attestlayer 0.1.0__tar.gz

attestlayer-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,41 @@
+name: ci
+on: [push, pull_request]
+jobs:
+  sdk:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v3
+      - run: uv venv -p ${{ matrix.python }} && uv pip install -e ".[dev]" -e "./cloud[dev]"
+      - run: .venv/bin/ruff check attest tests examples cloud
+      - run: .venv/bin/pytest -q
+      - run: cd cloud && ../.venv/bin/pytest -q
+      - run: ATTEST_AUTO_APPROVE=1 .venv/bin/python examples/unknown_app.py
+      - run: ATTEST_AUTO_APPROVE=1 .venv/bin/python examples/langgraph_agent.py
+      - run: ATTEST_AUTO_APPROVE=1 .venv/bin/python examples/openai_agent.py
+      - run: .venv/bin/python examples/api_only.py
+      - run: .venv/bin/attest --help && .venv/bin/attest-mcp --help
+  docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v3
+      - run: uv venv -p 3.12 && uv pip install mkdocs mkdocs-material
+      - run: .venv/bin/mkdocs build --strict
+  typescript:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - run: cd packages/attest-ts && npm install --no-audit --no-fund && npm run lint && npm test && npm run build
+  dashboard:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - run: cd dashboard && npm install --no-audit --no-fund && npm run build

attestlayer-0.1.0/.github/workflows/docs.yml

@@ -0,0 +1,23 @@
+name: docs-pages
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+    paths: ["docs/site/**", "mkdocs.yml", ".github/workflows/docs.yml"]
+permissions: { contents: read, pages: write, id-token: write }
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v3
+      - run: uv venv -p 3.12 && uv pip install mkdocs mkdocs-material && .venv/bin/mkdocs build --strict
+      - uses: actions/upload-pages-artifact@v3
+        with: { path: site }
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: { name: github-pages, url: "${{ steps.d.outputs.page_url }}" }
+    steps:
+      - id: d
+        uses: actions/deploy-pages@v4

attestlayer-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,75 @@
+name: release
+# Tag a version to publish everything:   git tag v0.1.0 && git push --tags
+on:
+  push:
+    tags: ["v*"]
+permissions:
+  contents: write
+  id-token: write      # PyPI trusted publishing + npm provenance
+  packages: write      # GHCR images
+jobs:
+  pypi:
+    runs-on: ubuntu-latest
+    environment: pypi
+    env:
+      # `secrets` is not available in step-level `if:`; map it once and test the env value instead.
+      HAS_TOKEN: ${{ secrets.PYPI_API_TOKEN != '' }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v3
+      - run: uv venv -p 3.12 && uv pip install -e ".[dev]" -e "./cloud[dev]" && .venv/bin/pytest -q && (cd cloud && ../.venv/bin/pytest -q)
+      - run: uv build
+      # Two supported paths (see DEPLOY.md §1):
+      #   a. Trusted publishing — nothing to configure here; add a pending publisher on pypi.org.
+      #   b. API token — add the repository secret PYPI_API_TOKEN; it takes precedence when present.
+      - name: Publish with an API token
+        if: env.HAS_TOKEN == 'true'
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}
+          skip-existing: true
+      - name: Publish with trusted publishing
+        if: env.HAS_TOKEN != 'true'
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+  npm:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22, registry-url: "https://registry.npmjs.org" }
+      - run: cd packages/attest-ts && npm install --no-audit --no-fund && npm test && npm run build
+      - id: check
+        run: |
+          cd packages/attest-ts
+          name=$(node -p "require('./package.json').name")
+          version=$(node -p "require('./package.json').version")
+          if npm view "$name@$version" version >/dev/null 2>&1; then
+            echo "published=true" >> "$GITHUB_OUTPUT"
+            echo "::notice::$name@$version is already on npm — skipping publish"
+          else
+            echo "published=false" >> "$GITHUB_OUTPUT"
+          fi
+      - if: steps.check.outputs.published == 'false'
+        run: cd packages/attest-ts && npm publish --provenance --access public
+        env: { NODE_AUTH_TOKEN: "${{ secrets.NPM_TOKEN }}" }
+  images:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/login-action@v3
+        with: { registry: ghcr.io, username: "${{ github.actor }}", password: "${{ secrets.GITHUB_TOKEN }}" }
+      - id: v
+        run: echo "tag=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
+      - uses: docker/build-push-action@v6
+        with: { context: ., file: deploy/Dockerfile.api, push: true, tags: "ghcr.io/dev-prathap/attest-api:${{ steps.v.outputs.tag }},ghcr.io/dev-prathap/attest-api:latest" }
+      - uses: docker/build-push-action@v6
+        with: { context: ., file: deploy/Dockerfile.dashboard, push: true, tags: "ghcr.io/dev-prathap/attest-dashboard:${{ steps.v.outputs.tag }},ghcr.io/dev-prathap/attest-dashboard:latest" }
+  github-release:
+    runs-on: ubuntu-latest
+    needs: [pypi, npm, images]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: softprops/action-gh-release@v2
+        with: { generate_release_notes: true }

attestlayer-0.1.0/.gitignore

@@ -0,0 +1,21 @@
+.env
+.env.*
+*.key
+node_modules/
+.venv/
+__pycache__/
+.next/
+dist/
+_ref-*/
+.attest/
+*.sqlite
+.pytest_cache/
+.ruff_cache/
+uv.lock
+/site/
+attest-cloud.sqlite
+dashboard/node_modules/
+dashboard/.next/
+dashboard/next-env.d.ts
+packages/attest-ts/node_modules/
+packages/attest-ts/dist/

attestlayer-0.1.0/CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+## 0.1.0 — first release
+
+Python SDK (`attestlayer`): descriptor + registry, policy engine (R0–R4, YAML, groups, agent overrides), hash-chained
+SQLite ledger with signed checkpoints, retention and anchoring, verification ladder with 19 reviewed recipes across
+12 systems plus convention / OpenAPI / MCP-pair / declarative drivers, gates (console, Slack, web inbox, webhook,
+Teams, email, LangGraph interrupt, pending + resume), adapters (LangGraph, OpenAI Agents, Claude Agent SDK, CrewAI,
+DeerFlow), MCP proxy and MCP server, HTTP gateway, exports (JSON, CSV, IETF audit trail, EU AI Act pack), digests
+with anomaly flags, opt-in telemetry. TypeScript SDK (`attestlayer`) with hash parity, Vercel AI SDK /
+LangChain.js / Mastra adapters. Attest Cloud (orgs, keys, per-org chain, confirm inbox, policies, billing, SSO,
+Nango-based verify) and dashboard.

attestlayer-0.1.0/DEPLOY.md

@@ -0,0 +1,155 @@
+# Deploying Attest — the runbook
+
+Brand **Attest**. Packages: PyPI **`attestlayer`** (import `attest`, CLI `attest`, `attest-mcp`, `attest-mcp-server`,
+`attest-gateway`), npm **`attestlayer`**, images **`ghcr.io/dev-prathap/attest-api`** and **`attest-dashboard`**,
+docs at **https://dev-prathap.github.io/ATTEST/**. Everything ships from one git tag.
+
+## 0. One-time accounts (you)
+
+| what | where | why |
+| --- | --- | --- |
+| PyPI — **either** a pending publisher **or** a token | see below | publishes the Python SDK |
+| GitHub environment `pypi` | repo → Settings → Environments → New: `pypi` | required by the trusted publisher path |
+| npm org `attestlayer` | npmjs.com → create org `attestlayer` (free, public) → Access token (Automation) | `attestlayer` |
+| GitHub secret `NPM_TOKEN` | repo → Settings → Secrets → Actions | npm publish with provenance |
+| GitHub Pages | repo → Settings → Pages → Source: **GitHub Actions** | docs site |
+| Domain `attestlayer.dev` (or .io/.ai) | any registrar | `app.` dashboard, `api.` cloud, `docs.` (CNAME to Pages, optional) |
+
+### PyPI: pick one path
+
+**a. Trusted publishing (recommended — no token anywhere).** The project does not exist on PyPI yet, so add a
+*pending* publisher: pypi.org → **Publishing** (left sidebar) → "Add a new pending publisher":
+
+| field | value |
+| --- | --- |
+| PyPI Project Name | `attestlayer` |
+| Owner | `dev-prathap` |
+| Repository name | `ATTEST` |
+| Workflow name | `release.yml` |
+| Environment name | `pypi` |
+
+Then create the `pypi` environment in the repo (Settings → Environments → New environment). Nothing else.
+
+**b. API token.** pypi.org → Account settings → Add API token (scope: entire account, until the project exists)
+→ `gh secret set PYPI_API_TOKEN --repo dev-prathap/ATTEST`. The workflow uses the secret when it is present and
+falls back to trusted publishing when it is not. After the first release, replace it with a project-scoped token
+or switch to path (a) and delete the secret.
+
+## 1. Release the SDKs, MCP server and images
+
+```bash
+git tag v0.1.0 && git push --tags        # release.yml: tests → PyPI → npm → GHCR images → GitHub release
+```
+
+After the workflow is green:
+
+```bash
+pip install attestlayer                   # Python SDK + CLI + attest-mcp + attest-mcp-server + attest-gateway
+npm install attestlayer              # TypeScript SDK
+uvx --from attestlayer attest-mcp-server  # run the MCP server without installing anything
+```
+
+Bump `version` in `pyproject.toml` and `packages/attest-ts/package.json` before the next tag.
+
+## 2. MCP server / proxy for Claude Code, Cursor, any MCP client
+
+Users add to their MCP config (no server to host — it runs on their machine with their tokens):
+
+```json
+{ "mcpServers": {
+    "attest": { "command": "uvx", "args": ["--from", "attestlayer", "attest-mcp-server"],
+                "env": { "ATTEST_POLICY": "attest.yaml", "GMAIL_TOKEN": "…", "HUBSPOT_TOKEN": "…" } },
+    "gmail":  { "command": "uvx", "args": ["--from", "attestlayer", "attest-mcp",
+                "--upstream", "npx -y @modelcontextprotocol/server-gmail", "--server", "gmail", "--mode", "block"] } } }
+```
+
+Approvals for `--mode block` come from `attest serve` (local inbox) or Attest Cloud; `--mode pending` returns a
+resume token. Ship the `skills/verified-actions/SKILL.md` to skills marketplaces so coding agents know the tools.
+
+## 2b. MCP registries (after the PyPI release)
+
+Listing files live in `mcp/`; the README carries the `mcp-name:` ownership markers the registry checks on PyPI.
+
+```bash
+brew install mcp-publisher                       # or the curl one-liner in the registry quickstart
+mcp-publisher login github                       # namespace io.github.dev-prathap/*
+mcp-publisher validate mcp/server.json && mcp-publisher publish mcp/server.json          # io.github.dev-prathap/attest
+mcp-publisher validate mcp/server-proxy.json && mcp-publisher publish mcp/server-proxy.json   # …/attest-proxy
+```
+Bump `version` in both files with each release (tests assert they match `pyproject.toml`).
+
+**Claude Desktop / Smithery (MCPB bundle):** `npx @anthropic-ai/mcpb pack mcp/mcpb attest.mcpb` → attach the
+bundle to the GitHub release (`softprops/action-gh-release` already publishes release assets; add the file) and
+`smithery mcp publish ./attest.mcpb -n attestlayer/attest`.
+
+**Glama:** `glama.json` at the repo root lists the maintainer; claim the server at glama.ai/mcp after the repo is
+indexed. **Cursor / other directories:** point at the MCP Registry entry.
+
+## 3. Attest Cloud (API + dashboard)
+
+**Option A — one VPS, one command** (Hetzner / DigitalOcean / Lightsail, ~$6/mo). Point `api.` and `app.`
+A records at the host first, then:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/dev-prathap/ATTEST/main/deploy/bootstrap.sh | \
+  ATTEST_DOMAIN=attestlayer.dev ATTEST_ACME_EMAIL=you@example.com bash
+```
+
+It installs Docker, clones the repo to `/opt/attest`, generates secrets into `deploy/.env`, starts Postgres +
+API + dashboard behind Caddy (automatic TLS), and installs cron jobs for the nightly `pg_dump` and the daily
+ledger checkpoint. It then prints the `curl` that creates your first org.
+
+Manual equivalent: `cp .env.example .env` then
+`docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d --build`.
+
+**Option B — Fly.io**: `cd deploy && fly launch --copy-config` (sample `fly.toml`), `fly postgres create`,
+`fly secrets set DATABASE_URL=… ATTEST_CLOUD_BOOTSTRAP_TOKEN=… ATTEST_SIGNING_KEY=…`, `fly deploy`.
+Dashboard: deploy `dashboard/` to Vercel (`NEXT_PUBLIC_ATTEST_CLOUD_URL=https://api.attestlayer.dev`).
+
+**Option C — on-prem for a customer**: `deploy/on-prem/docker-compose.yml` (SQLite, no external services).
+
+Env vars the API reads:
+
+| var | purpose |
+| --- | --- |
+| `DATABASE_URL` | `postgresql+psycopg://…` (SQLite for dev) |
+| `ATTEST_CLOUD_BOOTSTRAP_TOKEN` | required to create orgs and to set plans |
+| `ATTEST_SIGNING_KEY` | HMAC key for checkpoints and export manifests |
+| `ATTEST_CORS_ORIGINS` | dashboard origin(s) |
+| `ATTEST_RATE_LIMIT` / `ATTEST_RATE_BURST` | per-key rate limit |
+| `SLACK_SIGNING_SECRET` | global fallback for Slack interactivity (orgs can set their own) |
+| `STRIPE_SECRET_KEY`, `STRIPE_WEBHOOK_SECRET`, `STRIPE_PRICE_TEAM`, `STRIPE_PRICE_PRO` | billing |
+| `OIDC_ISSUER`, `OIDC_CLIENT_ID`, `OIDC_CLIENT_SECRET`, `OIDC_REDIRECT_URI`, `ATTEST_SESSION_SECRET`, `ATTEST_DASHBOARD_URL` | SSO |
+| `SENTRY_DSN` | error tracking (optional) |
+
+**First org**:
+```bash
+curl -X POST https://api.attestlayer.dev/v1/orgs -H "X-Bootstrap-Token: $ATTEST_CLOUD_BOOTSTRAP_TOKEN" \
+     -H "Content-Type: application/json" -d '{"name": "Acme", "domain": "acme.com"}'      # → admin api_key (shown once)
+```
+Open the dashboard → Settings → paste the key → create an `agent` key for SDKs and `approver` keys for people
+(or turn on SSO). Slack: create an app (bot scopes `chat:write`, interactivity URL `https://api.attestlayer.dev/slack/interact`),
+put the bot token + signing secret + channel in org settings. Stripe: create Team / Pro prices, set the price ids,
+webhook `https://api.attestlayer.dev/stripe/webhook` for `checkout.session.completed`, `customer.subscription.*`, `invoice.*`.
+
+## 4. Docs site
+
+Pushes to `main` that touch `docs/site/` publish to GitHub Pages (`docs.yml`). Custom domain: add `docs.attestlayer.dev`
+CNAME in Settings → Pages and set `site_url` in `mkdocs.yml`.
+
+## 5. Smoke test after a release
+
+```bash
+pip install attestlayer && attest --help && attest-mcp-server < /dev/null
+python -c "import attest; print(attest.__version__)"
+npx -y -p attestlayer node -e "import('attestlayer').then(m => console.log(Object.keys(m).length, 'exports'))"
+curl https://api.attestlayer.dev/healthz
+```
+
+## Checklist before v0.1.0
+
+- [ ] PyPI trusted publisher + `pypi` environment · [ ] npm org + `NPM_TOKEN` · [ ] Pages enabled
+- [ ] domain registered; `api.` / `app.` / `docs.` DNS
+- [ ] cloud host chosen; `.env` filled; TLS in front; backups cron; checkpoint + anchor cron
+- [ ] Slack app created; Stripe prices; (optional) OIDC app; Sentry DSN
+- [ ] `git tag v0.1.0 && git push --tags`, then the smoke test above

attestlayer-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Prathap
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

attestlayer-0.1.0/PKG-INFO

@@ -0,0 +1,137 @@
+Metadata-Version: 2.5
+Name: attestlayer
+Version: 0.1.0
+Summary: Attest — proof layer for AI agents: decide, gate, verify, attest.
+Project-URL: Homepage, https://github.com/dev-prathap/ATTEST
+Project-URL: Documentation, https://dev-prathap.github.io/ATTEST/
+Project-URL: Repository, https://github.com/dev-prathap/ATTEST
+Author: Prathap
+License: MIT
+License-File: LICENSE
+Keywords: ai-agents,audit,human-in-the-loop,langgraph,mcp,verification
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.11
+Requires-Dist: pydantic>=2.7
+Requires-Dist: pyyaml>=6.0
+Provides-Extra: dev
+Requires-Dist: langchain-core>=0.3; extra == 'dev'
+Requires-Dist: langchain>=1.0; extra == 'dev'
+Requires-Dist: langgraph>=0.2; extra == 'dev'
+Requires-Dist: openai-agents>=0.1; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.5; extra == 'dev'
+Provides-Extra: langgraph
+Requires-Dist: langchain-core>=0.3; extra == 'langgraph'
+Requires-Dist: langgraph>=0.2; extra == 'langgraph'
+Provides-Extra: openai
+Requires-Dist: openai-agents>=0.1; extra == 'openai'
+Provides-Extra: signing
+Requires-Dist: cryptography>=42; extra == 'signing'
+Provides-Extra: slack
+Requires-Dist: slack-bolt>=1.18; extra == 'slack'
+Requires-Dist: slack-sdk>=3.20; extra == 'slack'
+Description-Content-Type: text/markdown
+
+# Attest — Proof layer for AI agents
+
+[![ci](https://github.com/dev-prathap/ATTEST/actions/workflows/ci.yml/badge.svg)](https://github.com/dev-prathap/ATTEST/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/attestlayer?label=npm%20attestlayer)](https://www.npmjs.com/package/attestlayer) [![docs](https://img.shields.io/badge/docs-dev--prathap.github.io%2FATTEST-black)](https://dev-prathap.github.io/ATTEST/) [![license](https://img.shields.io/badge/license-MIT-green)](./LICENSE)
+
+> **Decide → Gate → Verify → Attest.**
+> When an AI agent takes an action in the real world, Attest decides whether it may, gates it behind a human when it matters, verifies from the system of record that it actually happened, and records tamper-evident evidence.
+
+Attest is **not** an agent framework, not a connector platform, not a guardrail filter. It is the layer that lets a team say, with proof: *"this agent did exactly this, as this person, and it worked."*
+
+## Read in this order
+
+| Doc | What it locks |
+| --- | --- |
+| [01 — Vision](./docs/01-vision.md) | What Attest is, what it is not, the thesis |
+| [02 — Product](./docs/02-product.md) | The four steps, surfaces, what a customer experiences |
+| [03 — Universal adapter](./docs/03-universal-adapter.md) | **All apps, all actions**: descriptor, entry points, verification ladder, auth, confirm, policy |
+| [04 — Architecture](./docs/04-architecture.md) | SDK + Cloud, stack, data model, ledger |
+| [05 — Market & positioning](./docs/05-market-positioning.md) | Why now, competitors, first vertical, go-to-market |
+| [06 — Build plan](./docs/06-build-plan.md) | Phases, weekly plan, what we reuse, what we do not build |
+| [07 — Decisions](./docs/07-decisions.md) | Locked decisions and open questions |
+| [08 — Phase plan](./docs/08-phase-plan.md) | Detailed phase-wise split: task IDs, deliverables, exit criteria, milestones, founder checklist |
+
+## Quickstart
+
+Brand **Attest** · PyPI `attestlayer` · npm `attestlayer` · deploy runbook in [DEPLOY.md](./DEPLOY.md).
+
+**TypeScript** — on npm today:
+
+```bash
+npm install attestlayer
+```
+
+```ts
+import { Attest } from "attestlayer";
+
+const at = new Attest({ agent: "followup-agent@v3", readers: { gmail: process.env.GMAIL_TOKEN! } });
+const sendEmail = at.wrap({ system: "gmail", verb: "send", target: "to" },
+                          async ({ to, subject, body }) => gmail.send({ to, subject, body }));
+
+await sendEmail({ to: "arun@newco.com", subject: "Proposal", body: "…" });
+```
+
+**Python** — same contract, same ledger format:
+
+```bash
+pip install attestlayer              # publishing pending; today: pip install -e ".[dev]"
+```
+
+```python
+import attest
+
+@attest.action(system="gmail", verb="send", target="to")
+def send_email(to, subject, body): ...
+```
+
+The first external send pauses for a human; the ledger row says `acknowledged`, or `verified` once Attest can
+read back with the agent's own credentials (`Attest(readers={"gmail": service})`). `attest ledger` · `attest verify`.
+Full docs: `mkdocs serve` → [docs/site](./docs/site/quickstart.md).
+
+## Repository
+
+| path | what |
+| --- | --- |
+| [attest/](./attest/) | Python SDK — descriptor, registry, policy, hash-chained ledger, verification ladder + recipes, gates (console / Slack / webhook / inbox / LangGraph interrupt / pending + resume), adapters (LangGraph, OpenAI Agents), MCP proxy, CLI, cloud client. [attest/README.md](./attest/README.md) |
+| [cloud/](./cloud/) | Attest Cloud v0 — FastAPI + Postgres: orgs, keys, agents, versioned policy, per-org hash-chained ledger, confirm inbox with Slack / webhook, exports |
+| [dashboard/](./dashboard/) | Next.js dashboard — ledger drill-down, confirm inbox, policy / keys / settings |
+| [examples/](./examples/) | unknown app (L1 → L3), LangGraph agent (two `verified` rows), OpenAI Agents, MCP config, API-only, cloud |
+| [docs/site/](./docs/site/) | documentation site (mkdocs) · [docs/](./docs/) — product docs 01–08 · [docs/notes](./docs/notes/do-extraction.md) — DO / DeerFlow extraction |
+| [deploy/](./deploy/) | Dockerfiles + compose (Postgres, API :8400, dashboard :3400) |
+| [launch/](./launch/) | Show HN, blog drafts, LangChain integration PR draft |
+| [DEPLOY.md](./DEPLOY.md) · [CHANGELOG.md](./CHANGELOG.md) | release (`git tag vX.Y.Z` → PyPI, npm, GHCR, Pages) and hosting runbook |
+
+```bash
+pytest -q && (cd cloud && pytest -q)                   # 273 + 21 tests
+ATTEST_AUTO_APPROVE=1 python examples/langgraph_agent.py
+cd deploy && cp .env.example .env && docker compose up  # cloud + dashboard
+```
+
+## One-line rules
+- We never execute the customer's action. Their tool executes; we observe, decide, gate, verify, record.
+- Coverage is universal (any app, any action, any framework, any language). Verification depth is layered and honest.
+- Open-source SDK (MIT). Paid cloud (ledger, confirm inbox, policies, exports).
+- Developer-led, self-serve, USD. No enterprise sales motion in year one.
+
+## Install from registries
+
+| where | how |
+| --- | --- |
+| PyPI *(publishing pending)* | `pip install attestlayer` → `attest`, `attest-mcp`, `attest-mcp-server`, `attest-gateway`, `attestlayer` |
+| MCP Registry | `io.github.dev-prathap/attest` (verify server) · `io.github.dev-prathap/attest-proxy` (zero-code proxy) — `uvx attestlayer` |
+| Claude Desktop / Smithery | MCPB bundle from `mcp/mcpb` (`mcpb pack mcp/mcpb`) |
+| npm | `npm install attestlayer` — **live** |
+| Docker | `ghcr.io/dev-prathap/attest-api`, `ghcr.io/dev-prathap/attest-dashboard` |
+
+<!-- mcp-name: io.github.dev-prathap/attest -->
+<!-- mcp-name: io.github.dev-prathap/attest-proxy -->
+
+## Lineage
+Attest is extracted from two working codebases: **DO** (policy engine, read-back verification pairs, evidence ledger, Nango auth) and **DeerFlow** (tool receipts, verification patterns, MCP/IM channel adapters). Nothing here is theoretical — every core mechanism already runs against real Gmail, Slack, HubSpot, Notion, Linear and Google Workspace.

attestlayer-0.1.0/README.md

@@ -0,0 +1,99 @@
+# Attest — Proof layer for AI agents
+
+[![ci](https://github.com/dev-prathap/ATTEST/actions/workflows/ci.yml/badge.svg)](https://github.com/dev-prathap/ATTEST/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/attestlayer?label=npm%20attestlayer)](https://www.npmjs.com/package/attestlayer) [![docs](https://img.shields.io/badge/docs-dev--prathap.github.io%2FATTEST-black)](https://dev-prathap.github.io/ATTEST/) [![license](https://img.shields.io/badge/license-MIT-green)](./LICENSE)
+
+> **Decide → Gate → Verify → Attest.**
+> When an AI agent takes an action in the real world, Attest decides whether it may, gates it behind a human when it matters, verifies from the system of record that it actually happened, and records tamper-evident evidence.
+
+Attest is **not** an agent framework, not a connector platform, not a guardrail filter. It is the layer that lets a team say, with proof: *"this agent did exactly this, as this person, and it worked."*
+
+## Read in this order
+
+| Doc | What it locks |
+| --- | --- |
+| [01 — Vision](./docs/01-vision.md) | What Attest is, what it is not, the thesis |
+| [02 — Product](./docs/02-product.md) | The four steps, surfaces, what a customer experiences |
+| [03 — Universal adapter](./docs/03-universal-adapter.md) | **All apps, all actions**: descriptor, entry points, verification ladder, auth, confirm, policy |
+| [04 — Architecture](./docs/04-architecture.md) | SDK + Cloud, stack, data model, ledger |
+| [05 — Market & positioning](./docs/05-market-positioning.md) | Why now, competitors, first vertical, go-to-market |
+| [06 — Build plan](./docs/06-build-plan.md) | Phases, weekly plan, what we reuse, what we do not build |
+| [07 — Decisions](./docs/07-decisions.md) | Locked decisions and open questions |
+| [08 — Phase plan](./docs/08-phase-plan.md) | Detailed phase-wise split: task IDs, deliverables, exit criteria, milestones, founder checklist |
+
+## Quickstart
+
+Brand **Attest** · PyPI `attestlayer` · npm `attestlayer` · deploy runbook in [DEPLOY.md](./DEPLOY.md).
+
+**TypeScript** — on npm today:
+
+```bash
+npm install attestlayer
+```
+
+```ts
+import { Attest } from "attestlayer";
+
+const at = new Attest({ agent: "followup-agent@v3", readers: { gmail: process.env.GMAIL_TOKEN! } });
+const sendEmail = at.wrap({ system: "gmail", verb: "send", target: "to" },
+                          async ({ to, subject, body }) => gmail.send({ to, subject, body }));
+
+await sendEmail({ to: "arun@newco.com", subject: "Proposal", body: "…" });
+```
+
+**Python** — same contract, same ledger format:
+
+```bash
+pip install attestlayer              # publishing pending; today: pip install -e ".[dev]"
+```
+
+```python
+import attest
+
+@attest.action(system="gmail", verb="send", target="to")
+def send_email(to, subject, body): ...
+```
+
+The first external send pauses for a human; the ledger row says `acknowledged`, or `verified` once Attest can
+read back with the agent's own credentials (`Attest(readers={"gmail": service})`). `attest ledger` · `attest verify`.
+Full docs: `mkdocs serve` → [docs/site](./docs/site/quickstart.md).
+
+## Repository
+
+| path | what |
+| --- | --- |
+| [attest/](./attest/) | Python SDK — descriptor, registry, policy, hash-chained ledger, verification ladder + recipes, gates (console / Slack / webhook / inbox / LangGraph interrupt / pending + resume), adapters (LangGraph, OpenAI Agents), MCP proxy, CLI, cloud client. [attest/README.md](./attest/README.md) |
+| [cloud/](./cloud/) | Attest Cloud v0 — FastAPI + Postgres: orgs, keys, agents, versioned policy, per-org hash-chained ledger, confirm inbox with Slack / webhook, exports |
+| [dashboard/](./dashboard/) | Next.js dashboard — ledger drill-down, confirm inbox, policy / keys / settings |
+| [examples/](./examples/) | unknown app (L1 → L3), LangGraph agent (two `verified` rows), OpenAI Agents, MCP config, API-only, cloud |
+| [docs/site/](./docs/site/) | documentation site (mkdocs) · [docs/](./docs/) — product docs 01–08 · [docs/notes](./docs/notes/do-extraction.md) — DO / DeerFlow extraction |
+| [deploy/](./deploy/) | Dockerfiles + compose (Postgres, API :8400, dashboard :3400) |
+| [launch/](./launch/) | Show HN, blog drafts, LangChain integration PR draft |
+| [DEPLOY.md](./DEPLOY.md) · [CHANGELOG.md](./CHANGELOG.md) | release (`git tag vX.Y.Z` → PyPI, npm, GHCR, Pages) and hosting runbook |
+
+```bash
+pytest -q && (cd cloud && pytest -q)                   # 273 + 21 tests
+ATTEST_AUTO_APPROVE=1 python examples/langgraph_agent.py
+cd deploy && cp .env.example .env && docker compose up  # cloud + dashboard
+```
+
+## One-line rules
+- We never execute the customer's action. Their tool executes; we observe, decide, gate, verify, record.
+- Coverage is universal (any app, any action, any framework, any language). Verification depth is layered and honest.
+- Open-source SDK (MIT). Paid cloud (ledger, confirm inbox, policies, exports).
+- Developer-led, self-serve, USD. No enterprise sales motion in year one.
+
+## Install from registries
+
+| where | how |
+| --- | --- |
+| PyPI *(publishing pending)* | `pip install attestlayer` → `attest`, `attest-mcp`, `attest-mcp-server`, `attest-gateway`, `attestlayer` |
+| MCP Registry | `io.github.dev-prathap/attest` (verify server) · `io.github.dev-prathap/attest-proxy` (zero-code proxy) — `uvx attestlayer` |
+| Claude Desktop / Smithery | MCPB bundle from `mcp/mcpb` (`mcpb pack mcp/mcpb`) |
+| npm | `npm install attestlayer` — **live** |
+| Docker | `ghcr.io/dev-prathap/attest-api`, `ghcr.io/dev-prathap/attest-dashboard` |
+
+<!-- mcp-name: io.github.dev-prathap/attest -->
+<!-- mcp-name: io.github.dev-prathap/attest-proxy -->
+
+## Lineage
+Attest is extracted from two working codebases: **DO** (policy engine, read-back verification pairs, evidence ledger, Nango auth) and **DeerFlow** (tool receipts, verification patterns, MCP/IM channel adapters). Nothing here is theoretical — every core mechanism already runs against real Gmail, Slack, HubSpot, Notion, Linear and Google Workspace.