assay-verify 0.1.0__tar.gz

assay_verify-0.1.0/PKG-INFO

@@ -0,0 +1,59 @@
+Metadata-Version: 2.4
+Name: assay-verify
+Version: 0.1.0
+Summary: Verification SDK for AI agent outputs - attest-at-generation, verify-on-consume. Pure stdlib, zero dependencies.
+License: MIT
+Project-URL: Homepage, https://github.com/chunxiaoxx/nautilus-compass
+Project-URL: Protocol, https://github.com/chunxiaoxx/nautilus-compass/blob/main/docs/protocol/ASSAY_PROTOCOL_V0.md
+Keywords: ai,agents,verification,provenance,ed25519,receipts,benchmark,trust
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+
+# assay-verify
+
+**AI 产出物的验证 SDK** — Let's Encrypt 模式,不是穆迪模式。验证不是一项服务,
+是默认。Assay Protocol v0 的参考实现(CC-BY,任何人可实现)。
+
+## 三行代码
+
+```python
+from assay_verify import verify, attest, keygen
+
+keygen("my.key")                                # 一次性:生成密钥对
+sig = attest("claims.json", "my.key")           # 生产端:产出即打包(自动签名)
+result = verify("claims.json", sig, pub_hex)    # 消费端:一行验真
+```
+
+自定义声明(基准数字、agent 产出):
+
+```python
+payload = {"agent": "my-bot", "benchmark": "swe-x", "score": 0.83,
+           "sha256": hashlib.sha256(artifacts).hexdigest()}
+sig = attest("run.log", "my.key", payload=payload)
+```
+
+## 三态语义(诚实验证器必须能说"算不了")
+
+- `VALID` — 签名有效且哈希吻合
+- `INVALID` — 验签失败(篡改或错钥)
+- `MALFORMED` — 材料缺失/格式错
+
+## 特性
+
+- **零第三方依赖**,纯标准库(python ≥3.8)
+- ed25519(RFC 8032)纯 python 实现,与 nautilus-compass 主实现**交叉互验**通过
+- 向后兼容:直接验证 compass 已发布的签名成绩单(docs/wall/)
+
+## 安装(即将上 PyPI)
+
+```bash
+pip install assay-verify
+```
+
+或直接拷贝 `assay_verify/` 目录(单包,无依赖,欢迎 vendor)。

assay_verify-0.1.0/README.md

@@ -0,0 +1,42 @@
+# assay-verify
+
+**AI 产出物的验证 SDK** — Let's Encrypt 模式,不是穆迪模式。验证不是一项服务,
+是默认。Assay Protocol v0 的参考实现(CC-BY,任何人可实现)。
+
+## 三行代码
+
+```python
+from assay_verify import verify, attest, keygen
+
+keygen("my.key")                                # 一次性:生成密钥对
+sig = attest("claims.json", "my.key")           # 生产端:产出即打包(自动签名)
+result = verify("claims.json", sig, pub_hex)    # 消费端:一行验真
+```
+
+自定义声明(基准数字、agent 产出):
+
+```python
+payload = {"agent": "my-bot", "benchmark": "swe-x", "score": 0.83,
+           "sha256": hashlib.sha256(artifacts).hexdigest()}
+sig = attest("run.log", "my.key", payload=payload)
+```
+
+## 三态语义(诚实验证器必须能说"算不了")
+
+- `VALID` — 签名有效且哈希吻合
+- `INVALID` — 验签失败(篡改或错钥)
+- `MALFORMED` — 材料缺失/格式错
+
+## 特性
+
+- **零第三方依赖**,纯标准库(python ≥3.8)
+- ed25519(RFC 8032)纯 python 实现,与 nautilus-compass 主实现**交叉互验**通过
+- 向后兼容:直接验证 compass 已发布的签名成绩单(docs/wall/)
+
+## 安装(即将上 PyPI)
+
+```bash
+pip install assay-verify
+```
+
+或直接拷贝 `assay_verify/` 目录(单包,无依赖,欢迎 vendor)。

assay_verify-0.1.0/assay_verify/__init__.py

@@ -0,0 +1,17 @@
+# -*- coding: utf-8 -*-
+"""assay-verify · AI 产出物的验证 SDK(Let's Encrypt 模式,Assay Protocol v0)。
+
+三行代码::
+
+    from assay_verify import verify, attest, keygen
+
+    keygen("my.key")                                   # 一次性
+    sig = attest("claims.json", "my.key")              # 生产端:产出即打包
+    result = verify("claims.json", sig, pub_hex)       # 消费端:一行验真(三态)
+
+零第三方依赖,纯标准库。协议:Assay Protocol v0(CC-BY)。
+"""
+from ._core import verify, attest, keygen, AssayResult  # noqa: F401
+
+__version__ = "0.1.0"
+__all__ = ["verify", "attest", "keygen", "AssayResult"]

assay_verify-0.1.0/assay_verify/_core.py

@@ -0,0 +1,211 @@
+# -*- coding: utf-8 -*-
+"""assay-verify 核心:纯 python ed25519(RFC 8032)+ 证据签名 + 三态验真。
+
+ed25519 参考实现与 nautilus-compass tools/verifypack、scripts/verify_receipt.py
+同源交叉验证(两套实现互验 VALID,2026-09-19)。
+"""
+from __future__ import annotations
+
+import hashlib
+import json
+import secrets
+from dataclasses import dataclass
+from pathlib import Path
+
+# ── ed25519(RFC 8032,签名+验证参考实现)────────────────────────────
+_p = 2**255 - 19
+_q = 2**252 + 27742317777372353535851937790883648493
+
+
+def _inv(x: int) -> int:
+    return pow(x, _p - 2, _p)
+
+
+_d = -121665 * _inv(121666) % _p
+_I = pow(2, (_p - 1) // 4, _p)
+
+
+def _xrecover(y: int) -> int:
+    xx = (y * y - 1) * _inv(_d * y * y + 1)
+    x = pow(xx, (_p + 3) // 8, _p)
+    if (x * x - xx) % _p != 0:
+        x = x * _I % _p
+    if x % 2 != 0:
+        x = _p - x
+    return x
+
+
+_By = 4 * _inv(5) % _p
+_Bx = _xrecover(_By)
+_B = (_Bx % _p, _By % _p, 1, _Bx * _By % _p)
+
+
+def _edwards_add(P, Q):
+    x1, y1, z1, t1 = P
+    x2, y2, z2, t2 = Q
+    a = (y1 - x1) * (y2 - x2) % _p
+    b = (y1 + x1) * (y2 + x2) % _p
+    c = t1 * 2 * _d * t2 % _p
+    dd = z1 * 2 * z2 % _p
+    e, f, g, h = b - a, dd - c, dd + c, b + a
+    return (e * f % _p, g * h % _p, f * g % _p, e * h % _p)
+
+
+def _scalarmult(P, e):
+    if e == 0:
+        return (0, 1, 1, 0)
+    Q = _scalarmult(P, e // 2)
+    Q = _edwards_add(Q, Q)
+    if e & 1:
+        Q = _edwards_add(Q, P)
+    return Q
+
+
+def _point_decompress(s: bytes):
+    if len(s) != 32:
+        raise ValueError("bad point")
+    y = int.from_bytes(s, "little")
+    sign = y >> 255
+    y &= (1 << 255) - 1
+    x = _xrecover(y)
+    if x & 1 != sign:
+        x = _p - x
+    P = (x, y, 1, x * y % _p)
+    if not (0 <= x < _p and 0 <= y < _p):
+        raise ValueError("out of range")
+    return P
+
+
+def _sha512(m: bytes) -> bytes:
+    return hashlib.sha512(m).digest()
+
+
+def _sha512_modq(m: bytes) -> int:
+    return int.from_bytes(_sha512(m), "little") % _q
+
+
+def _encode_point(P) -> bytes:
+    """射影坐标 → 32B 压缩编码(必须先仿射化:x=X/Z,y=Y/Z,Z≠1 时直接取 Y 是错的)。"""
+    x, y, z, _ = P
+    zinv = _inv(z)
+    x = x * zinv % _p
+    y = y * zinv % _p
+    return (y | ((x & 1) << 255)).to_bytes(32, "little")
+
+
+def _ed25519_verify(public: bytes, msg: bytes, signature: bytes) -> bool:
+    if len(public) != 32 or len(signature) != 64:
+        return False
+    try:
+        A = _point_decompress(public)
+        R = _point_decompress(signature[:32])
+    except ValueError:
+        return False
+    S = int.from_bytes(signature[32:], "little")
+    h = _sha512_modq(signature[:32] + public + msg)
+    sB = _scalarmult(_B, S)
+    hA = _scalarmult(A, h)
+    RhA = _edwards_add(R, hA)
+    return (sB[1] * RhA[2] - RhA[1] * sB[2]) % _p == 0 \
+        and (sB[0] * RhA[2] - RhA[0] * sB[2]) % _p == 0
+
+
+def _ed25519_sign(msg: bytes, seed: bytes) -> bytes:
+    h = _sha512(seed)
+    a = int.from_bytes(h[:32], "little")
+    a &= (1 << 254) - 8
+    a |= 1 << 254
+    pub = _encode_point(_scalarmult(_B, a))
+    prefix = h[32:]
+    r = _sha512_modq(prefix + msg)
+    Rs = _encode_point(_scalarmult(_B, r))
+    s = (r + _sha512_modq(Rs + pub + msg) * a) % _q
+    return Rs + s.to_bytes(32, "little")
+
+
+def _ed25519_keypair() -> tuple[bytes, bytes]:
+    seed = secrets.token_bytes(32)
+    return seed, _pub_from_seed(seed)
+
+
+def _pub_from_seed(seed: bytes) -> bytes:
+    h = _sha512(seed)
+    a = int.from_bytes(h[:32], "little")
+    a &= (1 << 254) - 8
+    a |= 1 << 254
+    return _encode_point(_scalarmult(_B, a))
+
+
+# ── 协议层(Assay Protocol v0)────────────────────────────────────────
+def canonical_json(obj) -> str:
+    return json.dumps(obj, ensure_ascii=False, sort_keys=True, separators=(",", ":"))
+
+
+def default_payload(target: Path) -> dict:
+    """墙面成绩单格式:{"scorecard": 文件名, "sha256": 全文哈希}。"""
+    return {"scorecard": target.name,
+            "sha256": hashlib.sha256(target.read_bytes()).hexdigest()}
+
+
+@dataclass
+class AssayResult:
+    ok: bool
+    target: str
+    sha256: str
+    detail: str = ""
+
+    def __bool__(self):
+        return self.ok
+
+
+def verify(target, sig, pubkey, payload=None) -> AssayResult:
+    """消费端一行:验 (目标文件, .sig, 公钥hex) 三元组。三态:
+    VALID / INVALID(验签失败) / MALFORMED(材料缺失或格式错)。"""
+    target, sig = Path(target), Path(sig)
+    if not target.is_file():
+        return AssayResult(False, str(target), "", "target missing (MALFORMED)")
+    if not sig.is_file():
+        return AssayResult(False, str(target), "", "signature file missing (MALFORMED)")
+    try:
+        sig_bytes = bytes.fromhex(sig.read_text(encoding="utf-8").strip())
+        pub = bytes.fromhex(str(pubkey).strip())
+    except ValueError as e:
+        return AssayResult(False, str(target), "", f"bad hex: {e} (MALFORMED)")
+    if len(sig_bytes) != 64 or len(pub) != 32:
+        return AssayResult(False, str(target), "", "bad length (MALFORMED)")
+    try:
+        pay = payload if payload is not None else default_payload(target)
+        msg = canonical_json(pay).encode("utf-8")
+    except (TypeError, ValueError) as e:
+        return AssayResult(False, str(target), "", f"payload error: {e} (MALFORMED)")
+    ok = _ed25519_verify(pub, msg, sig_bytes)
+    digest = pay.get("sha256") if isinstance(pay, dict) else None
+    if not digest:
+        digest = hashlib.sha256(target.read_bytes()).hexdigest()
+    return AssayResult(ok, str(target), str(digest),
+                       "VALID" if ok else "INVALID (signature mismatch)")
+
+
+def keygen(key_path, name="assay") -> Path:
+    """生成密钥对:写 <key_path>(私钥 hex)与同名 .pub。返回私钥路径。"""
+    seed, pub = _ed25519_keypair()
+    kp = Path(key_path)
+    kp.parent.mkdir(parents=True, exist_ok=True)
+    kp.write_text(seed.hex() + "\n", encoding="utf-8", newline="\n")
+    pp = kp.with_suffix(".pub")
+    pp.write_text(pub.hex() + "\n", encoding="utf-8", newline="\n")
+    return kp
+
+
+def attest(target, key_path, payload=None, out=None) -> Path:
+    """生产端一行:对目标文件签名,产 <target>.sig(返回 sig 路径)。
+    payload 缺省=墙面成绩单格式;自定义声明传 dict。"""
+    target = Path(target)
+    seed = bytes.fromhex(Path(key_path).read_text(encoding="utf-8").strip())
+    if len(seed) != 32:
+        raise ValueError("key file must contain 32-byte hex seed")
+    pay = payload if payload is not None else default_payload(target)
+    sig = _ed25519_sign(canonical_json(pay).encode("utf-8"), seed)
+    out = Path(out) if out else target.with_suffix(target.suffix + ".sig")
+    out.write_text(sig.hex(), encoding="utf-8", newline="\n")
+    return out

assay_verify-0.1.0/assay_verify/mcp.py

@@ -0,0 +1,83 @@
+# -*- coding: utf-8 -*-
+"""assay-verify 自带 MCP 服务器(stdio JSON-RPC)——验证能力经 MCP 分发。
+
+运行:python -m assay_verify.mcp
+任何 MCP 客户端(Claude Code/Desktop/Cursor/Cline…)配置::
+
+    {"mcpServers": {"assay": {"command": "python", "args": ["-m", "assay_verify.mcp"]}}}
+
+即获得工具 `assay_verify`——对任意 (target, sig, pubkey) 一键三态验真。
+零第三方依赖。
+"""
+from __future__ import annotations
+
+import json
+import sys
+
+from ._core import AssayResult, verify
+
+PROTOCOL = "2024-11-05"
+TOOLS = [{
+    "name": "assay_verify",
+    "description": "Verify a signed AI artifact (Assay Protocol v0). Returns "
+                   "VALID / INVALID / MALFORMED with sha256 anchor.",
+    "inputSchema": {
+        "type": "object",
+        "properties": {
+            "target": {"type": "string", "description": "path to the target file"},
+            "sig": {"type": "string", "description": "path to the .sig file"},
+            "pubkey": {"type": "string", "description": "verifier public key (hex)"},
+            "payload_json": {"type": "string",
+                             "description": "optional canonical payload JSON "
+                                            "(default: wall scorecard format)"},
+        },
+        "required": ["target", "sig", "pubkey"],
+    },
+}]
+
+
+def _result(r: AssayResult) -> dict:
+    return {"content": [{"type": "text",
+                         "text": json.dumps(
+                             {"ok": r.ok, "detail": r.detail, "target": r.target,
+                              "sha256": r.sha256}, ensure_ascii=False)}]}
+
+
+def _handle(method: str, params: dict) -> dict:
+    if method == "initialize":
+        return {"protocolVersion": PROTOCOL, "capabilities": {"tools": {}},
+                "serverInfo": {"name": "assay-verify", "version": "0.1.0"}}
+    if method == "tools/list":
+        return {"tools": TOOLS}
+    if method == "tools/call":
+        args = params.get("arguments", {})
+        payload = None
+        if args.get("payload_json"):
+            payload = json.loads(args["payload_json"])
+        return _result(verify(args["target"], args["sig"], args["pubkey"],
+                              payload=payload))
+    raise ValueError(f"unknown method: {method}")
+
+
+def serve(stdin=sys.stdin.buffer, stdout=sys.stdout.buffer) -> None:
+    """极简 MCP stdio 循环:Content-Length 分帧 JSON-RPC。"""
+    while True:
+        line = stdin.readline()
+        if not line:
+            break
+        text = line.decode("utf-8", "replace").strip()
+        if not text.startswith("{"):
+            continue
+        try:
+            msg = json.loads(text)
+            out = {"jsonrpc": "2.0", "id": msg.get("id"),
+                   "result": _handle(msg.get("method", ""), msg.get("params", {}) or {})}
+        except Exception as e:  # noqa: BLE001 — 错误也走 JSON-RPC
+            out = {"jsonrpc": "2.0", "id": msg.get("id") if isinstance(msg, dict) else None,
+                   "error": {"code": -32603, "message": str(e)}}
+        stdout.write((json.dumps(out, ensure_ascii=False) + "\n").encode("utf-8"))
+        stdout.flush()
+
+
+if __name__ == "__main__":
+    serve()

assay_verify-0.1.0/assay_verify.egg-info/PKG-INFO

@@ -0,0 +1,59 @@
+Metadata-Version: 2.4
+Name: assay-verify
+Version: 0.1.0
+Summary: Verification SDK for AI agent outputs - attest-at-generation, verify-on-consume. Pure stdlib, zero dependencies.
+License: MIT
+Project-URL: Homepage, https://github.com/chunxiaoxx/nautilus-compass
+Project-URL: Protocol, https://github.com/chunxiaoxx/nautilus-compass/blob/main/docs/protocol/ASSAY_PROTOCOL_V0.md
+Keywords: ai,agents,verification,provenance,ed25519,receipts,benchmark,trust
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Security :: Cryptography
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+
+# assay-verify
+
+**AI 产出物的验证 SDK** — Let's Encrypt 模式,不是穆迪模式。验证不是一项服务,
+是默认。Assay Protocol v0 的参考实现(CC-BY,任何人可实现)。
+
+## 三行代码
+
+```python
+from assay_verify import verify, attest, keygen
+
+keygen("my.key")                                # 一次性:生成密钥对
+sig = attest("claims.json", "my.key")           # 生产端:产出即打包(自动签名)
+result = verify("claims.json", sig, pub_hex)    # 消费端:一行验真
+```
+
+自定义声明(基准数字、agent 产出):
+
+```python
+payload = {"agent": "my-bot", "benchmark": "swe-x", "score": 0.83,
+           "sha256": hashlib.sha256(artifacts).hexdigest()}
+sig = attest("run.log", "my.key", payload=payload)
+```
+
+## 三态语义(诚实验证器必须能说"算不了")
+
+- `VALID` — 签名有效且哈希吻合
+- `INVALID` — 验签失败(篡改或错钥)
+- `MALFORMED` — 材料缺失/格式错
+
+## 特性
+
+- **零第三方依赖**,纯标准库(python ≥3.8)
+- ed25519(RFC 8032)纯 python 实现,与 nautilus-compass 主实现**交叉互验**通过
+- 向后兼容:直接验证 compass 已发布的签名成绩单(docs/wall/)
+
+## 安装(即将上 PyPI)
+
+```bash
+pip install assay-verify
+```
+
+或直接拷贝 `assay_verify/` 目录(单包,无依赖,欢迎 vendor)。

assay_verify-0.1.0/assay_verify.egg-info/SOURCES.txt

@@ -0,0 +1,11 @@
+README.md
+pyproject.toml
+assay_verify/__init__.py
+assay_verify/_core.py
+assay_verify/mcp.py
+assay_verify.egg-info/PKG-INFO
+assay_verify.egg-info/SOURCES.txt
+assay_verify.egg-info/dependency_links.txt
+assay_verify.egg-info/top_level.txt
+tests/test_core.py
+tests/test_mcp.py

assay_verify-0.1.0/assay_verify.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

assay_verify-0.1.0/assay_verify.egg-info/top_level.txt

@@ -0,0 +1 @@
+assay_verify

assay_verify-0.1.0/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "assay-verify"
+version = "0.1.0"
+description = "Verification SDK for AI agent outputs - attest-at-generation, verify-on-consume. Pure stdlib, zero dependencies."
+readme = "README.md"
+requires-python = ">=3.8"
+license = {text = "MIT"}
+keywords = ["ai", "agents", "verification", "provenance", "ed25519", "receipts", "benchmark", "trust"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Topic :: Software Development :: Quality Assurance",
+    "Topic :: Security :: Cryptography",
+]
+
+[project.urls]
+Homepage = "https://github.com/chunxiaoxx/nautilus-compass"
+Protocol = "https://github.com/chunxiaoxx/nautilus-compass/blob/main/docs/protocol/ASSAY_PROTOCOL_V0.md"
+
+[tool.setuptools]
+packages = ["assay_verify"]

assay_verify-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

assay_verify-0.1.0/tests/test_core.py

@@ -0,0 +1,49 @@
+# -*- coding: utf-8 -*-
+"""assay-verify SDK 测试:往返 + 跨实现兼容(验 compass 已发真成绩单)+ 三态。"""
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+from assay_verify import verify, attest, keygen  # noqa: E402
+
+ROOT = Path(__file__).resolve().parents[3]
+
+
+def test_roundtrip_and_tamper(tmp_path):
+    t = tmp_path / "claims.md"
+    t.write_text("# claims\naccuracy 0.91\n", encoding="utf-8")
+    kp = keygen(tmp_path / "k")
+    pub = (tmp_path / "k.pub").read_text(encoding="utf-8").strip()
+    sig = attest(t, kp)
+    r = verify(t, sig, pub)
+    assert r.ok and r.detail == "VALID"
+    t.write_text("# claims tampered\n", encoding="utf-8")
+    r2 = verify(t, sig, pub)
+    assert not r2.ok and "INVALID" in r2.detail
+
+
+def test_malformed_missing(tmp_path):
+    r = verify(tmp_path / "nope.md", tmp_path / "nope.sig", "00" * 32)
+    assert not r.ok and "MALFORMED" in r.detail
+
+
+def test_custom_payload_roundtrip(tmp_path):
+    t = tmp_path / "run.log"
+    t.write_text("bench output ...\n", encoding="utf-8")
+    kp = keygen(tmp_path / "k2")
+    pub = (tmp_path / "k2.pub").read_text(encoding="utf-8").strip()
+    pay = {"agent": "demo-bot", "benchmark": "swe-x", "score": 0.83,
+           "sha256": "deadbeef"}
+    sig = attest(t, kp, payload=pay)
+    assert verify(t, sig, pub, payload=pay).ok
+    assert not verify(t, sig, pub).ok  # payload 不匹配→INVALID
+
+
+def test_backward_compat_real_scorecards():
+    """跨实现兼容证明:必须能验 compass 主仓已发布的两张真成绩单。"""
+    pub = (ROOT / ".verifypack" / "compass.pub").read_text(encoding="utf-8").strip()
+    for name in ("EXAM5_SCORECARD.md", "EXAM5_SCORECARD_RETAKE1.md"):
+        t = ROOT / "docs" / "wall" / name
+        s = ROOT / "docs" / "wall" / (name.replace(".md", ".sig"))
+        r = verify(t, s, pub)
+        assert r.ok, f"{name}: {r.detail}"

assay_verify-0.1.0/tests/test_mcp.py

@@ -0,0 +1,39 @@
+# -*- coding: utf-8 -*-
+"""MCP stdio 服务器测试:initialize → tools/list → tools/call(真成绩单)往返。"""
+import io
+import json
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+from assay_verify import mcp  # noqa: E402
+
+ROOT = Path(__file__).resolve().parents[3]
+
+
+def _rpc(server_in, server_out, method, params=None, id_=1):
+    server_in.write((json.dumps({"jsonrpc": "2.0", "id": id_,
+                                 "method": method, "params": params or {}}) + "\n").encode("utf-8"))
+    server_in.seek(0)
+    mcp.serve(server_in, server_out)
+    server_out.seek(0)
+    return json.loads(server_out.readline().decode("utf-8"))
+
+
+def test_mcp_roundtrip_real_scorecard():
+    stdin, stdout = io.BytesIO(), io.BytesIO()
+    r1 = _rpc(stdin, stdout, "initialize")
+    assert r1["result"]["serverInfo"]["name"] == "assay-verify"
+
+    stdin, stdout = io.BytesIO(), io.BytesIO()
+    r2 = _rpc(stdin, stdout, "tools/list")
+    assert r2["result"]["tools"][0]["name"] == "assay_verify"
+
+    pub = (ROOT / ".verifypack" / "compass.pub").read_text(encoding="utf-8").strip()
+    t = ROOT / "docs" / "wall" / "EXAM5_SCORECARD.md"
+    s = ROOT / "docs" / "wall" / "EXAM5_SCORECARD.sig"
+    stdin, stdout = io.BytesIO(), io.BytesIO()
+    r3 = _rpc(stdin, stdout, "tools/call", {"arguments": {
+        "target": str(t), "sig": str(s), "pubkey": pub}})
+    text = r3["result"]["content"][0]["text"]
+    assert json.loads(text)["detail"] == "VALID"