agent-assurance 0.5.1__tar.gz

agent_assurance-0.5.1/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,11 @@
+## What this changes
+
+<!-- one paragraph: what and why -->
+
+## Checklist
+
+- [ ] `ruff check src tests && pytest -q` pass locally
+- [ ] New scanner / check / catalogue entry comes with: a fixture in `examples/repos/`, a test, a job in `.github/workflows/assurance.yml`, and (catalogue) its source
+- [ ] No LLM in the verdict; nothing executed; no network; secret values never read
+- [ ] Exit codes `0/1/2` unchanged (or the change is called out as breaking)
+- [ ] Docs updated (`README.md` only for what a first-time reader needs; detail in `docs/`)

agent_assurance-0.5.1/.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule: { interval: weekly }
+  - package-ecosystem: pip
+    directory: /
+    schedule: { interval: weekly }

agent_assurance-0.5.1/.github/workflows/assurance.yml

@@ -0,0 +1,221 @@
+# Dogfooding: runs this repo's own Action against the bundled example manifests.
+#
+# Every job here is an assertion, not a demo. If the gate stops blocking, CI
+# goes red — a green run means "the Action still passes what it should and
+# still blocks what it should".
+name: Agent Assurance (self-demo)
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  medium-agent-passes:
+    name: Medium-risk agent (must PASS)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Run Agent Assurance
+        uses: ./
+        with:
+          manifest: examples/medium-agent.yaml
+          check: all
+          fail-on: fail
+
+  high-agent-reviews:
+    name: High-risk agent (must PASS with fail-on=fail, BLOCK with fail-on=review)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: fail-on=fail lets REVIEW through
+        uses: ./
+        with:
+          manifest: examples/high-agent.yaml
+          check: all
+          fail-on: fail
+      - name: fail-on=review must block
+        id: strict
+        continue-on-error: true
+        uses: ./
+        with:
+          manifest: examples/high-agent.yaml
+          check: all
+          fail-on: review
+      - name: Assert the strict gate tripped
+        if: steps.strict.outcome != 'failure'
+        run: |
+          echo "::error::fail-on=review did not block a HIGH-risk agent (outcome=${{ steps.strict.outcome }})"
+          exit 1
+
+  dangerous-agent-blocks:
+    name: Dangerous agent (must BLOCK)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Run Agent Assurance (expected to fail)
+        id: gate
+        continue-on-error: true
+        uses: ./
+        with:
+          manifest: examples/dangerous-agent.yaml
+          check: all
+          fail-on: fail
+          sarif: aa.sarif
+      - name: Assert the gate tripped
+        if: steps.gate.outcome != 'failure'
+        run: |
+          echo "::error::The assurance gate did NOT block a CRITICAL agent (outcome=${{ steps.gate.outcome }})"
+          exit 1
+      - name: Assert SARIF was produced and points at the manifest
+        run: |
+          test -s aa.sarif
+          python3 - <<'PY'
+          import json
+          s = json.load(open("aa.sarif"))
+          r = s["runs"][0]["results"][0]
+          uri = r["locations"][0]["physicalLocation"]["artifactLocation"]["uri"]
+          assert uri == "examples/dangerous-agent.yaml", uri
+          assert r["kind"] == "fail" and r["level"] == "error", r
+          print("SARIF ok:", uri, r["level"])
+          PY
+      - name: Upload SARIF artifact (inspectable from the run page)
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: aa-sarif
+          path: aa.sarif
+
+  scan-promise-kept:
+    name: scan — promise kept (must PASS) + attestation written
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write        # Sigstore signing
+      attestations: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Run Agent Assurance (scan)
+        uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/mcp-promise-kept
+          manifest: examples/repos/mcp-promise-kept/agent-assurance.yaml
+          fail-on: review   # a kept promise has nothing to review either
+          attest: sign      # in-toto statement, signed with Sigstore (public repo)
+      - name: Assert the attestation is a valid in-toto statement about the right files
+        run: |
+          python3 - <<'PY'
+          import json
+          s = json.load(open("aa-attestation.json"))
+          assert s["_type"] == "https://in-toto.io/Statement/v1"
+          assert s["predicateType"].endswith("/attestation/v1")
+          names = sorted(x["name"] for x in s["subject"])
+          assert names == [".mcp.json", "agent-assurance.yaml"], names
+          assert s["predicate"]["report"]["verdict"] == "PASS"
+          assert s["predicate"]["git"]["commit"]
+          print("attestation ok:", names, s["predicate"]["git"]["commit"][:7])
+          PY
+      - name: Verify the signed attestation the way a third party would
+        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh attestation verify examples/repos/mcp-promise-kept/.mcp.json \
+            -R "$GITHUB_REPOSITORY" \
+            --predicate-type https://github.com/kunko-ai-labs/agent-assurance/attestation/v1
+
+  scan-promise-broken:
+    name: scan — promise broken (must BLOCK)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Run Agent Assurance (scan, expected to fail)
+        id: gate
+        continue-on-error: true
+        uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/mcp-promise-broken
+          manifest: examples/repos/mcp-promise-broken/agent-assurance.yaml
+          sarif: aa-scan.sarif
+      - name: Assert the gate tripped
+        if: steps.gate.outcome != 'failure'
+        run: |
+          echo "::error::scan did NOT block a broken promise (outcome=${{ steps.gate.outcome }})"
+          exit 1
+      - name: Assert SARIF anchors AA-002 at .mcp.json lines
+        run: |
+          python3 - <<'PY'
+          import json
+          s = json.load(open("aa-scan.sarif"))
+          r = next(x for x in s["runs"][0]["results"] if x["ruleId"] == "AA-002")
+          locs = [(l["physicalLocation"]["artifactLocation"]["uri"], l["physicalLocation"]["region"]["startLine"]) for l in r["locations"]]
+          assert r["kind"] == "fail" and locs == [(".mcp.json", 11), (".mcp.json", 16)], locs
+          print("SARIF ok:", locs)
+          PY
+
+  scan-claude-code-approval-kept:
+    name: scan — Claude Code permissions within declared autonomy (must PASS)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/claude-code-approval-kept
+          manifest: examples/repos/claude-code-approval-kept/agent-assurance.yaml
+          fail-on: review
+
+  scan-claude-code-approval-broken:
+    name: scan — allow Bash(*) with declared L2 (must BLOCK)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - id: gate
+        continue-on-error: true
+        uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/claude-code-approval-broken
+          manifest: examples/repos/claude-code-approval-broken/agent-assurance.yaml
+      - name: Assert the gate tripped
+        if: steps.gate.outcome != 'failure'
+        run: |
+          echo "::error::scan did NOT block an auto-approved shell under a declared L2 (outcome=${{ steps.gate.outcome }})"
+          exit 1
+
+  scan-policy-org:
+    name: scan — organisation policy (own catalogue, stricter gate; must PASS with fail-on=fail)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/policy-org
+          manifest: examples/repos/policy-org/agent-assurance.yaml
+          card: aa-card.html
+      - name: Assert the policy was recorded in the summary
+        run: grep -q "acme-corp-2026-09" aa-report.md && test -s aa-card.html
+
+  scan-codex-and-tools:
+    name: scan — Codex config.toml + serialized tool definitions (must BLOCK on the token, review the guess)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - id: gate
+        continue-on-error: true
+        uses: ./
+        with:
+          mode: scan
+          directory: examples/repos/codex-and-tools
+          manifest: examples/repos/codex-and-tools/agent-assurance.yaml
+      - name: Assert the gate tripped and the inferred class stayed a review
+        if: steps.gate.outcome != 'failure'
+        run: |
+          echo "::error::scan did NOT block an undeclared credential from .codex/config.toml"; exit 1
+      - run: grep -q "inferred from its name" aa-report.md

agent_assurance-0.5.1/.github/workflows/ci.yml

@@ -0,0 +1,65 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install
+        run: pip install -e ".[dev]"
+
+      - name: Lint (ruff)
+        run: ruff check src/ tests/
+
+      - name: Test (pytest)
+        run: pytest -q
+
+      - name: Exit-code contract with the installed binary
+        # 0 = pass, 1 = gate tripped, 2 = usage error. The Action depends on this.
+        run: |
+          agent-assurance --version
+          agent-assurance validate examples/safe-agent.yaml
+          agent-assurance check blast-radius examples/safe-agent.yaml
+          set +e
+          agent-assurance check all examples/dangerous-agent.yaml > /dev/null; c1=$?
+          agent-assurance check all examples/high-agent.yaml --fail-on review > /dev/null; c2=$?
+          agent-assurance check all examples/does-not-exist.yaml > /dev/null 2>&1; c3=$?
+          agent-assurance scan examples/repos/mcp-promise-kept > /dev/null; c4=$?
+          agent-assurance scan examples/repos/mcp-promise-broken > /dev/null; c5=$?
+          agent-assurance scan examples/repos/mcp-unknown-server --fail-on review > /dev/null; c6=$?
+          agent-assurance scan examples/repos/claude-code-approval-kept --fail-on review > /dev/null; c7=$?
+          agent-assurance scan examples/repos/claude-code-approval-broken > /dev/null; c8=$?
+          agent-assurance diff examples/repos/mcp-promise-kept examples/repos/mcp-promise-kept --fail-on-delta > /dev/null; c9=$?
+          agent-assurance diff examples/repos/mcp-promise-kept examples/repos/mcp-promise-broken --fail-on-delta > /dev/null; c10=$?
+          agent-assurance scan examples/repos/codex-and-tools > /dev/null; c11=$?
+          agent-assurance scan examples/repos/policy-org > /dev/null; c12=$?
+          set -e
+          echo "dangerous=$c1 high/review=$c2 missing=$c3 kept=$c4 broken=$c5 unknown/review=$c6 cc-kept=$c7 cc-broken=$c8 diff-same=$c9 diff-broken=$c10"
+          test "$c1" -eq 1 && test "$c2" -eq 1 && test "$c3" -eq 2
+          test "$c4" -eq 0 && test "$c5" -eq 1 && test "$c6" -eq 1
+          test "$c7" -eq 0 && test "$c8" -eq 1
+          test "$c9" -eq 0 && test "$c10" -eq 1
+          test "$c11" -eq 1 && test "$c12" -eq 0
+
+      - name: SARIF from the installed binary is valid JSON with a real location
+        run: |
+          agent-assurance check all examples/dangerous-agent.yaml --format sarif -o aa.sarif || true
+          python3 -c "import json; s=json.load(open('aa.sarif')); r=s['runs'][0]['results'][0]; assert r['locations'][0]['physicalLocation']['artifactLocation']['uri']=='examples/dangerous-agent.yaml'; print('ok')"

agent_assurance-0.5.1/.github/workflows/codeql.yml

@@ -0,0 +1,25 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+  schedule:
+    - cron: "23 5 * * 2"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        with:
+          languages: python
+          queries: security-and-quality
+      - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0

agent_assurance-0.5.1/.github/workflows/pr-diff-demo.yml

@@ -0,0 +1,25 @@
+# Living demo of `mode: diff`: on every pull request, report what the change
+# does to examples/demo/analytics-helper (a copy of the promise-kept fixture kept apart from the tests). A PR that widens that repo's reach
+# turns red and gets a comment; see the open demo PR.
+name: Agent Assurance (PR diff demo)
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  diff-promise-kept:
+    name: diff — examples/demo/analytics-helper
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: ./
+        with:
+          mode: diff
+          directory: examples/demo/analytics-helper
+          manifest: examples/demo/analytics-helper/agent-assurance.yaml
+          comment: "true"
+          fail-on-delta: "true"

agent_assurance-0.5.1/.github/workflows/release.yml

@@ -0,0 +1,53 @@
+# Release: on a v* tag, build sdist + wheel, attest their provenance (Sigstore),
+# attach them to the GitHub release and publish to PyPI via Trusted Publishing
+# (no API token stored anywhere; PyPI trusts this workflow's OIDC identity).
+name: Release
+
+on:
+  push:
+    tags: ["v*.*.*"]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write        # attach artifacts to the release
+      id-token: write        # Sigstore
+      attestations: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - run: pip install build && python -m build
+      - name: Tag must match the package version
+        run: |
+          v=$(python -c "import tomllib;print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")
+          test "v$v" = "${GITHUB_REF_NAME}" || { echo "::error::tag ${GITHUB_REF_NAME} != version $v"; exit 1; }
+      - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
+        with:
+          subject-path: dist/*
+      - name: Attach to the GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release upload "${GITHUB_REF_NAME}" dist/* --clobber
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi        # create it in Settings > Environments; PyPI trusted publisher points here
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

agent_assurance-0.5.1/.github/workflows/scorecard.yml

@@ -0,0 +1,35 @@
+# OpenSSF Scorecard: supply-chain hygiene of this repo, published to the
+# Scorecard API and to the Security tab. Results: https://scorecard.dev/viewer/?uri=github.com/kunko-ai-labs/agent-assurance
+name: OpenSSF Scorecard
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: "17 6 * * 1"
+  workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+  analysis:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          publish_results: true
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: scorecard
+          path: results.sarif
+      - uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        with:
+          sarif_file: results.sarif

agent_assurance-0.5.1/.gitignore

@@ -0,0 +1,23 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+build/
+dist/
+.venv/
+venv/
+
+# Tooling caches
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Editor / OS
+.DS_Store
+.idea/
+.vscode/
+
+# Local outputs
+*.sarif
+aa-report.md
+docs/.frames/

agent_assurance-0.5.1/.pre-commit-hooks.yaml

@@ -0,0 +1,12 @@
+# Use from another repo's .pre-commit-config.yaml:
+#   - repo: https://github.com/kunko-ai-labs/agent-assurance
+#     rev: v0.3.0
+#     hooks:
+#       - id: agent-assurance-scan
+- id: agent-assurance-scan
+  name: agent-assurance scan (declared vs observed)
+  description: Verify the agent configuration against agent-assurance.yaml before it is committed.
+  entry: agent-assurance scan .
+  language: python
+  pass_filenames: false
+  files: ^(\.mcp\.json|\.claude/settings(\.local)?\.json|\.cursor/mcp\.json|\.vscode/mcp\.json|\.gemini/settings\.json|agent-assurance\.yaml)$

agent_assurance-0.5.1/CLAUDE.md

@@ -0,0 +1,37 @@
+# agent-assurance — reglas del proyecto
+
+## Qué es (y qué no)
+
+**Declarado vs observado.** El manifiesto (`agent-assurance.yaml`) es la **promesa** de lo que un agente de IA puede hacer; `scan` **observa** lo que la configuración del repo concede de verdad (configs MCP de Claude Code/Cursor/Gemini/VS Code y permisos de Claude Code) y AA-002 falla si la promesa se rompe, señalando fichero:línea. `diff` dice qué hizo *este cambio*. AA-001 mide el radio de impacto. Tres puntos de aplicación con el mismo motor: al editar (hook / servidor MCP `would_break`), en el PR (Action `mode: diff` con comentario) y en cada push/release (SARIF).
+
+Modelo de permisos de Claude Code: `allow` no concede capacidad, **quita al humano del bucle** (aprobación); las reglas se colapsan por clase; los comandos de solo lectura son `read`; una regla acotada es `scoped` y no rompe la promesa (solo *review*).
+
+Por qué esto y no "diff de permisos": ya existe ×5 sin tracción (`docs/landscape.md`). Nadie verifica promesas ni mapea a OWASP.
+
+No es: un motor en runtime, un interceptor de tool calls, un ledger, un sistema de aprobaciones. Eso es otro producto (carril empresa de Kunko AI Labs); aquí no entra código de eso.
+
+## Contratos que no se rompen sin avisar
+
+- **Exit codes**: `0` pass/review · `1` gate · `2` uso/manifiesto inválido. Están en `tests/test_cli_contract.py` y en `.github/workflows/ci.yml`. La Action depende de ellos.
+- **Riesgo reproducible a mano**: cada punto sale de `risk.py` con su motivo. Nunca un LLM en el veredicto.
+- **SARIF**: apunta al fichero real, con región; PASS sale como `kind: pass` (sin alerta).
+- **Estándares**: mapeo a OWASP ASI; lo que viene de APTS se etiqueta `(adapted)`. No se reclama conformidad que no existe.
+- **Lo no soportado es `UNKNOWN`**, nunca inferido. Un `UNKNOWN` nunca da PASS silencioso (AA-001 ≥ REVIEW; AA-002 "not verifiable").
+- **El escáner no ejecuta nada**: ni servidores MCP ni código del repo; nunca lee el valor de un secreto, solo el nombre de la variable.
+- **Catálogo de servidores MCP** (`scan/catalog.py`) con fuente por entrada; añadir un servidor = una entrada + su fuente.
+
+## Cómo se trabaja
+
+- Entorno: `.venv` con `pip install -e ".[dev]"`. Antes de commitear: `ruff check src tests && pytest -q`.
+- El CI de dogfood (`assurance.yml`) es una **alarma**: cada job afirma que la Action pasa lo que debe y bloquea lo que debe. No añadir `continue-on-error` sin un paso que afirme el resultado esperado.
+- Una unidad shippable por semana con demo de 30 s. Si una feature no cabe en una demo, está mal cortada.
+- Ejemplos en `examples/` cubren las cuatro bandas (safe=LOW, medium=MEDIUM, high=HIGH, dangerous=CRITICAL); `examples/repos/` cubre promesa cumplida / rota / no verificable. Un check o un scanner nuevo añade su fixture y su job en `assurance.yml`.
+- Antes de una feature nueva: pasada corta de mercado con fuente y fecha (`docs/landscape.md`), y proponer la versión que nadie ocupa.
+- Commits en inglés, imperativo, prefijo `feat:|fix:|ci:|docs:|test:`.
+- Nombres de paso en `action.yml` con `:` van entre comillas (un YAML roto tumba todos los jobs); `tests/test_action_yaml.py` lo comprueba.
+- El GIF del README se regenera con `vhs docs/demo.tape` + el ffmpeg del comentario del tape; VHS necesita ejecutarse fuera del sandbox.
+- Probar en repos ajenos reales antes de cada release (17/09: ocho repos; salieron tres falsos positivos que un senior habría rechazado).
+
+## Roadmap vigente
+
+Está en el README (§Roadmap). Las decisiones de programa viven en el repo privado `vmbb13/ideas-ia-plan-personal` (doc 12). Si algo aquí contradice a ese doc, manda el doc y se abre issue.

agent_assurance-0.5.1/CONTRIBUTING.md

@@ -0,0 +1,34 @@
+# Contributing
+
+## What lives where
+
+| Path | Audience | What |
+|---|---|---|
+| `src/agent_assurance/` | developers | the product: scanners, checks, risk model, reports, CLI, MCP server |
+| `action.yml`, `.pre-commit-hooks.yaml`, `contrib/` | users | ways to run it (GitHub Action, pre-commit, Claude Code hook/MCP) |
+| `examples/` | users, tests | manifests and mini-repos that double as fixtures and demos |
+| `schema/` | users | JSON schemas for the manifest and the policy file |
+| `docs/` | users, buyers, auditors | how it works, integrations, roadmap, real-world scans, landscape, images |
+| `tests/` | developers | contract tests (exit codes, SARIF, YAML shape, every fixture's verdict) |
+
+Launch material (video, composition, share copy) is **not** in this repo; the video is attached to the release.
+
+## Branches
+
+- `main` — releasable at all times. Only merges from `develop` (or hotfixes). Every release is a tag `vX.Y.Z` plus a moving `vX.Y` for the Action.
+- `develop` — integration branch. Day-to-day work lands here through feature branches.
+- `feat/*`, `fix/*`, `docs/*` — short-lived; open a PR into `develop`. The CI (`ci.yml`) and the dogfood (`assurance.yml`) run on every PR.
+- `demo/*` — living demos that must stay red (see PR #16). Never merged.
+
+Release: `develop` → PR → `main` → bump version in `pyproject.toml` and `__init__.py` → tag → GitHub release with notes → move the `vX.Y` tag.
+
+## Before you push
+
+```bash
+pip install -e ".[dev]"
+ruff check src tests && pytest -q
+```
+
+Rules that do not bend (see `CLAUDE.md`): no LLM in the verdict; nothing executed or sent; unknown is `UNKNOWN`; exit codes `0/1/2` are a contract; a step name with `:` in `action.yml` goes in quotes; a new scanner or check comes with a fixture in `examples/repos/`, a test, and a job in `assurance.yml`; a new MCP catalogue entry cites its source.
+
+Before a release: scan a few real public repos (`docs/real-world.md`) and re-check `docs/landscape.md`.

agent_assurance-0.5.1/LICENSE

@@ -0,0 +1,17 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   Copyright 2026 Kunko AI Labs
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.