]"` (or build from source for local development —
 `maturin develop --release --manifest-path core-rust/Cargo.toml`, see
-[CONTRIBUTING.md](CONTRIBUTING.md)). At runtime Admina auto-detects
+[CONTRIBUTING.md](https://github.com/admina-org/admina/blob/main/CONTRIBUTING.md)). At runtime Admina auto-detects
 whichever is available and falls back transparently to Python if the Rust
 extension is not installed.
 
@@ -498,7 +490,6 @@ The full stack (`docker compose up`) runs 9 containers:
 | `8080` | Proxy | MCP proxy + REST API + OpenAPI docs |
 | `3000` | Dashboard | Real-time governance web UI |
 | `3001` | Grafana | Metrics dashboards |
-| `9090` | MinIO Console | Forensic storage browser |
 | `4317` | OTEL Collector | OTLP gRPC ingestion |
 
 ClickHouse and Redis are internal only (not exposed to host).
@@ -509,45 +500,20 @@ ClickHouse and Redis are internal only (not exposed to host).
 <br>
 
 The forensic blackbox (the SHA-256 hash chain that makes the audit trail
-tamper-evident) supports four backends. Read this before picking one for
+tamper-evident) supports three backends. Read this before picking one for
 production.
 
 | Backend | License | When to use | Caveats |
 |---------|---------|-------------|---------|
 | **`memory`** *(default)* | n/a | Local development, tests, demos | Records are LOST on restart — no audit persistence. Loud warning at startup. |
 | **`filesystem`** | n/a | Single-host on-prem, air-gapped, smaller deployments | Persistence depends on the host filesystem; not ideal for HA. Requires `FORENSIC_BASE_DIR`. |
-| **`s3`** *(boto3)* | Apache 2.0 (boto3) | Production / HA / multi-region | Works with **any S3-compatible service** — AWS S3, Cloudflare R2, Backblaze B2, **SeaweedFS** (Apache 2.0), **Garage** (AGPLv3), **Ceph RGW** (LGPLv2). Recommended new default. |
-| **`minio`** *(legacy)* | see below ⚠️ | Backwards compatibility with existing MinIO clusters | Two distinct concerns; read the disclaimer. |
+| **`s3`** *(boto3)* | Apache 2.0 (boto3) | Production / HA / multi-region | Works with **any S3-compatible service** — AWS S3, **MinIO** servers, Cloudflare R2, Backblaze B2, **SeaweedFS** (Apache 2.0), **Garage** (AGPLv3), **Ceph RGW** (LGPLv2). Supports WORM Object Lock. |
 
-> ⚠️ **MinIO disclaimer — what users of Admina need to know.**
->
-> MinIO has two separate licensing/maintenance issues that can affect
-> downstream users of Admina, even though Admina itself is Apache 2.0:
->
-> 1. **MinIO Server is AGPLv3.** If you deploy MinIO Server as part of a
->    network-accessible service (e.g. a SaaS that exposes Admina's
->    dashboard or API to the public Internet), AGPLv3's network clause
->    can be read to require you to publish the source code of the
->    *combined* application that interacts with MinIO over the network.
->    The MinIO commercial license removes this obligation, but is paid.
->    This is **not** an Admina obligation — Apache 2.0 is permissive —
->    but it is an obligation MinIO Server itself imposes on whoever
->    runs it.
-> 2. **The MinIO Python SDK has been archived.** No more security
->    patches, no support for new Python releases. Continuing to depend
->    on it is a supply-chain risk.
->
-> **Recommendation:** for new deployments, use `FORENSIC_BACKEND=s3`.
-> The `boto3` client is Apache 2.0 and works against any S3-compatible
-> service. Two open-source FOSS-friendly options that don't trigger the
-> AGPL network clause for typical Admina deployments:
-> - **SeaweedFS** (Apache 2.0, S3 gateway, lightweight, single binary)
-> - **Garage** (AGPLv3, but as a backend — Garage's AGPL applies to
->   Garage itself, not to applications that connect to it via S3 API)
->
-> Existing MinIO deployments keep working through `FORENSIC_BACKEND=minio`,
-> but plan a migration. The `minio` backend will be removed in a future
-> release.
+> **Using MinIO?** Point the `s3` backend at your MinIO server via
+> `FORENSIC_S3_ENDPOINT` — MinIO speaks the S3 API, so no MinIO-specific
+> client is needed. The legacy `minio`-SDK backend was removed in 0.9.5
+> (the MinIO Python SDK is archived); `FORENSIC_BACKEND=minio` now
+> transparently routes to the `s3` backend with a migration warning.
 
 </details>
 
@@ -561,7 +527,7 @@ production.
 | `ADMINA_API_KEY` | *(empty)* | API key for all endpoints |
 | `UPSTREAM_MCP_URL` | `http://localhost:9000` | Default upstream MCP server |
 | `REDIS_URL` | `redis://localhost:6379/0` | Session state + rate limiting |
-| `MINIO_SECRET_KEY` | *(required)* | MinIO secret key for forensic storage |
+| `FORENSIC_BACKEND` | `memory` | Forensic store: `memory` \| `filesystem` \| `s3` |
 | `LOG_LEVEL` | `INFO` | Logging verbosity |
 
 </details>
@@ -586,7 +552,7 @@ admina/
 |   +-- domains/            GuardrailsAI
 |   +-- compliance/         EU AI Act template
 |   +-- transports/         MCP, HTTP REST
-|   +-- forensic/           MinIO, Filesystem
+|   +-- forensic/           Filesystem
 |   +-- auth/               API Key
 |   +-- pii/                spaCy + Regex
 |   +-- alerts/             Log, Webhook
@@ -645,12 +611,12 @@ curl http://localhost:8080/api/dashboard/score
 
 ## Project documents
 
-- [CONTRIBUTING.md](CONTRIBUTING.md) — development setup, testing, and pull request workflow
-- [MODEL_CARD.md](MODEL_CARD.md) — transparency artifact for every Admina governance component (intended use, scope, limitations, known failure modes), aligned with EU AI Act Art. 13 and NIST AI RMF
-- [ROADMAP.md](ROADMAP.md) — planned milestones from 0.9.x to 1.0 and beyond
-- [CHANGELOG.md](CHANGELOG.md) — release notes
-- [SECURITY.md](SECURITY.md) — coordinated disclosure policy
-- [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) — Contributor Covenant 2.1
+- [CONTRIBUTING.md](https://github.com/admina-org/admina/blob/main/CONTRIBUTING.md) — development setup, testing, and pull request workflow
+- [MODEL_CARD.md](https://github.com/admina-org/admina/blob/main/MODEL_CARD.md) — transparency artifact for every Admina governance component (intended use, scope, limitations, known failure modes), aligned with EU AI Act Art. 13 and NIST AI RMF
+- [ROADMAP.md](https://github.com/admina-org/admina/blob/main/ROADMAP.md) — planned milestones from 0.9.x to 1.0 and beyond
+- [CHANGELOG.md](https://github.com/admina-org/admina/blob/main/CHANGELOG.md) — release notes
+- [SECURITY.md](https://github.com/admina-org/admina/blob/main/SECURITY.md) — coordinated disclosure policy
+- [CODE_OF_CONDUCT.md](https://github.com/admina-org/admina/blob/main/CODE_OF_CONDUCT.md) — Contributor Covenant 2.1
 - **Browse the AI-generated wiki** → [deepwiki.com/admina-org/admina](https://deepwiki.com/admina-org/admina)
 
 Admina is Apache 2.0. Contributions are welcome.
@@ -659,7 +625,7 @@ Admina is Apache 2.0. Contributions are welcome.
 
 Copyright © 2025–2026 [Stefano Noferi](https://github.com/stefanoferi) & Admina contributors
 
-Licensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for the full text.
+Licensed under the Apache License, Version 2.0. See [LICENSE](https://github.com/admina-org/admina/blob/main/LICENSE) for the full text.
 
 ---
 

{admina_framework-0.9.4 → admina_framework-0.9.5}/admina/__init__.py

@@ -23,7 +23,7 @@ from __future__ import annotations
 
 from admina.sdk import ComplianceKit, GovernedAgent, GovernedData, GovernedModel
 
-__version__ = "0.9.4"
+__version__ = "0.9.5"
 
 __all__ = [
     "__version__",

{admina_framework-0.9.4 → admina_framework-0.9.5}/admina/cli/main.py

@@ -74,7 +74,7 @@ def _bootstrap_secrets(project_dir: Path, *, force: bool = False) -> dict[str, s
     click.echo()
     click.echo(f"    API Key:    {generated['ADMINA_API_KEY']}")
     click.echo(f"    Password:   {generated['ADMINA_DASHBOARD_PASSWORD']}")
-    click.echo("                (dashboard, Grafana, MinIO, ClickHouse)")
+    click.echo("                (dashboard, Grafana, ClickHouse)")
     click.echo()
     click.echo("    Save these now — they will NOT be shown again.")
     click.echo("    View:  admina password show")
@@ -298,7 +298,7 @@ def _format_next_steps(project_name: str) -> str:
     if docker_ok:
         lines.append(
             "    admina dev --stack            # full Docker stack "
-            "(proxy + redis + clickhouse + minio + grafana)"
+            "(proxy + redis + clickhouse + grafana)"
         )
     else:
         lines.extend(
@@ -592,7 +592,6 @@ def _run_local(
     env.setdefault("OTEL_ENDPOINT", "")
     env.setdefault("REDIS_URL", "")
     env.setdefault("CLICKHOUSE_HOST", "")
-    env.setdefault("MINIO_ENDPOINT", "")
     env.setdefault("UPSTREAM_MCP_URL", "")
     env.setdefault("LOG_LEVEL", "INFO")
 
@@ -751,7 +750,7 @@ def _run_compose(
     "--stack",
     is_flag=True,
     default=False,
-    help="Run the full Docker stack (proxy + dashboard + redis + clickhouse + minio + otel + grafana).",
+    help="Run the full Docker stack (proxy + dashboard + redis + clickhouse + otel + grafana).",
 )
 @click.option(
     "--with-llm",
@@ -801,7 +800,7 @@ def dev(
       admina dev              Local mode (default): one uvicorn process,
                               dashboard served on the same port. No Docker.
       admina dev --stack      Docker compose: proxy + dashboard + redis +
-                              clickhouse + minio + otel + grafana.
+                              clickhouse + otel + grafana.
       admina dev --with-llm   --stack plus local LLM services
                               (ollama + chromadb + open-webui).
 
@@ -1125,7 +1124,7 @@ def doctor() -> None:
             ("httpx", "httpx"),
             ("pydantic", "pydantic"),
             ("redis", "redis"),
-            ("minio", "minio"),
+            ("boto3", "boto3"),
             ("clickhouse_connect", "clickhouse-connect"),
             ("numpy", "numpy"),
             ("sklearn", "scikit-learn"),
@@ -1366,7 +1365,7 @@ def password_show() -> None:
     click.echo()
     click.echo(f"  API Key:    {data.get('ADMINA_API_KEY', '(not set)')}")
     click.echo(f"  Password:   {data.get('ADMINA_DASHBOARD_PASSWORD', '(not set)')}")
-    click.echo("              (shared across dashboard, Grafana, MinIO, ClickHouse)")
+    click.echo("              (shared across dashboard, Grafana, ClickHouse)")
     click.echo()
 
 

{admina_framework-0.9.4 → admina_framework-0.9.5}/admina/cli/templates/admina.yaml.j2

@@ -56,7 +56,7 @@ domains:
     enabled: {{ domains.compliance | lower }}
 {% if domains.compliance %}
     forensic:
-      storage: minio
+      storage: filesystem
       bucket: forensic-blackbox
     eu_ai_act:
       enabled: true
@@ -68,7 +68,7 @@ dashboard:
   enabled: true
   port: 3000
 
-forensic_store: minio
+forensic_store: filesystem
 auth_provider: apikey
 pii_engine: spacy-regex
 alert_channels:

{admina_framework-0.9.4 → admina_framework-0.9.5}/admina/cli/templates/docker-compose.yml.j2

@@ -20,8 +20,8 @@ services:
       - CLICKHOUSE_HOST=clickhouse
       - CLICKHOUSE_PORT=8123
       - CLICKHOUSE_DB=admina
-      - MINIO_ENDPOINT=minio:9000
-      - MINIO_BUCKET=forensic-blackbox
+      - FORENSIC_BACKEND=filesystem
+      - FORENSIC_BASE_DIR=/app/.admina/forensic
       - OTEL_ENDPOINT=http://otel-collector:4317
       - LOG_LEVEL=INFO
     depends_on:
@@ -29,8 +29,6 @@ services:
         condition: service_healthy
       clickhouse:
         condition: service_healthy
-      minio:
-        condition: service_healthy
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
       interval: 10s
@@ -79,28 +77,6 @@ services:
       - admina
 {% endif %}
 
-  # ── Storage: MinIO (Forensic Black Box) ─────────────────
-{% if domains.compliance %}
-  minio:
-    image: minio/minio:RELEASE.2024-11-07T00-52-20Z
-    container_name: {{ project_name }}-minio
-    command: server /data --console-address ":9090"
-    ports:
-      - "127.0.0.1:9090:9090"
-    environment:
-      - MINIO_ROOT_USER=${MINIO_ACCESS_KEY:-admina}
-      - MINIO_ROOT_PASSWORD=${MINIO_SECRET_KEY:-changeme}
-    volumes:
-      - minio-data:/data
-    healthcheck:
-      test: ["CMD", "mc", "ready", "local"]
-      interval: 5s
-      timeout: 3s
-      retries: 10
-    networks:
-      - admina
-{% endif %}
-
   # ── AI Infra: Ollama LLM ──────────────────────────────────
 {% if with_llm | default(true) and domains.ai_infra and ai_infra_llm_enabled | default(true) %}
   ollama:
@@ -243,7 +219,6 @@ volumes:
 {% endif %}
 {% if domains.compliance %}
   clickhouse-data:
-  minio-data:
   grafana-data:
 {% elif not ((domains.ai_infra and ai_infra_llm_enabled | default(true)) or (domains.ai_infra and ai_infra_rag_enabled | default(true)) or (domains.ai_infra and ai_infra_webui_enabled | default(true))) %}
   {}