alter-runtime 0.3.0__tar.gz → 0.3.2__tar.gz

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/PKG-INFO

@@ -1,11 +1,11 @@
 Metadata-Version: 2.4
 Name: alter-runtime
-Version: 0.3.0
+Version: 0.3.2
 Summary: ~Alter Identity Runtime - local sovereign daemon for the continuous identity field. Subscribes to per-~handle Cloudflare Durable Objects, exposes Unix socket + D-Bus + CLI surfaces, falls back gracefully to direct MCP polling.
 Project-URL: Homepage, https://truealter.com
 Project-URL: Documentation, https://truealter.com/docs/alter-runtime
-Project-URL: Repository, https://github.com/true-alter/Alter
-Project-URL: Bug Tracker, https://github.com/true-alter/Alter/issues
+Project-URL: Repository, https://github.com/true-alter/alter-runtime
+Project-URL: Bug Tracker, https://github.com/true-alter/alter-runtime/issues
 Author: Blake Morrison
 Author-email: ALTER Meridian Pty Ltd <hello@truealter.com>
 License: Apache-2.0
@@ -116,7 +116,7 @@ filing a public issue. Non-security bugs and feature requests: email
 | 2 | 2b - Subscribers, Unix socket, D-Bus, git watcher | Shipped |
 | 2 | 2c - systemd + launchd service units | Shipped |
 | 2 | 2d - First pixel: CC hook + scripts upgrade | Shipped |
-| 2 | 2e - eBPF subscriber (Patent M, reference impl in `alter-ebpf`) | Shipped |
+| 2 | 2e - eBPF subscriber (reference impl in `alter-ebpf`) | Shipped |
 | 3 | 3a - Cross-platform tray surfaces | Planned |
 | 3 | 3b - Windows Service + `pam_alter` stub | Planned |
 | 3 | 3c - PyPI release CI + signed binaries | Planned |
@@ -183,7 +183,7 @@ alter-runtime stop
    - Git commits, branch switches, pushes (via `watchdog` on `.git/refs/heads/`)
    - CC hook events (forwarded from `.claude/hooks/*.sh`)
    - Shell command invocations (opt-in)
-   - eBPF kernel attestations (shipped; reference impl in `alter-ebpf`, Patent M)
+   - eBPF kernel attestations (shipped; reference impl in `alter-ebpf`)
 
 5. **Maintains a local cache** of your last-known-good field state so the first-paint
    tilde warmth renders in <1 second, even offline. Per IFA's Five OS-Native Properties,
@@ -203,7 +203,7 @@ alter-runtime/
 │   ├── cli.py                    # argparse entrypoint: init|start|stop|status|query|ingest|daemon
 │   ├── sdk/
 │   │   ├── __init__.py
-│   │   └── client.py             # AlterClient (lifted from backend/openclaw-skill)
+│   │   └── client.py             # AlterClient (async identity MCP client)
 │   ├── subscribers/              # (Wave 2)
 │   │   ├── do_sse.py             # primary - subscribes to handle-alter DO SSE
 │   │   └── mcp_fallback.py       # fallback - polls api.truealter.com/api/v1/mcp

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/README.md

@@ -48,7 +48,7 @@ filing a public issue. Non-security bugs and feature requests: email
 | 2 | 2b - Subscribers, Unix socket, D-Bus, git watcher | Shipped |
 | 2 | 2c - systemd + launchd service units | Shipped |
 | 2 | 2d - First pixel: CC hook + scripts upgrade | Shipped |
-| 2 | 2e - eBPF subscriber (Patent M, reference impl in `alter-ebpf`) | Shipped |
+| 2 | 2e - eBPF subscriber (reference impl in `alter-ebpf`) | Shipped |
 | 3 | 3a - Cross-platform tray surfaces | Planned |
 | 3 | 3b - Windows Service + `pam_alter` stub | Planned |
 | 3 | 3c - PyPI release CI + signed binaries | Planned |
@@ -115,7 +115,7 @@ alter-runtime stop
    - Git commits, branch switches, pushes (via `watchdog` on `.git/refs/heads/`)
    - CC hook events (forwarded from `.claude/hooks/*.sh`)
    - Shell command invocations (opt-in)
-   - eBPF kernel attestations (shipped; reference impl in `alter-ebpf`, Patent M)
+   - eBPF kernel attestations (shipped; reference impl in `alter-ebpf`)
 
 5. **Maintains a local cache** of your last-known-good field state so the first-paint
    tilde warmth renders in <1 second, even offline. Per IFA's Five OS-Native Properties,
@@ -135,7 +135,7 @@ alter-runtime/
 │   ├── cli.py                    # argparse entrypoint: init|start|stop|status|query|ingest|daemon
 │   ├── sdk/
 │   │   ├── __init__.py
-│   │   └── client.py             # AlterClient (lifted from backend/openclaw-skill)
+│   │   └── client.py             # AlterClient (async identity MCP client)
 │   ├── subscribers/              # (Wave 2)
 │   │   ├── do_sse.py             # primary - subscribes to handle-alter DO SSE
 │   │   └── mcp_fallback.py       # fallback - polls api.truealter.com/api/v1/mcp

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/__init__.py

@@ -7,5 +7,5 @@ architectural context.
 
 from alter_runtime.sdk.client import AlterClient
 
-__version__ = "0.3.0"
+__version__ = "0.3.1"
 __all__ = ["AlterClient", "__version__"]

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/adapters/claude_jsonl_watcher.py

@@ -63,7 +63,7 @@ Decisions
 - D-IaI-1 (Identity-as-Inference): token usage is a passive aggregate with
   k=1 (single principal machine). The inferred signal (burn-rate by model)
   is operational telemetry, NOT psychometric inference - no clause of the
-  IaI 5-point test is triggered. Return: ops.truealter.com visibility.
+  IaI 5-point test is triggered. Return: operator visibility.
 - HTTP auth: JWT sourced from ``load_session()`` at adapter start, then
   refreshed per-POST from ``ALTER_RUNTIME_SESSION_JWT`` env var as a
   fallback. Full auth substrate wiring (ensureFreshSession equivalent) is a

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/adapters/household/__init__.py

@@ -14,7 +14,7 @@ boundary upward.
 
 NOT auto-wired into :mod:`alter_runtime.daemon` startup; activation is a
 follow-up wave once the stub specs in
-``.repos/internal/02-Technical-Strategy/phase2-wave2-stub-specs-pack-2026-05-27.md``
+the ALTER internal Phase-2 wave-2 stub specs
 land their implementation pass.
 """
 

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/adapters/household/_base.py

@@ -1,7 +1,7 @@
 """Shared base classes for the household adapter family.
 
 Two adapter shapes per the Phase-2 cross-pattern catalogue
-(``.repos/internal/02-Technical-Strategy/phase2-substrate-cross-pattern-catalogue-2026-05-19.md``):
+(ALTER internal Phase-2 cross-pattern catalogue):
 
 * :class:`EventBusSubscriberBase` — subscribes to the in-process
   :class:`~alter_runtime.subscribers.bus.EventBus` for events the

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/adapters/household/compost/__init__.py

@@ -5,7 +5,7 @@ devices whose member-attested plate tag is ``"compost"``, and computes
 a 30-day temperature-curve patience trait (band).  Persists to
 ``~/.local/share/alter-runtime/compost.db`` (mode 600).
 
-Spec: ``.repos/internal/02-Technical-Strategy/compost-substrate-adapter-2026-05-19.md``
+Spec: ALTER internal - compost substrate adapter.
 """
 
 from alter_runtime.adapters.household.compost.adapter import CompostAdapter

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/adapters/household/workshop_tools/__init__.py

@@ -6,8 +6,8 @@ diversity, and cadence band.  Persists to
 ``~/.local/share/alter-runtime/workshop_tools.db`` (mode 600).  Emits
 trait bands only — never raw Wh.
 
-Spec: ``.repos/internal/02-Technical-Strategy/workshop-tool-substrate-adapter-2026-05-19.md``
-Stub: ``phase2-wave2-stub-specs-pack-2026-05-27.md`` (Eco-12 line).
+Spec: ALTER internal - workshop-tool substrate adapter.
+Stub: ALTER internal Phase-2 wave-2 stub specs (Eco-12 line).
 """
 
 from alter_runtime.adapters.household.workshop_tools.adapter import (

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/atlas/__init__.py

@@ -6,8 +6,7 @@ content-free 128-dim signature vectors. Content stays local forever; only
 derivative signature hashes cross the consent boundary, under per-stream
 Art-6(1)(a) consent.
 
-Spec: .repos/internal/02-Technical-Strategy/substrate-recognition-exploration-2026-04-17.md
-Plan: .repos/internal/02-Technical-Strategy/atlas-weekend-build-plan-2026-04-18.md
+Spec + plan: ALTER internal technical-strategy (substrate recognition).
 DR candidate: D-VLT1 (Drew-gated).
 
 Honesty clause (spec §2): signatures are DERIVATIVE, not pseudonymous. A 128-dim

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/atlas/ledger.py

@@ -11,7 +11,7 @@ Honesty clause - this ledger is a SOFT SIGNAL, not a cryptographic audit.
 Per substrate spec §4.3: the egress-capable parent daemon writes this ledger.
 When the parent daemon is the attacker, the ledger is an honest-witness weakness
 - the daemon can simply omit or rewrite entries. Meaningful external auditing
-arrives when ``alter-ebpf`` (Patent M) ships on-user-device and can witness
+arrives when ``alter-ebpf`` ships on-user-device and can witness
 ``bprm_check_security`` + network syscalls sourced from the daemon UID from
 outside the daemon's control boundary.
 

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/cli.py

@@ -10,8 +10,7 @@ Subcommands:
   query     Query the current materialised view (attunement, warmth, trust tier).
   ingest    Manually ingest a signal (for testing).
 
-Matches the shape of the alter-cli (Node/TS) command handler at
-/mnt/personal/Workspaces/alter-cli/src/index.ts:24-79 - simple switch-on-verb,
+Matches the shape of the alter-cli (Node/TS) command handler - a simple switch-on-verb,
 no external CLI framework dependency (argparse is stdlib).
 """
 

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/daemon.py

@@ -373,7 +373,7 @@ async def run_daemon(config: DaemonConfig | None = None) -> None:
         # state" file with a 72 h expiry. Shell-greeting consumers
         # (alter-cli `alter room`, future menu greeting) read that
         # file and render the echo iff still within the window.
-        # Per proposed-D-CUST-1 surface 21 (alter-internal #140).
+        # Per proposed-D-CUST-1 surface 21.
         ceremony = CeremonyEchoWriter(config, session)
         supervisor.register(ceremony)
         event_bus.subscribe("identity.frame", ceremony.handle_raw_frame)
@@ -484,7 +484,7 @@ async def run_daemon(config: DaemonConfig | None = None) -> None:
 
             supervisor.register(ClaudeJsonlWatcher(config, event_bus))
 
-        # --- Kernel attestation (Wave 5b, Patent M) -----------------------
+        # --- Kernel attestation (Wave 5b) ---------------------------------
         # The eBPF subscriber spawns the Rust ``alter-ebpf`` loader and
         # republishes its exec stream onto ``kernel.attest.exec`` and
         # ``local.signal``. It silently disables itself on hosts where the

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/sdk/__init__.py

@@ -1,8 +1,8 @@
 """alter_runtime.sdk - Python SDK for ALTER's identity MCP server.
 
-Exports ``AlterClient``, the async HTTP client lifted from
-``backend/openclaw-skill/alter_bot/mcp_client.py`` and renamed for the
-distribution layer (D-RT5 - the PyPI package is ``alter-runtime``, not
+Exports ``AlterClient``, the async HTTP client for ALTER's identity MCP
+server, packaged for the distribution layer (D-RT5 - the PyPI package is
+``alter-runtime``, not
 ``alter-identity``, because the TypeScript npm package ``@alter/identity``
 already claims that name).
 """

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/sdk/client.py

@@ -1,10 +1,9 @@
 """AlterClient - async JSON-RPC 2.0 client for ALTER's identity MCP server.
 
-Ported from ``backend/openclaw-skill/alter_bot/mcp_client.py`` with two changes:
+Adapted from ALTER's internal MCP client with two changes:
 
-1. **Class renamed** from ``AlterMCPClient`` to ``AlterClient`` to match the
-   public SDK surface described in the plan and D-RT5. The original class
-   remains in the backend for internal tooling.
+1. **Class renamed** to ``AlterClient`` to match the public SDK surface
+   described in the plan and D-RT5.
 
 2. **Dual-source discovery** - ``AlterClient.auto_discover()`` first tries
    to reach the local daemon's Unix socket (once Wave 2 ships it) and falls
@@ -107,7 +106,7 @@ class AlterClient:
         bearer_token: str | None = None,
         timeout: float = 30.0,
         client_name: str = "alter-runtime",
-        client_version: str = "0.3.0",
+        client_version: str = "0.3.1",
     ) -> None:
         self.base_url = base_url.rstrip("/")
         self.api_key = api_key

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/services/launchd/com.alter.runtime.plist.in

@@ -65,14 +65,10 @@
          and LowPriorityIO further drops disk-IO priority so the daemon never
          starves a foreground IDE / build that the operator is actively using.
 
-         Pentest 2026-04-26 (MEDIUM) follow-up: ship a sandbox-exec profile
-         next to this template that constrains filesystem writes to
-         ~/Library/Application Support/alter, ~/Library/Caches/alter and
-         ~/Library/Logs/alter-runtime, denies all network listening sockets
-         except the Unix socket under Application Support, and uses
-         ``allow-with-prompt`` for outbound HTTPS to alter-api.fly.dev only.
-         Tracked at alter-runtime#sandbox-profile (TODO; out of scope for
-         this PR — the plist itself is the security floor pre-sandbox). -->
+         TODO(sandbox-profile): ship a sandbox-exec profile alongside this
+         template to further constrain the daemon's runtime surface. Tracked
+         at alter-runtime#sandbox-profile — out of scope here; the plist is
+         the pre-sandbox security floor. -->
     <key>ProcessType</key>
     <string>Background</string>
     <key>LowPriorityIO</key>

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/services/systemd/alter-runtime.service.in

@@ -16,7 +16,7 @@
 
 [Unit]
 Description=~Alter Identity Runtime — local sovereign daemon
-Documentation=https://github.com/true-alter/Alter/blob/main/packages/alter-runtime/README.md
+Documentation=https://github.com/true-alter/alter-runtime/blob/main/README.md
 # We do not require network-online.target because the daemon tolerates
 # offline starts — it degrades to its local cache and retries the DO
 # connection with exponential backoff (D-RT9).

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/subscribers/ceremony_echo.py

@@ -28,9 +28,8 @@ daemon supervisor. Like InboxWriter, the supervisor will restart on
 :meth:`run` exceptions but :meth:`handle_event` only ever logs and returns.
 
 Refs:
-   * proposed-D-CUST-1 (alter-internal #140) - surface 21 (ceremony echo)
+   * proposed-D-CUST-1 - surface 21 (ceremony echo)
    * embedded-messenger/05-design-synthesis.md - content_type taxonomy
-   * .claude/handovers/2026-04-24-alter-myspace-customisation-m2-and-c-spike.md
 """
 
 from __future__ import annotations

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/alter_runtime/subscribers/ebpf.py

@@ -3,8 +3,7 @@
 The Rust ``alter-ebpf`` binary (subcrate ``packages/alter-ebpf``) is the
 userspace half of a BPF LSM program that observes ``bprm_check_security``
 and emits one ``alter1``-shaped JSON envelope per line to stdout for every
-exec on a uid the operator opted in to. Patent M (AMCZ-2615626261, FILED
-7 Apr 2026) covers this kernel-adjacent attestation surface.
+exec on a uid the operator opted in to.
 
 This subscriber is the bridge between that binary and the in-process
 :class:`EventBus`. It:

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/docs/schemas/README.md

@@ -19,7 +19,7 @@ Canonical schemas for files the daemon writes under `~/.local/share/alter-runtim
 - **Field naming** - `snake_case` throughout.
 - **Timestamps** - ISO 8601 UTC with `Z` suffix (e.g. `2026-05-12T14:23:00Z`).
 - **Identity** - `handle` matches `^~[a-z0-9_-]+$`.
-- **Provenance** - every record carries `provenance_class` from the canonical 6-value enum in `backend/app/services/consent/provenance.py`. D-OBS-1 / D-ATLAS-1 stream classes (e.g. `passive_local_document`) are valid where the StreamProvenanceClass enum at `backend/app/services/consent/gateway.py` permits.
+- **Provenance** - every record carries `provenance_class` from the canonical 6-value provenance enum. D-OBS-1 / D-ATLAS-1 stream classes (e.g. `passive_local_document`) are valid where the StreamProvenanceClass enum at `the consent gateway` permits.
 - **Consent** - every record carries `consent_tier` ∈ {1, 2, 3, 4} per D109 (`L1_MANUAL` / `L2_CATEGORY` / `L3_MANAGED` / `L4_AUTONOMOUS`).
 - **Append-only** - never edit or delete records. Amend forward via `supersedes_id` chain when supported.
 - **Versioning** - `version` is the producer-assigned monotonic dedup key; readers ignore older `version` values for the same `id`.
@@ -29,15 +29,15 @@ Canonical schemas for files the daemon writes under `~/.local/share/alter-runtim
 
 ## Wire envelope alignment
 
-JSONL records mirror what arrives on the per-handle Durable Object SSE stream (`mcp.truealter.com/events/{handle}/stream`). The DO event envelope is defined at `cloudflare/workers/shared/src/types.ts`; the backend ingest envelope is at `backend/app/services/identity_events/producer.py:96–146`. When local clients (alter-cli, widget, Android) originate a state change, they emit an `IngestEnvelope` to `/api/v1/org-alter/ingest`; the DO fans it back out on the SSE stream; the daemon writes it to the appropriate JSONL.
+JSONL records mirror what arrives on the per-handle Durable Object SSE stream (`mcp.truealter.com/events/{handle}/stream`). The DO event envelope is defined at `the DO worker shared types`; the backend ingest envelope is defined by the identity-events producer. When local clients (alter-cli, widget, Android) originate a state change, they emit an `IngestEnvelope` to `/api/v1/org-alter/ingest`; the DO fans it back out on the SSE stream; the daemon writes it to the appropriate JSONL.
 
 ## SignalKind extensions
 
-`cloudflare/workers/shared/src/types.ts` `SignalKind` union must include `presence_set`, `session_started`, `session_heartbeat`, `session_ended`, `adapter_status` for the DO to route these events.
+`the DO worker shared types` `SignalKind` union must include `presence_set`, `session_started`, `session_heartbeat`, `session_ended`, `adapter_status` for the DO to route these events.
 
 ## Identity-as-Inference compliance
 
-Every record passes the consent gateway at `backend/app/services/consent/gateway.py` against its `(QueryCategory × StreamProvenanceClass)` tuple. The five AGAINST-clauses (Session 51, 2026-04-13) apply:
+Every record passes the consent gateway at `the consent gateway` against its `(QueryCategory × StreamProvenanceClass)` tuple. The five AGAINST-clauses (Session 51, 2026-04-13) apply:
 
 1. Active state changes (`presence.jsonl`, `session_started`) → `provenance_class=active_declaration` or `active_composition`; server-side projection OK.
 2. Per-record `provenance_class` declared. No record lands without it.

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/examples/awesomewm/README.md

@@ -2,7 +2,7 @@
 
 Ambient wibar widget + rofi quick-compose for ALTER messaging on Arch / AwesomeWM. Pairs with the existing waybar example for Wayland users; this is the X11 / AwesomeWM equivalent.
 
-Private-dev scope - Blake's machine. Local-only (IaI Clause 1 compliant): the widget reads a daemon-populated cache file, never the network. The compose script only calls the same local MCP endpoint as `.claude/hooks/cc-slash-msg.sh`.
+Private-dev scope. Local-only (IaI Clause 1 compliant): the widget reads a daemon-populated cache file, never the network. The compose script only calls the same local MCP endpoint as `.claude/hooks/cc-slash-msg.sh`.
 
 ## Files
 
@@ -29,7 +29,7 @@ Private-dev scope - Blake's machine. Local-only (IaI Clause 1 compliant): the wi
 2. Copy `alter-compose.sh` somewhere on `$PATH`, or leave it in-place and reference the absolute path. Mark it executable:
 
    ```bash
-   chmod +x /mnt/personal/Workspaces/alter/.repos/alter-runtime/examples/awesomewm/alter-compose.sh
+   chmod +x /path/to/alter-compose.sh
    ```
 
 3. Edit `~/.config/awesome/rc.lua` and add the widget mount + keybinding (snippets below).
@@ -79,14 +79,14 @@ In your `globalkeys` table, add the quick-compose bind (Super+M suggested; pick
 awful.key(
   { modkey }, "m",
   function ()
-    awful.spawn("/mnt/personal/Workspaces/alter/.repos/alter-runtime/examples/awesomewm/alter-compose.sh")
+    awful.spawn("/path/to/alter-compose.sh")
   end,
   { description = "compose alter message", group = "alter" }
 ),
 awful.key(
   { modkey, "Shift" }, "m",
   function ()
-    awful.spawn("/mnt/personal/Workspaces/alter/.repos/alter-runtime/examples/awesomewm/alter-compose.sh --read")
+    awful.spawn("/path/to/alter-compose.sh --read")
   end,
   { description = "read alter inbox", group = "alter" }
 ),
@@ -107,7 +107,7 @@ awful.key(
 ## Privacy notes (D-MSG10)
 
 - The widget reads `~/.cache/alter/inbox.json` only. No network traffic from the widget path.
-- `alter-compose.sh` hits only `http://localhost:9092/api/v1/mcp` with the local dev member key - same path the CC `/msg` hook uses. No third-party endpoints, no telemetry.
+- `alter-compose.sh` hits only `http://localhost:9092/api/v1/mcp` with a local dev key - same path the CC `/msg` hook uses. No third-party endpoints, no telemetry.
 - Read receipts, presence, and typing indicators are intentionally NOT wired. Opening the inbox (`--read`) does not mark messages read server-side; that's an explicit user action left for the inbox UI.
 
 ## Configuration
@@ -117,6 +117,6 @@ Both files respect:
 | Env var | Default | Purpose |
 |---------|---------|---------|
 | `ALTER_MESSENGER_API` | `http://localhost:9092/api/v1/mcp` | MCP endpoint for send/inbox calls |
-| `ALTER_MESSENGER_KEY` | `alt_dev_blake_msg` | API key header value |
+| `ALTER_MESSENGER_KEY` | `alt_dev_<handle>_msg` | API key header value (dev-only; backend honours `alt_dev_*` keys only when running in development mode) |
 
 Override in your `~/.config/awesome/rc.lua` via `awful.spawn.with_shell` if you need a different endpoint for staging.

{alter_runtime-0.3.0 → alter_runtime-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "alter-runtime"
-version = "0.3.0"
+version = "0.3.2"
 description = "~Alter Identity Runtime - local sovereign daemon for the continuous identity field. Subscribes to per-~handle Cloudflare Durable Objects, exposes Unix socket + D-Bus + CLI surfaces, falls back gracefully to direct MCP polling."
 readme = "README.md"
 license = { text = "Apache-2.0" }
@@ -85,7 +85,7 @@ slack = [
   "slack-bolt>=1.18.0",
 ]
 ebpf = [
-  # Wave 5+ - kernel-adjacent attestation per Patent M. The Rust subcrate
+  # Wave 5+ - kernel-adjacent attestation. The Rust subcrate
   # will be called out to from the Python core when this extra is installed.
   "bcc>=0.29.0; sys_platform == 'linux'",
 ]
@@ -117,11 +117,12 @@ alter-runtime = "alter_runtime.cli:main"
 [project.urls]
 Homepage = "https://truealter.com"
 Documentation = "https://truealter.com/docs/alter-runtime"
-Repository = "https://github.com/true-alter/Alter"
-"Bug Tracker" = "https://github.com/true-alter/Alter/issues"
+Repository = "https://github.com/true-alter/alter-runtime"
+"Bug Tracker" = "https://github.com/true-alter/alter-runtime/issues"
 
 [tool.hatch.build.targets.wheel]
 packages = ["alter_runtime"]
+exclude = ["alter_runtime/**/tests", "alter_runtime/**/tests/**"]
 
 [tool.hatch.build.targets.wheel.force-include]
 "alter_runtime/services/systemd/alter-runtime.service.in" = "alter_runtime/services/systemd/alter-runtime.service.in"