adversary-gate 2.0.0__tar.gz

adversary_gate-2.0.0/PKG-INFO

@@ -0,0 +1,148 @@
+Metadata-Version: 2.4
+Name: adversary-gate
+Version: 2.0.0
+Summary: Evidence-based verification gate for AI coding agents (fail-closed)
+Author: AdversaryGate Authors
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/adversary-gate/adversary-gate
+Project-URL: Documentation, https://github.com/adversary-gate/adversary-gate#readme
+Project-URL: Repository, https://github.com/adversary-gate/adversary-gate.git
+Project-URL: Issues, https://github.com/adversary-gate/adversary-gate/issues
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: pytest>=8.0.0
+
+# AdversaryGate (v2.0.0)
+
+> **Uso alto de IA ≠ confiança alta.**
+> O custo de um pipeline com agentes de código não está na inteligência do modelo, está no autoengano do pipeline.
+
+An evidence-based fail-closed verification gate for AI coding agents where **uncertainty is a first-class result (`INCONCLUSIVE`)** instead of a silent approval.
+
+---
+
+## 🎯 The Thesis
+
+1. **Uso alto de IA ≠ Confiança alta**: Quanto mais um time depende de agentes no fluxo real de engenharia, mais aparece o custo do *"parece certo"*. Agentes geram código fluente e aparentemente correto, mas pipelines ingênuos que colapsam erros de infraestrutura aprovam patches com testes quebrados ou pulados.
+2. **Troca de Modelo como Sintoma**: Times trocam de modelo (Claude → GPT → Gemini) buscando credibilidade nos Pull Requests. Isso é **falta de verificação determinística, não falta de modelo**. O AdversaryGate executa exatamente o mesmo harness de teste sem invocar LLMs no verificador, tornando os modelos comparáveis empiricamente.
+3. **Perda e Reprocessamento**: O prejuízo financeiro das empresas é concreto: *merged regressions*, tarefas "concluídas" que não estão, rollbacks e horas de code review humano repassando o mesmo PR.
+4. **Menos Autoengano do Pipeline**: O produto não vende "IA mais inteligente". Vende **menos autoengano no pipeline**, medido numericamente pelo **`self_deception_index`**.
+
+---
+
+## 🔒 The Fail-Closed Model & Double-Filter Rigor
+
+A single invariant governs the entire system:
+> *The gate only reports what a healthy test harness actually executed. Unproduced proof is never proof of clean code.*
+
+| State | Outcome | Meaning |
+|---|---|---|
+| `Executed & Passed` | `Outcome.VERIFIED` | Test ran to completion and evidence confirms clean execution. |
+| `Executed & Failed` | `Outcome.REFUTED` | Test ran to completion and evidence condemns the patch. |
+| `Harness / Error` | `Outcome.UNVERIFIED` | Collection error, syntax error, missing file, timeout or flaky signal. **Never mergeable.** |
+
+### Patch Decision Matrix
+
+- **`Decision.MERGE`**: Requires **every** verdict to be `VERIFIED`, `diff_coverage >= 80%`, `suite_strength >= 75%`, and the full repository test suite to pass.
+- **`Decision.BLOCK`**: Triggered if any claim is `REFUTED` or if the full test suite fails (*collateral regression*).
+- **`Decision.INCONCLUSIVE`**: Triggered on `UNVERIFIED` outcomes, open circuit breakers, or weak test suites (`suite_strength < 0.75`). **Never merges.**
+
+---
+
+## 📊 Measured Pytest Exit Code Taxonomy
+
+| Exit Code | Pytest Meaning | ExecState | Gate Behavior |
+|---|---|---|---|
+| `0` | Tests passed | `PASS` | Evaluated against baseline comparison |
+| `1` | Tests failed | `FAIL` | **The ONLY exit code counted as evidence** |
+| `2` | Collection error (import crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `3` | Internal error (harness crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `4` | Usage error (bad path / node ID) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `5` | No tests collected | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `-1` | Sandbox timeout | `TIMED_OUT` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+
+---
+
+## 📦 Installation
+
+Install via PyPI:
+
+```bash
+pip install adversary-gate
+```
+
+Or run directly from source:
+
+```bash
+python3 -m cli --help
+```
+
+---
+
+## 🚀 Quick Start (CLI & GitHub Action)
+
+### Command-Line Usage
+
+```bash
+adversary-gate \
+  --baseline /path/to/before \
+  --patch /path/to/after \
+  --test-path tests/test_auth.py \
+  --test-id test_token_expiry \
+  --coverage-ratio 0.85 \
+  --model "${AGENT_MODEL_NAME}" \
+  --evidence-log evidence.jsonl \
+  --report
+```
+
+Exit Codes for CI Integration:
+- `0` — **`MERGE`**: Every claim executed cleanly and cleared coverage & suite strength floors.
+- `1` — **`BLOCK`**: Regressions or collateral suite failures detected.
+- `2` — **`INCONCLUSIVE`**: Infrastructure error, missing test, or weak suite (blocks merge).
+- `3` — **`USAGE_ERROR`**: Bad arguments or malformed JSON.
+
+---
+
+### GitHub Action Integration (`action.yml`)
+
+Add AdversaryGate to your GitHub Workflow:
+
+```yaml
+name: Verification Gate
+
+on: [pull_request]
+
+jobs:
+  verify-agent-patch:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run AdversaryGate
+        uses: adversary-gate/action@v2
+        with:
+          baseline: './baseline'
+          patch: './patch'
+          test-path: 'tests/test_token_expiry.py'
+          test-id: 'test_token_expiry'
+          coverage-floor: '0.80'
+          suite-strength-floor: '0.75'
+          model: '${{ matrix.model }}'
+          evidence-log: 'evidence.jsonl'
+```
+
+---
+
+## 📈 Provenance & `self_deception_index`
+
+Every execution logs `ctx_model` and `ctx_commit` into the audit trail. Running patches through the same harness allows `compare_models()` to report verification rates side by side:
+
+$$\text{self\_deception\_index} = \frac{\text{unverified\_merges}}{\text{merge\_count}}$$
+
+If your product pitch is *"menos autoengano no pipeline"*, this is the dashboard tile that proves it and the metric to watch drop to zero.
+
+---
+
+## 📄 License
+
+Distributed under the [MIT License](LICENSE).

adversary_gate-2.0.0/README.md

@@ -0,0 +1,134 @@
+# AdversaryGate (v2.0.0)
+
+> **Uso alto de IA ≠ confiança alta.**
+> O custo de um pipeline com agentes de código não está na inteligência do modelo, está no autoengano do pipeline.
+
+An evidence-based fail-closed verification gate for AI coding agents where **uncertainty is a first-class result (`INCONCLUSIVE`)** instead of a silent approval.
+
+---
+
+## 🎯 The Thesis
+
+1. **Uso alto de IA ≠ Confiança alta**: Quanto mais um time depende de agentes no fluxo real de engenharia, mais aparece o custo do *"parece certo"*. Agentes geram código fluente e aparentemente correto, mas pipelines ingênuos que colapsam erros de infraestrutura aprovam patches com testes quebrados ou pulados.
+2. **Troca de Modelo como Sintoma**: Times trocam de modelo (Claude → GPT → Gemini) buscando credibilidade nos Pull Requests. Isso é **falta de verificação determinística, não falta de modelo**. O AdversaryGate executa exatamente o mesmo harness de teste sem invocar LLMs no verificador, tornando os modelos comparáveis empiricamente.
+3. **Perda e Reprocessamento**: O prejuízo financeiro das empresas é concreto: *merged regressions*, tarefas "concluídas" que não estão, rollbacks e horas de code review humano repassando o mesmo PR.
+4. **Menos Autoengano do Pipeline**: O produto não vende "IA mais inteligente". Vende **menos autoengano no pipeline**, medido numericamente pelo **`self_deception_index`**.
+
+---
+
+## 🔒 The Fail-Closed Model & Double-Filter Rigor
+
+A single invariant governs the entire system:
+> *The gate only reports what a healthy test harness actually executed. Unproduced proof is never proof of clean code.*
+
+| State | Outcome | Meaning |
+|---|---|---|
+| `Executed & Passed` | `Outcome.VERIFIED` | Test ran to completion and evidence confirms clean execution. |
+| `Executed & Failed` | `Outcome.REFUTED` | Test ran to completion and evidence condemns the patch. |
+| `Harness / Error` | `Outcome.UNVERIFIED` | Collection error, syntax error, missing file, timeout or flaky signal. **Never mergeable.** |
+
+### Patch Decision Matrix
+
+- **`Decision.MERGE`**: Requires **every** verdict to be `VERIFIED`, `diff_coverage >= 80%`, `suite_strength >= 75%`, and the full repository test suite to pass.
+- **`Decision.BLOCK`**: Triggered if any claim is `REFUTED` or if the full test suite fails (*collateral regression*).
+- **`Decision.INCONCLUSIVE`**: Triggered on `UNVERIFIED` outcomes, open circuit breakers, or weak test suites (`suite_strength < 0.75`). **Never merges.**
+
+---
+
+## 📊 Measured Pytest Exit Code Taxonomy
+
+| Exit Code | Pytest Meaning | ExecState | Gate Behavior |
+|---|---|---|---|
+| `0` | Tests passed | `PASS` | Evaluated against baseline comparison |
+| `1` | Tests failed | `FAIL` | **The ONLY exit code counted as evidence** |
+| `2` | Collection error (import crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `3` | Internal error (harness crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `4` | Usage error (bad path / node ID) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `5` | No tests collected | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `-1` | Sandbox timeout | `TIMED_OUT` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+
+---
+
+## 📦 Installation
+
+Install via PyPI:
+
+```bash
+pip install adversary-gate
+```
+
+Or run directly from source:
+
+```bash
+python3 -m cli --help
+```
+
+---
+
+## 🚀 Quick Start (CLI & GitHub Action)
+
+### Command-Line Usage
+
+```bash
+adversary-gate \
+  --baseline /path/to/before \
+  --patch /path/to/after \
+  --test-path tests/test_auth.py \
+  --test-id test_token_expiry \
+  --coverage-ratio 0.85 \
+  --model "${AGENT_MODEL_NAME}" \
+  --evidence-log evidence.jsonl \
+  --report
+```
+
+Exit Codes for CI Integration:
+- `0` — **`MERGE`**: Every claim executed cleanly and cleared coverage & suite strength floors.
+- `1` — **`BLOCK`**: Regressions or collateral suite failures detected.
+- `2` — **`INCONCLUSIVE`**: Infrastructure error, missing test, or weak suite (blocks merge).
+- `3` — **`USAGE_ERROR`**: Bad arguments or malformed JSON.
+
+---
+
+### GitHub Action Integration (`action.yml`)
+
+Add AdversaryGate to your GitHub Workflow:
+
+```yaml
+name: Verification Gate
+
+on: [pull_request]
+
+jobs:
+  verify-agent-patch:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run AdversaryGate
+        uses: adversary-gate/action@v2
+        with:
+          baseline: './baseline'
+          patch: './patch'
+          test-path: 'tests/test_token_expiry.py'
+          test-id: 'test_token_expiry'
+          coverage-floor: '0.80'
+          suite-strength-floor: '0.75'
+          model: '${{ matrix.model }}'
+          evidence-log: 'evidence.jsonl'
+```
+
+---
+
+## 📈 Provenance & `self_deception_index`
+
+Every execution logs `ctx_model` and `ctx_commit` into the audit trail. Running patches through the same harness allows `compare_models()` to report verification rates side by side:
+
+$$\text{self\_deception\_index} = \frac{\text{unverified\_merges}}{\text{merge\_count}}$$
+
+If your product pitch is *"menos autoengano no pipeline"*, this is the dashboard tile that proves it and the metric to watch drop to zero.
+
+---
+
+## 📄 License
+
+Distributed under the [MIT License](LICENSE).

adversary_gate-2.0.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "adversary-gate"
+version = "2.0.0"
+description = "Evidence-based verification gate for AI coding agents (fail-closed)"
+readme = "README.md"
+authors = [
+    {name = "AdversaryGate Authors"}
+]
+license = "MIT"
+requires-python = ">=3.10"
+dependencies = [
+    "pytest>=8.0.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/adversary-gate/adversary-gate"
+Documentation = "https://github.com/adversary-gate/adversary-gate#readme"
+Repository = "https://github.com/adversary-gate/adversary-gate.git"
+Issues = "https://github.com/adversary-gate/adversary-gate/issues"
+
+[project.scripts]
+adversary-gate = "cli:main"
+
+[tool.setuptools]
+package-dir = {"" = "src"}
+py-modules = ["cli"]
+
+[tool.setuptools.packages.find]
+where = ["src"]

adversary_gate-2.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

adversary_gate-2.0.0/src/adversary_gate.egg-info/PKG-INFO

@@ -0,0 +1,148 @@
+Metadata-Version: 2.4
+Name: adversary-gate
+Version: 2.0.0
+Summary: Evidence-based verification gate for AI coding agents (fail-closed)
+Author: AdversaryGate Authors
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/adversary-gate/adversary-gate
+Project-URL: Documentation, https://github.com/adversary-gate/adversary-gate#readme
+Project-URL: Repository, https://github.com/adversary-gate/adversary-gate.git
+Project-URL: Issues, https://github.com/adversary-gate/adversary-gate/issues
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: pytest>=8.0.0
+
+# AdversaryGate (v2.0.0)
+
+> **Uso alto de IA ≠ confiança alta.**
+> O custo de um pipeline com agentes de código não está na inteligência do modelo, está no autoengano do pipeline.
+
+An evidence-based fail-closed verification gate for AI coding agents where **uncertainty is a first-class result (`INCONCLUSIVE`)** instead of a silent approval.
+
+---
+
+## 🎯 The Thesis
+
+1. **Uso alto de IA ≠ Confiança alta**: Quanto mais um time depende de agentes no fluxo real de engenharia, mais aparece o custo do *"parece certo"*. Agentes geram código fluente e aparentemente correto, mas pipelines ingênuos que colapsam erros de infraestrutura aprovam patches com testes quebrados ou pulados.
+2. **Troca de Modelo como Sintoma**: Times trocam de modelo (Claude → GPT → Gemini) buscando credibilidade nos Pull Requests. Isso é **falta de verificação determinística, não falta de modelo**. O AdversaryGate executa exatamente o mesmo harness de teste sem invocar LLMs no verificador, tornando os modelos comparáveis empiricamente.
+3. **Perda e Reprocessamento**: O prejuízo financeiro das empresas é concreto: *merged regressions*, tarefas "concluídas" que não estão, rollbacks e horas de code review humano repassando o mesmo PR.
+4. **Menos Autoengano do Pipeline**: O produto não vende "IA mais inteligente". Vende **menos autoengano no pipeline**, medido numericamente pelo **`self_deception_index`**.
+
+---
+
+## 🔒 The Fail-Closed Model & Double-Filter Rigor
+
+A single invariant governs the entire system:
+> *The gate only reports what a healthy test harness actually executed. Unproduced proof is never proof of clean code.*
+
+| State | Outcome | Meaning |
+|---|---|---|
+| `Executed & Passed` | `Outcome.VERIFIED` | Test ran to completion and evidence confirms clean execution. |
+| `Executed & Failed` | `Outcome.REFUTED` | Test ran to completion and evidence condemns the patch. |
+| `Harness / Error` | `Outcome.UNVERIFIED` | Collection error, syntax error, missing file, timeout or flaky signal. **Never mergeable.** |
+
+### Patch Decision Matrix
+
+- **`Decision.MERGE`**: Requires **every** verdict to be `VERIFIED`, `diff_coverage >= 80%`, `suite_strength >= 75%`, and the full repository test suite to pass.
+- **`Decision.BLOCK`**: Triggered if any claim is `REFUTED` or if the full test suite fails (*collateral regression*).
+- **`Decision.INCONCLUSIVE`**: Triggered on `UNVERIFIED` outcomes, open circuit breakers, or weak test suites (`suite_strength < 0.75`). **Never merges.**
+
+---
+
+## 📊 Measured Pytest Exit Code Taxonomy
+
+| Exit Code | Pytest Meaning | ExecState | Gate Behavior |
+|---|---|---|---|
+| `0` | Tests passed | `PASS` | Evaluated against baseline comparison |
+| `1` | Tests failed | `FAIL` | **The ONLY exit code counted as evidence** |
+| `2` | Collection error (import crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `3` | Internal error (harness crash) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `4` | Usage error (bad path / node ID) | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `5` | No tests collected | `UNRUNNABLE` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+| `-1` | Sandbox timeout | `TIMED_OUT` | `UNVERIFIED` $\rightarrow$ `INCONCLUSIVE` |
+
+---
+
+## 📦 Installation
+
+Install via PyPI:
+
+```bash
+pip install adversary-gate
+```
+
+Or run directly from source:
+
+```bash
+python3 -m cli --help
+```
+
+---
+
+## 🚀 Quick Start (CLI & GitHub Action)
+
+### Command-Line Usage
+
+```bash
+adversary-gate \
+  --baseline /path/to/before \
+  --patch /path/to/after \
+  --test-path tests/test_auth.py \
+  --test-id test_token_expiry \
+  --coverage-ratio 0.85 \
+  --model "${AGENT_MODEL_NAME}" \
+  --evidence-log evidence.jsonl \
+  --report
+```
+
+Exit Codes for CI Integration:
+- `0` — **`MERGE`**: Every claim executed cleanly and cleared coverage & suite strength floors.
+- `1` — **`BLOCK`**: Regressions or collateral suite failures detected.
+- `2` — **`INCONCLUSIVE`**: Infrastructure error, missing test, or weak suite (blocks merge).
+- `3` — **`USAGE_ERROR`**: Bad arguments or malformed JSON.
+
+---
+
+### GitHub Action Integration (`action.yml`)
+
+Add AdversaryGate to your GitHub Workflow:
+
+```yaml
+name: Verification Gate
+
+on: [pull_request]
+
+jobs:
+  verify-agent-patch:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run AdversaryGate
+        uses: adversary-gate/action@v2
+        with:
+          baseline: './baseline'
+          patch: './patch'
+          test-path: 'tests/test_token_expiry.py'
+          test-id: 'test_token_expiry'
+          coverage-floor: '0.80'
+          suite-strength-floor: '0.75'
+          model: '${{ matrix.model }}'
+          evidence-log: 'evidence.jsonl'
+```
+
+---
+
+## 📈 Provenance & `self_deception_index`
+
+Every execution logs `ctx_model` and `ctx_commit` into the audit trail. Running patches through the same harness allows `compare_models()` to report verification rates side by side:
+
+$$\text{self\_deception\_index} = \frac{\text{unverified\_merges}}{\text{merge\_count}}$$
+
+If your product pitch is *"menos autoengano no pipeline"*, this is the dashboard tile that proves it and the metric to watch drop to zero.
+
+---
+
+## 📄 License
+
+Distributed under the [MIT License](LICENSE).

adversary_gate-2.0.0/src/adversary_gate.egg-info/SOURCES.txt

@@ -0,0 +1,23 @@
+README.md
+pyproject.toml
+src/cli.py
+src/adversary_gate.egg-info/PKG-INFO
+src/adversary_gate.egg-info/SOURCES.txt
+src/adversary_gate.egg-info/dependency_links.txt
+src/adversary_gate.egg-info/entry_points.txt
+src/adversary_gate.egg-info/requires.txt
+src/adversary_gate.egg-info/top_level.txt
+src/core/circuit_breaker.py
+src/core/contestation.py
+src/core/evidence_log.py
+src/core/exitmap.py
+src/core/gate.py
+src/core/metrics.py
+src/core/path_policy.py
+src/core/quarantine.py
+src/core/types.py
+src/sandbox/runner.py
+src/verifiers/coverage.py
+src/verifiers/stability.py
+src/verifiers/strength.py
+tests/test_gate.py

adversary_gate-2.0.0/src/adversary_gate.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

adversary_gate-2.0.0/src/adversary_gate.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+adversary-gate = cli:main

adversary_gate-2.0.0/src/adversary_gate.egg-info/requires.txt

@@ -0,0 +1 @@
+pytest>=8.0.0

adversary_gate-2.0.0/src/adversary_gate.egg-info/top_level.txt

@@ -0,0 +1,4 @@
+cli
+core
+sandbox
+verifiers