bindable 0.1.0__tar.gz → 0.1.1__tar.gz

{bindable-0.1.0 → bindable-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: bindable
-Version: 0.1.0
+Version: 0.1.1
 Summary: Python client for the hosted Bindable Action Gate, with offline Receipt verification
 Author: Bindable AI LLC
 License-Expression: Apache-2.0

{bindable-0.1.0 → bindable-0.1.1}/bindable/_canonical_record.py

@@ -38,7 +38,7 @@ def _canonical_hash_input(receipt: Mapping[str, Any]) -> dict[str, Any]:
     """Return the canonical hash input dict per MVP spec §12.3.
 
     Included fields (canonical_json sorts alphabetically):
-      action_type, claim_payload, contract_id, contract_version,
+      action_type, proposal_payload, contract_id, contract_version,
       counterparty_identity, failed_rule, nonce,
       persistent_agent_id, previous_hash, proposed_action_id,
       referenced_evidence, sponsor_identity,
@@ -46,8 +46,8 @@ def _canonical_hash_input(receipt: Mapping[str, Any]) -> dict[str, Any]:
 
     Excluded per §12.3:
       receipt_id, signature, signing_key_id, signed_at,
-      chain_hash (self-reference), reason_detail, claim_digest
-      (derivable from canonical claim_payload).
+      chain_hash (self-reference), reason_detail, proposal_digest
+      (derivable from canonical proposal_payload).
 
     Args:
         receipt: A receipt as a plain mapping (e.g. parsed JSON from
@@ -61,7 +61,7 @@ def _canonical_hash_input(receipt: Mapping[str, Any]) -> dict[str, Any]:
     """
     return {
         "action_type": receipt["action_type"],
-        "claim_payload": receipt["claim_payload"],
+        "proposal_payload": receipt["proposal_payload"],
         "contract_id": receipt["contract_id"],
         "contract_version": receipt["contract_version"],
         "counterparty_identity": receipt["counterparty_identity"],

bindable-0.1.1/bindable/_version.py

@@ -0,0 +1 @@
+__version__ = "0.1.1"

{bindable-0.1.0 → bindable-0.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "bindable"
-version = "0.1.0"
+version = "0.1.1"
 requires-python = ">=3.10"
 description = "Python client for the hosted Bindable Action Gate, with offline Receipt verification"
 readme = "README.md"

{bindable-0.1.0 → bindable-0.1.1}/tests/crypto/vectors.json

@@ -72,7 +72,7 @@
   },
   {
     "name": "production_shape_receipt",
-    "description": "Approximates the receipt record shape from Interlock MVP Spec v0.1.2 §6.2.",
+    "description": "LEGACY SHAPE (pre-rc3 claim_* wire). Approximates the receipt record shape from Interlock MVP Spec v0.1.2 §6.2. Pins canonicalization math only; the rc3 wire uses proposal_* vocabulary.",
     "record": {
       "claim_payload": {
         "po_number": "PO-44821",

bindable-0.1.1/tests/fixtures/KEY_PROVENANCE.md

@@ -0,0 +1 @@
+Key provenance: bindable-public-2026-07.pem was recovered via ECDSA public-key recovery from the two production receipts in this directory and cross-validated against the hosted POST /v1/verify. Authoritative distribution of landscape verification keys will move to a read-only platform endpoint.

bindable-0.1.1/tests/fixtures/bindable-public-2026-07.pem

@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgAiZnfLmwECLMvbzCsaKKn+zMZ3W
+sJHGfdbwH8M7fk2hkNVI+RffcCwZFu2wG3MejwmvW7+b9GC4EgOEkdlkXw==
+-----END PUBLIC KEY-----

bindable-0.1.1/tests/fixtures/receipt_public_blocked_rc3.json

@@ -0,0 +1 @@
+{"receipt_id": "f92558c09edc44e7a141ea5c1b5cc855", "proposal_digest": "6b317920863fdbebaeda9e824daf5aeb781d87b2307f209f1ae25188fce2fe62", "proposal_payload": {"matter_id": "MER-2026-014", "call_cost_usd": 126, "records_requested": 400, "purpose": "full-market data sweep"}, "contract_id": "demo-diligence-spend-public-founding", "contract_version": "1.0.0", "sponsor_identity": "did:web:bindbl.ai:sponsor:b4047dfe7c4244dda32a3c8b4a02fc8e", "sponsor_identity_context": "ctx:public", "counterparty_identity": null, "persistent_agent_id": "did:web:bindbl.ai:agent:9dd08b5846564a1fbe674b1834fb887d", "action_type": "paid_data_call", "proposed_action_id": "pf-blocked-public-founding", "verification_outcome": "failed", "failed_rule": "r-2", "reason_detail": "126 lte 58 not satisfied", "referenced_evidence": ["demo-budget-public-founding"], "verified_at": "2026-08-13T14:09:07.031Z", "nonce": "d61480f760d63f14d1350c21573d1a8b", "chain_hash": "63b052eef0f449d7330dfd897891385e48ef372d8c69e9ddd05eaa84247ea036", "previous_hash": null, "signature": "30460221009273d5a94dbca61570dff9f7729d7576e852c0a681a396998db5da1e27885ed4022100ada78e5200865db572d78663a07b871cfd6013f84550c34bb3242cad07c44e9e", "signing_key_id": "bindable-public-2026-07", "signed_at": "2026-08-13T14:09:07.031Z", "intervention_artifacts": null}

bindable-0.1.1/tests/fixtures/receipt_public_released_rc3.json

@@ -0,0 +1 @@
+{"receipt_id": "9b6e8bca643444e09dfe0ef4015244d1", "proposal_digest": "9fe07610a2f335a96454d710259145e5ed1ef546234e21c279f4d6cff79f570d", "proposal_payload": {"matter_id": "MER-2026-014", "call_cost_usd": 12, "records_requested": 40, "purpose": "comparable-transactions pull"}, "contract_id": "demo-diligence-spend-public-founding", "contract_version": "1.0.0", "sponsor_identity": "did:web:bindbl.ai:sponsor:b4047dfe7c4244dda32a3c8b4a02fc8e", "sponsor_identity_context": "ctx:public", "counterparty_identity": null, "persistent_agent_id": "did:web:bindbl.ai:agent:9dd08b5846564a1fbe674b1834fb887d", "action_type": "paid_data_call", "proposed_action_id": "pf-released-public-founding", "verification_outcome": "passed", "failed_rule": null, "reason_detail": null, "referenced_evidence": ["demo-budget-public-founding"], "verified_at": "2026-08-13T14:08:59.607Z", "nonce": "b38265567729c89b020e6afe8a420f70", "chain_hash": "61374b353d242e9ddc523b09b537506a16f84852a1352d4bbf03643e486fe99d", "previous_hash": null, "signature": "3045022100d4dc8ff4ce26b24d0725016b7243b41e96ed2bc9074f21ba40c618ca459e0b01022027065e8d3e342393d70a270d43886145b2373418f2dc6ef7fc12b7b66860a12b", "signing_key_id": "bindable-public-2026-07", "signed_at": "2026-08-13T14:08:59.621Z", "intervention_artifacts": null}

{bindable-0.1.0 → bindable-0.1.1}/tests/test_canonical_vectors.py

@@ -55,7 +55,7 @@ def test_canonical_json_rejects_nested_float() -> None:
 _FULL_RECEIPT: dict[str, Any] = {
     # 15 included fields
     "action_type": "release_payment",
-    "claim_payload": {"po_number": "PO-44821", "invoice_amount_cents": 12500000},
+    "proposal_payload": {"po_number": "PO-44821", "invoice_amount_cents": 12500000},
     "contract_id": "contract-acme-xyz-invoice",
     "contract_version": "1.0.0",
     "counterparty_identity": "acme-vendor",
@@ -76,12 +76,12 @@ _FULL_RECEIPT: dict[str, Any] = {
     "signed_at": "2026-05-19T14:00:01.000Z",
     "chain_hash": "0" * 64,
     "reason_detail": "all good",
-    "claim_digest": "f" * 64,
+    "proposal_digest": "f" * 64,
 }
 
 _EXPECTED_KEYS = {
     "action_type",
-    "claim_payload",
+    "proposal_payload",
     "contract_id",
     "contract_version",
     "counterparty_identity",
@@ -115,7 +115,7 @@ def test_canonical_hash_input_excludes_signature_and_chain_fields() -> None:
         "signed_at",
         "chain_hash",
         "reason_detail",
-        "claim_digest",
+        "proposal_digest",
     ):
         assert excluded not in result
 

{bindable-0.1.0 → bindable-0.1.1}/tests/test_client.py

@@ -29,7 +29,9 @@ _OUTCOME_RELEASED: dict[str, Any] = {
 }
 
 _FIXTURE_RECEIPT: dict[str, Any] = json.loads(
-    (Path(__file__).parent / "fixtures" / "receipt_released.json").read_text(encoding="utf-8")
+    (Path(__file__).parent / "fixtures" / "receipt_public_released_rc3.json").read_text(
+        encoding="utf-8"
+    )
 )
 
 

{bindable-0.1.0 → bindable-0.1.1}/tests/test_verify_receipt.py

@@ -1,10 +1,13 @@
-"""verify_receipt — end-to-end gate against a real engine-minted receipt.
-
-The fixture (tests/fixtures/receipt_released.json + receipt_public_key.pem) was
-minted FROM the engine @ 5f129a6 via its own Interlock construction path. The
-chain-hash gate below proves the de-pydantic thin-client builder reproduces the
-engine's chain_hash byte-for-byte. If it fails, the builder diverged — STOP and
-report; never edit the fixture.
+"""verify_receipt — end-to-end gate against real engine-minted receipts.
+
+The fixtures (tests/fixtures/receipt_public_released_rc3.json and
+receipt_public_blocked_rc3.json) are REAL production receipts minted by the
+engine @ 0.1.0rc3 on the Public landscape, ECDSA-signed by key
+bindable-public-2026-07 (public half at tests/fixtures/
+bindable-public-2026-07.pem). The chain-hash gates below prove the
+de-pydantic thin-client builder reproduces the engine's chain_hash
+byte-for-byte on the proposal_* wire. If one fails, the builder diverged —
+STOP and report; never edit the fixtures.
 """
 
 from __future__ import annotations
@@ -14,120 +17,135 @@ import json
 from pathlib import Path
 from typing import Any
 
+import pytest
+
 from bindable import ReceiptVerification, load_public_key, verify_receipt
 from bindable._canonical_record import _canonical_hash_input
 from bindable.crypto import canonical_sha256
 
 _FIX = Path(__file__).parent / "fixtures"
-_RECEIPT: dict[str, Any] = json.loads(
-    (_FIX / "receipt_released.json").read_text(encoding="utf-8")
+_RELEASED: dict[str, Any] = json.loads(
+    (_FIX / "receipt_public_released_rc3.json").read_text(encoding="utf-8")
+)
+_BLOCKED: dict[str, Any] = json.loads(
+    (_FIX / "receipt_public_blocked_rc3.json").read_text(encoding="utf-8")
 )
-_PUBLIC_KEY_PEM_BYTES = (_FIX / "receipt_public_key.pem").read_bytes()
+_PUBLIC_KEY_PEM_BYTES = (_FIX / "bindable-public-2026-07.pem").read_bytes()
 _PUBLIC_KEY_PEM_STR = _PUBLIC_KEY_PEM_BYTES.decode("utf-8")
 
-# A valid P-256 key that did NOT sign this receipt (from the sign vectors).
+# A valid P-256 key that did NOT sign these receipts (from the sign vectors).
 _WRONG_KEY_PEM = json.loads(
     (Path(__file__).parent / "crypto" / "sign_vectors.json").read_text(encoding="utf-8")
 )[0]["public_key_pem"]
 
+_BOTH = pytest.mark.parametrize(
+    "fixture", [_RELEASED, _BLOCKED], ids=["released", "blocked"]
+)
+
 
-def _receipt() -> dict[str, Any]:
-    return copy.deepcopy(_RECEIPT)
+def _receipt(fixture: dict[str, Any]) -> dict[str, Any]:
+    return copy.deepcopy(fixture)
 
 
 # ─── GATE: builder reproduces the engine chain_hash ────────────────────
 
 
-def test_chain_hash_gate_builder_matches_fixture() -> None:
+@_BOTH
+def test_chain_hash_gate_builder_matches_fixture(fixture: dict[str, Any]) -> None:
     """canonical_sha256(_canonical_hash_input(receipt)) == receipt['chain_hash']."""
-    recomputed = canonical_sha256(_canonical_hash_input(_receipt()))
-    assert recomputed == _RECEIPT["chain_hash"], (
+    recomputed = canonical_sha256(_canonical_hash_input(_receipt(fixture)))
+    assert recomputed == fixture["chain_hash"], (
         f"Builder diverged from the engine: recomputed {recomputed!r} != pinned "
-        f"{_RECEIPT['chain_hash']!r}. STOP — do NOT edit the fixture."
+        f"{fixture['chain_hash']!r}. STOP — do NOT edit the fixture."
     )
 
 
 # ─── Happy path (key as PEM str and as loaded object) ──────────────────
 
 
-def test_valid_with_pem_string() -> None:
-    result = verify_receipt(_receipt(), public_key=_PUBLIC_KEY_PEM_STR)
-    assert isinstance(result, ReceiptVerification)
+@_BOTH
+def test_valid_with_pem_string(fixture: dict[str, Any]) -> None:
+    result = verify_receipt(_receipt(fixture), public_key=_PUBLIC_KEY_PEM_STR)
     assert result.valid is True
     assert result.chain_hash_valid is True
     assert result.signature_valid is True
     assert result.reason is None
 
 
-def test_valid_with_loaded_public_key_object() -> None:
+@_BOTH
+def test_valid_with_loaded_public_key_object(fixture: dict[str, Any]) -> None:
     pub = load_public_key(_PUBLIC_KEY_PEM_BYTES)
-    result = verify_receipt(_receipt(), public_key=pub)
+    result = verify_receipt(_receipt(fixture), public_key=pub)
     assert result.valid is True
+    assert result.chain_hash_valid is True
     assert result.signature_valid is True
+    assert result.reason is None
 
 
-# ─── Tamper detection ──────────────────────────────────────────────────
+# ─── Tamper and wrong-key paths ────────────────────────────────────────
 
 
-def test_tampered_canonical_field_breaks_chain() -> None:
-    r = _receipt()
-    r["claim_payload"] = {"po_number": "PO-EVIL", "amount": 999_999}
+@_BOTH
+def test_tampered_canonical_field_breaks_chain(fixture: dict[str, Any]) -> None:
+    r = _receipt(fixture)
+    r["proposal_payload"] = {"matter_id": "MER-EVIL", "call_cost_usd": 999_999}
     result = verify_receipt(r, public_key=_PUBLIC_KEY_PEM_STR)
-    assert result.chain_hash_valid is False
     assert result.valid is False
-    assert "chain_hash" in (result.reason or "")
+    assert result.chain_hash_valid is False
+    assert result.reason == "chain_hash mismatch"
 
 
 def test_tampered_signature_fails_signature_check() -> None:
-    r = _receipt()
-    sig = bytearray(bytes.fromhex(r["signature"]))
-    sig[-1] ^= 0x01
-    r["signature"] = bytes(sig).hex()
+    r = _receipt(_RELEASED)
+    # Flip the last hex digit of the DER signature.
+    last = r["signature"][-1]
+    r["signature"] = r["signature"][:-1] + ("0" if last != "0" else "1")
     result = verify_receipt(r, public_key=_PUBLIC_KEY_PEM_STR)
+    assert result.valid is False
     assert result.chain_hash_valid is True
     assert result.signature_valid is False
-    assert result.valid is False
 
 
 def test_wrong_key_fails_signature_check() -> None:
-    result = verify_receipt(_receipt(), public_key=_WRONG_KEY_PEM)
+    result = verify_receipt(_receipt(_RELEASED), public_key=_WRONG_KEY_PEM)
+    assert result.valid is False
     assert result.chain_hash_valid is True
     assert result.signature_valid is False
-    assert result.valid is False
     assert result.reason == "signature invalid"
 
 
-# ─── 4-state matrix corners ────────────────────────────────────────────
+# ─── Signature-optional matrix ─────────────────────────────────────────
 
 
-def test_no_key_skips_signature() -> None:
-    result = verify_receipt(_receipt())  # public_key=None
-    assert result.signature_valid is None
-    assert result.chain_hash_valid is True
+@_BOTH
+def test_no_key_skips_signature(fixture: dict[str, Any]) -> None:
+    result = verify_receipt(_receipt(fixture))  # public_key=None
     assert result.valid is True
+    assert result.chain_hash_valid is True
+    assert result.signature_valid is None
     assert result.reason is None
 
 
 def test_key_set_but_no_signature_field() -> None:
-    r = _receipt()
-    r.pop("signature")
+    r = _receipt(_RELEASED)
+    r["signature"] = None
     result = verify_receipt(r, public_key=_PUBLIC_KEY_PEM_STR)
-    assert result.signature_valid is False
-    assert result.chain_hash_valid is True
     assert result.valid is False
-    assert result.reason == "receipt has no signature to verify"
+    assert result.chain_hash_valid is True
+    assert result.signature_valid is False
 
 
 def test_invalid_hex_signature_is_handled() -> None:
-    r = _receipt()
-    r["signature"] = "zzz_not_hex_garbage_zzz"
+    r = _receipt(_RELEASED)
+    r["signature"] = "zz-not-hex"
     result = verify_receipt(r, public_key=_PUBLIC_KEY_PEM_STR)
     assert result.valid is False
+    assert result.chain_hash_valid is True
     assert result.signature_valid is False
     assert "error" in (result.reason or "").lower()
 
 
-# ─── Never-raises contract ─────────────────────────────────────────────
+# ─── Robustness: verify_receipt never raises ───────────────────────────
 
 
 def test_empty_dict_never_raises() -> None:
@@ -138,14 +156,14 @@ def test_empty_dict_never_raises() -> None:
 
 
 def test_garbage_dict_never_raises() -> None:
-    result = verify_receipt({"chain_hash": 123, "claim_payload": object()})  # type: ignore[dict-item]
+    result = verify_receipt({"chain_hash": 123, "proposal_payload": object()})  # type: ignore[dict-item]
     assert isinstance(result, ReceiptVerification)
     assert result.valid is False
     assert result.reason is not None
 
 
 def test_missing_chain_hash_never_raises() -> None:
-    r = _receipt()
+    r = _receipt(_RELEASED)
     r.pop("chain_hash")
     result = verify_receipt(r)
     assert result.valid is False
@@ -154,12 +172,8 @@ def test_missing_chain_hash_never_raises() -> None:
 
 
 def test_receipt_verification_is_frozen() -> None:
-    rv = verify_receipt(_receipt())
+    rv = verify_receipt(_receipt(_RELEASED))
     import dataclasses
 
-    try:
+    with pytest.raises(dataclasses.FrozenInstanceError):
         rv.valid = False  # type: ignore[misc]
-    except dataclasses.FrozenInstanceError:
-        pass
-    else:  # pragma: no cover - frozen dataclass must reject assignment
-        raise AssertionError("ReceiptVerification must be frozen")

{bindable-0.1.0 → bindable-0.1.1}/tests/test_version.py

@@ -2,4 +2,4 @@ import bindable
 
 
 def test_version() -> None:
-    assert bindable.__version__ == "0.1.0"
+    assert bindable.__version__ == "0.1.1"

bindable-0.1.0/bindable/_version.py

@@ -1 +0,0 @@
-__version__ = "0.1.0"

bindable-0.1.0/tests/fixtures/receipt_public_key.pem

@@ -1,4 +0,0 @@
------BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEa5xwHbysJvcU00yrqTfM7jGYk/87
-cypa/O3b/j6Iy6n+rpJRwDT2VTrbli1n4xoWZ3fXszM/pUzWRVIQt56fTg==
------END PUBLIC KEY-----

bindable-0.1.0/tests/fixtures/receipt_released.json

@@ -1,30 +0,0 @@
-{
-  "receipt_id": "rcpt_test_001",
-  "claim_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-  "claim_payload": {
-    "po_number": "PO-001",
-    "amount": 1000
-  },
-  "contract_id": "ctr_001",
-  "contract_version": "1.0.0",
-  "sponsor_identity": "testco",
-  "sponsor_identity_context": "ctx:testco:procurement",
-  "counterparty_identity": "supplier-a",
-  "persistent_agent_id": "agent_testco",
-  "action_type": "send_invoice",
-  "proposed_action_id": "claim_001",
-  "verification_outcome": "passed",
-  "failed_rule": null,
-  "reason_detail": null,
-  "referenced_evidence": [
-    "evidence-001"
-  ],
-  "verified_at": "2026-05-25T14:22:05.123Z",
-  "nonce": "abc123def456",
-  "chain_hash": "fa37feb6c264ae089c44a2667eddfa91492712b425c2e5c60091797051e90ca6",
-  "previous_hash": null,
-  "signature": "304502202ff0c4527fa3be3208732971e75ac939edb486da248107ffab6f10faa7ef0baa02210096dec776e158633c9e1f88dd5f7e184d0461a7574d6772a8eae89661ea1921d2",
-  "signing_key_id": "test_signer",
-  "signed_at": null,
-  "intervention_artifacts": null
-}