authority-runtime 0.3.0__tar.gz

authority_runtime-0.3.0/LICENSE

@@ -0,0 +1,89 @@
+License text copyright (c) 2020 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Parameters
+
+Licensor:             Tronmongoose LLC
+Licensed Work:        Carryall / Authority Runtime 0.3.0 or later.
+                      The Licensed Work is (c) 2025 Tronmongoose LLC.
+Additional Use Grant: You may make production use of the Licensed Work, provided
+                      Your use does not include offering the Licensed Work to third
+                      parties on a hosted or embedded basis in order to compete with
+                      Tronmongoose's paid version(s) of the Licensed Work. For
+                      purposes of this license:
+
+                      A "competitive offering" is a Product that is offered to third
+                      parties on a paid basis, including through paid support
+                      arrangements, that significantly overlaps with the capabilities
+                      of Tronmongoose's paid version(s) of the Licensed Work. If Your
+                      Product is not a competitive offering when You first make it
+                      generally available, it will not become a competitive offering
+                      later due to Tronmongoose releasing a new version of the
+                      Licensed Work with additional capabilities. In addition,
+                      Products that are not provided on a paid basis are not
+                      competitive.
+
+                      "Product" means software that is offered to end users to manage
+                      in their own environments or offered as a service on a hosted
+                      basis.
+
+                      "Embedded" means including the source code or executable code
+                      from the Licensed Work in a competitive offering. "Embedded"
+                      also means packaging the competitive offering in such a way
+                      that the Licensed Work must be accessed or downloaded for the
+                      competitive offering to operate.
+
+                      Hosting or using the Licensed Work(s) for internal purposes
+                      within an organization is not considered a competitive
+                      offering. Tronmongoose considers your organization to include
+                      all of your affiliates under common control.
+Change Date:          Four years from the date the Licensed Work is published.
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed Work,
+please contact licensing@tronmongoose.com.
+
+Notice
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.

authority_runtime-0.3.0/PKG-INFO

@@ -0,0 +1,220 @@
+Metadata-Version: 2.4
+Name: authority-runtime
+Version: 0.3.0
+Summary: IAM + Context Control Plane for AI Agents — cryptographic policy enforcement with Ed25519 signed envelopes
+Author-email: Authority Runtime <hello@authority-runtime.dev>
+License: BSL-1.1
+Project-URL: Homepage, https://github.com/tronmongoose/agent.carryall
+Project-URL: Repository, https://github.com/tronmongoose/agent.carryall
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: Other/Proprietary License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: pynacl>=1.5.0
+Requires-Dist: pydantic>=2.0.0
+Requires-Dist: typer>=0.9.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: aiohttp>=3.9.0
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: pyrage>=1.2.0
+Provides-Extra: llm
+Requires-Dist: openai<2.0.0,>=1.10.0; extra == "llm"
+Requires-Dist: anthropic>=0.7.0; extra == "llm"
+Provides-Extra: langchain
+Requires-Dist: langchain>=1.0.0; extra == "langchain"
+Requires-Dist: langchain-core>=1.0.0; extra == "langchain"
+Requires-Dist: langchain-openai>=1.0.0; extra == "langchain"
+Requires-Dist: langgraph>=0.2.0; extra == "langchain"
+Provides-Extra: all
+Requires-Dist: authority-runtime[langchain,llm]; extra == "all"
+Provides-Extra: dev
+Requires-Dist: authority-runtime[all]; extra == "dev"
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.21.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.0.0; extra == "dev"
+Requires-Dist: black>=23.0.0; extra == "dev"
+Requires-Dist: mypy>=1.0.0; extra == "dev"
+Requires-Dist: ruff>=0.1.0; extra == "dev"
+Dynamic: license-file
+
+# Authority Runtime
+
+**Cryptographic IAM for AI agents** -- scoped, signed, time-limited permissions with a tamper-evident audit trail.
+
+[![License: BSL 1.1](https://img.shields.io/badge/License-BSL%201.1-blue.svg)](LICENSE)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Tests](https://img.shields.io/badge/tests-182%20passing-brightgreen.svg)]()
+
+---
+
+## The Problem
+
+AI agents operate with all-or-nothing permissions. If an agent has an API key, it can do anything with that credential. Traditional auth (OAuth, RBAC, JWT) assumes a human clicked a button -- agents don't click buttons.
+
+Authority Runtime creates **cryptographically signed permission envelopes** that scope exactly what an agent can do, enforced at runtime, with a complete audit trail.
+
+```
+Parent Envelope                    Child Envelope
+|- scopes: [read, write, delete]   |- scopes: [read]        <- narrowed
+|- context: [user, email, history] |- context: [email]      <- narrowed
+|- ttl: 10 minutes                 |- ttl: 5 minutes        <- narrowed
+'- signature: Ed25519(...)         '- signature: Ed25519(...)
+```
+
+**The child cannot exceed the parent. Cryptographically enforced.**
+
+---
+
+## Install
+
+```bash
+pip install authority-runtime
+```
+
+---
+
+## Quick Start
+
+```python
+from authority_runtime import generate_key_pair, create_simple_envelope, check_envelope
+
+# Generate Ed25519 identity
+private_key, public_key = generate_key_pair()
+
+# Create a scoped, signed, time-limited envelope
+envelope = create_simple_envelope(
+    agent_id="my-agent",
+    scopes=["read:users", "write:users"],
+    private_key=private_key,
+)
+
+# Verify access -- passes
+check_envelope(envelope, public_key, required_scope="read:users")
+
+# Verify access -- raises PermissionDenied
+check_envelope(envelope, public_key, required_scope="delete:users")
+```
+
+See [docs/QUICKSTART.md](docs/QUICKSTART.md) for more examples including `EnforcedTool` runtime blocking and HTML compliance reports.
+
+---
+
+## What It Does
+
+1. **Scope** -- Define exactly which tools and data an agent can access
+2. **Sign** -- Ed25519 signatures make permissions tamper-proof
+3. **Expire** -- TTLs ensure permissions don't persist forever
+4. **Enforce** -- `EnforcedTool` blocks unauthorized actions at runtime
+5. **Audit** -- Every action logged with cryptographic proof
+6. **Verify** -- SHA-256 hash chain on audit trail detects tampering and deletions
+
+### Key Features
+
+- **YAML policy engine** -- define agent permissions in declarative YAML
+- **Constraint enforcement** -- require_purpose, denied_resources, max_records, require_approval
+- **Wildcard scope matching** -- `vault:*:read` matches `vault:finance:read`
+- **HTML compliance reports** -- negative attestation ("agent never accessed X")
+- **Tamper-evident audit trail** -- SHA-256 hash chain, `carryall audit --verify`
+- **Schema migrations** -- versioned, with automatic backup
+- **MCP server** -- HTTP and stdio transports with Bearer auth + rate limiting
+- **LangGraph integration** -- graph-based agents with automatic permission narrowing
+
+---
+
+## CLI
+
+```bash
+carryall init                          # Initialize ~/.carryall/
+carryall keys generate --agent-id bot  # Generate Ed25519 keypair
+carryall mcp serve --transport http    # Start MCP server
+carryall audit query                   # Query audit trail
+carryall audit --verify                # Verify hash chain integrity
+carryall compliance report             # Generate HTML compliance report
+carryall policy validate policy.yaml   # Validate YAML policy
+carryall db status                     # Check database + migrations
+```
+
+---
+
+## Edtech FERPA Demo
+
+A complete multi-agent demo showing FERPA compliance:
+
+```bash
+git clone https://github.com/tronmongoose/carryall-edtech-pilot.git
+cd carryall-edtech-pilot
+pip install authority-runtime
+python -m demo.run
+```
+
+Demonstrates: agent identity, least privilege, access denial, negative attestation, compliance export. No API keys needed.
+
+---
+
+## Architecture
+
+```
+Agent Request
+    |
+    v
+Root Envelope (Ed25519 signed, scoped, time-bounded)
+    |
+    v
+Policy Engine (YAML policies, constraints, scope matching)
+    |
+    v
+EnforcedTool (validates signature, checks TTL, verifies scope)
+    |
+    v
+Audit Trail (SQLite, hash chain, compliance export)
+```
+
+---
+
+## Design Constraints
+
+1. **Envelopes are immutable** -- create new ones, don't modify existing
+2. **Children subset Parents** -- authority only narrows, never expands
+3. **TTLs only decrease** -- child can't outlive parent (60s-24h range)
+4. **Signatures are mandatory** -- no unsigned envelopes
+5. **Enforcement is cryptographic** -- can't bypass without private key
+
+---
+
+## Documentation
+
+| Doc | Description |
+|-----|-------------|
+| [Getting Started](docs/QUICKSTART.md) | 5-minute tutorial with 3 progressive examples |
+| [Deployment](docs/DEPLOYMENT.md) | Local, Docker Compose, and Kubernetes |
+| [Configuration](docs/CONFIGURATION.md) | Environment variables, YAML policies, logging |
+| [Changelog](CHANGELOG.md) | Release history |
+| [Security](SECURITY.md) | Vulnerability reporting + architecture |
+| [Contributing](CONTRIBUTING.md) | Development setup + PR process |
+
+---
+
+## Test Suite
+
+182 tests across 15 test files covering envelope operations, scope matching, constraint enforcement, policy engine, compliance reports, hash chain integrity, schema migrations, MCP auth, and structured logging.
+
+```bash
+pytest            # Run all tests
+pytest -v -x      # Verbose, stop on first failure
+```
+
+---
+
+## License
+
+Business Source License 1.1 - See [LICENSE](LICENSE). Converts to Apache 2.0 after 4 years.

authority_runtime-0.3.0/README.md

@@ -0,0 +1,171 @@
+# Authority Runtime
+
+**Cryptographic IAM for AI agents** -- scoped, signed, time-limited permissions with a tamper-evident audit trail.
+
+[![License: BSL 1.1](https://img.shields.io/badge/License-BSL%201.1-blue.svg)](LICENSE)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Tests](https://img.shields.io/badge/tests-182%20passing-brightgreen.svg)]()
+
+---
+
+## The Problem
+
+AI agents operate with all-or-nothing permissions. If an agent has an API key, it can do anything with that credential. Traditional auth (OAuth, RBAC, JWT) assumes a human clicked a button -- agents don't click buttons.
+
+Authority Runtime creates **cryptographically signed permission envelopes** that scope exactly what an agent can do, enforced at runtime, with a complete audit trail.
+
+```
+Parent Envelope                    Child Envelope
+|- scopes: [read, write, delete]   |- scopes: [read]        <- narrowed
+|- context: [user, email, history] |- context: [email]      <- narrowed
+|- ttl: 10 minutes                 |- ttl: 5 minutes        <- narrowed
+'- signature: Ed25519(...)         '- signature: Ed25519(...)
+```
+
+**The child cannot exceed the parent. Cryptographically enforced.**
+
+---
+
+## Install
+
+```bash
+pip install authority-runtime
+```
+
+---
+
+## Quick Start
+
+```python
+from authority_runtime import generate_key_pair, create_simple_envelope, check_envelope
+
+# Generate Ed25519 identity
+private_key, public_key = generate_key_pair()
+
+# Create a scoped, signed, time-limited envelope
+envelope = create_simple_envelope(
+    agent_id="my-agent",
+    scopes=["read:users", "write:users"],
+    private_key=private_key,
+)
+
+# Verify access -- passes
+check_envelope(envelope, public_key, required_scope="read:users")
+
+# Verify access -- raises PermissionDenied
+check_envelope(envelope, public_key, required_scope="delete:users")
+```
+
+See [docs/QUICKSTART.md](docs/QUICKSTART.md) for more examples including `EnforcedTool` runtime blocking and HTML compliance reports.
+
+---
+
+## What It Does
+
+1. **Scope** -- Define exactly which tools and data an agent can access
+2. **Sign** -- Ed25519 signatures make permissions tamper-proof
+3. **Expire** -- TTLs ensure permissions don't persist forever
+4. **Enforce** -- `EnforcedTool` blocks unauthorized actions at runtime
+5. **Audit** -- Every action logged with cryptographic proof
+6. **Verify** -- SHA-256 hash chain on audit trail detects tampering and deletions
+
+### Key Features
+
+- **YAML policy engine** -- define agent permissions in declarative YAML
+- **Constraint enforcement** -- require_purpose, denied_resources, max_records, require_approval
+- **Wildcard scope matching** -- `vault:*:read` matches `vault:finance:read`
+- **HTML compliance reports** -- negative attestation ("agent never accessed X")
+- **Tamper-evident audit trail** -- SHA-256 hash chain, `carryall audit --verify`
+- **Schema migrations** -- versioned, with automatic backup
+- **MCP server** -- HTTP and stdio transports with Bearer auth + rate limiting
+- **LangGraph integration** -- graph-based agents with automatic permission narrowing
+
+---
+
+## CLI
+
+```bash
+carryall init                          # Initialize ~/.carryall/
+carryall keys generate --agent-id bot  # Generate Ed25519 keypair
+carryall mcp serve --transport http    # Start MCP server
+carryall audit query                   # Query audit trail
+carryall audit --verify                # Verify hash chain integrity
+carryall compliance report             # Generate HTML compliance report
+carryall policy validate policy.yaml   # Validate YAML policy
+carryall db status                     # Check database + migrations
+```
+
+---
+
+## Edtech FERPA Demo
+
+A complete multi-agent demo showing FERPA compliance:
+
+```bash
+git clone https://github.com/tronmongoose/carryall-edtech-pilot.git
+cd carryall-edtech-pilot
+pip install authority-runtime
+python -m demo.run
+```
+
+Demonstrates: agent identity, least privilege, access denial, negative attestation, compliance export. No API keys needed.
+
+---
+
+## Architecture
+
+```
+Agent Request
+    |
+    v
+Root Envelope (Ed25519 signed, scoped, time-bounded)
+    |
+    v
+Policy Engine (YAML policies, constraints, scope matching)
+    |
+    v
+EnforcedTool (validates signature, checks TTL, verifies scope)
+    |
+    v
+Audit Trail (SQLite, hash chain, compliance export)
+```
+
+---
+
+## Design Constraints
+
+1. **Envelopes are immutable** -- create new ones, don't modify existing
+2. **Children subset Parents** -- authority only narrows, never expands
+3. **TTLs only decrease** -- child can't outlive parent (60s-24h range)
+4. **Signatures are mandatory** -- no unsigned envelopes
+5. **Enforcement is cryptographic** -- can't bypass without private key
+
+---
+
+## Documentation
+
+| Doc | Description |
+|-----|-------------|
+| [Getting Started](docs/QUICKSTART.md) | 5-minute tutorial with 3 progressive examples |
+| [Deployment](docs/DEPLOYMENT.md) | Local, Docker Compose, and Kubernetes |
+| [Configuration](docs/CONFIGURATION.md) | Environment variables, YAML policies, logging |
+| [Changelog](CHANGELOG.md) | Release history |
+| [Security](SECURITY.md) | Vulnerability reporting + architecture |
+| [Contributing](CONTRIBUTING.md) | Development setup + PR process |
+
+---
+
+## Test Suite
+
+182 tests across 15 test files covering envelope operations, scope matching, constraint enforcement, policy engine, compliance reports, hash chain integrity, schema migrations, MCP auth, and structured logging.
+
+```bash
+pytest            # Run all tests
+pytest -v -x      # Verbose, stop on first failure
+```
+
+---
+
+## License
+
+Business Source License 1.1 - See [LICENSE](LICENSE). Converts to Apache 2.0 after 4 years.

authority_runtime-0.3.0/pyproject.toml

@@ -0,0 +1,92 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "authority-runtime"
+version = "0.3.0"
+description = "IAM + Context Control Plane for AI Agents — cryptographic policy enforcement with Ed25519 signed envelopes"
+readme = "README.md"
+authors = [
+    { name = "Authority Runtime", email = "hello@authority-runtime.dev" }
+]
+license = { text = "BSL-1.1" }
+requires-python = ">=3.9"
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: Other/Proprietary License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Security",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+]
+
+# Core dependencies — enough for envelope signing, enforcement, CLI, and in-memory backend
+dependencies = [
+    "pynacl>=1.5.0",       # Ed25519 signing
+    "pydantic>=2.0.0",     # Type validation
+    "typer>=0.9.0",        # CLI framework
+    "rich>=13.0.0",        # CLI formatting
+    "aiohttp>=3.9.0",      # HTTP transport for MCP server
+    "pyyaml>=6.0",         # YAML policy files
+    "pyrage>=1.2.0",       # age-x25519 encryption at rest for vault documents
+]
+
+[project.scripts]
+carryall = "authority_runtime.cli:app"
+
+[project.optional-dependencies]
+llm = [
+    "openai>=1.10.0,<2.0.0",
+    "anthropic>=0.7.0",
+]
+langchain = [
+    "langchain>=1.0.0",
+    "langchain-core>=1.0.0",
+    "langchain-openai>=1.0.0",
+    "langgraph>=0.2.0",
+]
+all = [
+    "authority-runtime[llm,langchain]",
+]
+dev = [
+    "authority-runtime[all]",
+    "pytest>=7.0.0",
+    "pytest-asyncio>=0.21.0",
+    "pytest-cov>=4.0.0",
+    "black>=23.0.0",
+    "mypy>=1.0.0",
+    "ruff>=0.1.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/tronmongoose/agent.carryall"
+Repository = "https://github.com/tronmongoose/agent.carryall"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.black]
+line-length = 100
+target-version = ['py39']
+
+[tool.ruff]
+line-length = 100
+target-version = "py39"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+python_files = "test_*.py"
+python_classes = "Test*"
+python_functions = "test_*"
+addopts = "-v --tb=short"
+
+[tool.mypy]
+python_version = "3.9"
+warn_return_any = true
+warn_unused_configs = true

authority_runtime-0.3.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+