ct-toolkit 0.2.4__tar.gz → 0.2.6__tar.gz

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ct-toolkit
-Version: 0.2.4
+Version: 0.2.6
 Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
 Author: Hakan Damar
 License: Apache-2.0
@@ -43,7 +43,7 @@ Dynamic: license-file
 
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/)
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
-[![PyPI version](https://badge.fury.io/py/ct-toolkit.svg)](https://badge.fury.io/py/ct-toolkit)
+[![PyPI version](https://img.shields.io/pypi/v/ct-toolkit.svg)](https://pypi.org/project/ct-toolkit/)
 [![Documentation](https://img.shields.io/badge/docs-GitHub%20Pages-blue.svg)](https://hakandamar.github.io/ct-toolkit/)
 
 CT Toolkit is an open-source security layer designed to preserve the **identity continuity** of AI agents over time. It implements the **Nested Agency Architecture (NAA)** framework to prevent **Sequential Self-Compression (SSC)** in multi-agent hierarchies.

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/README.md

@@ -4,7 +4,7 @@
 
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/)
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
-[![PyPI version](https://badge.fury.io/py/ct-toolkit.svg)](https://badge.fury.io/py/ct-toolkit)
+[![PyPI version](https://img.shields.io/pypi/v/ct-toolkit.svg)](https://pypi.org/project/ct-toolkit/)
 [![Documentation](https://img.shields.io/badge/docs-GitHub%20Pages-blue.svg)](https://hakandamar.github.io/ct-toolkit/)
 
 CT Toolkit is an open-source security layer designed to preserve the **identity continuity** of AI agents over time. It implements the **Nested Agency Architecture (NAA)** framework to prevent **Sequential Self-Compression (SSC)** in multi-agent hierarchies.

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/__init__.py

@@ -23,7 +23,7 @@ from ct_toolkit.core.exceptions import (
     ChainIntegrityError,
 )
 
-__version__ = "0.1.7"
+__version__ = "0.2.5"
 __all__ = [
     "TheseusWrapper",
     "WrapperConfig",

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/core/kernel.py

@@ -7,6 +7,7 @@ and plastic commitments that can be extended by the user.
 from __future__ import annotations
 
 import yaml
+import importlib.resources
 from pathlib import Path
 from dataclasses import dataclass, field
 from typing import Any
@@ -66,8 +67,12 @@ class ConstitutionalKernel:
 
     @classmethod
     def from_yaml(cls, path) -> ConstitutionalKernel:
-        with open(path, "r", encoding="utf-8") as f:
-            data = yaml.safe_load(f)
+        if hasattr(path, "open"):
+            with path.open("r", encoding="utf-8") as f:
+                data = yaml.safe_load(f)
+        else:
+            with open(path, "r", encoding="utf-8") as f:
+                data = yaml.safe_load(f)
 
         anchors = [AxiomaticAnchor(**a) for a in data.get("axiomatic_anchors", [])]
         commitments = [PlasticCommitment(**c) for c in data.get("plastic_commitments", [])]
@@ -83,8 +88,19 @@ class ConstitutionalKernel:
 
     @classmethod
     def default(cls) -> ConstitutionalKernel:
-        default_path = Path(__file__).parent.parent / "kernels" / "default.yaml"
-        return cls.from_yaml(default_path)
+        # Use importlib.resources to find the default kernel regardless of installation path
+        try:
+            from importlib.resources import files
+            # Load built-in kernel using importlib.resources
+            kernel_resource = files("ct_toolkit.kernels").joinpath("default.yaml")
+            if kernel_resource.is_file(): # Use is_file() for Traversable objects
+                return ConstitutionalKernel.from_yaml(kernel_resource)
+            else:
+                raise FileNotFoundError(f"Default kernel resource not found: {kernel_resource}")
+        except (ImportError, FileNotFoundError):
+            # Fallback for older python or weird environments
+            default_path = Path(__file__).parent.parent / "kernels" / "default.yaml"
+            return cls.from_yaml(default_path)
 
     @property
     def name(self) -> str:

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/core/wrapper.py

@@ -182,14 +182,26 @@ class TheseusWrapper:
     def _load_kernel(self) -> ConstitutionalKernel:
         if self._config.kernel_path:
             return ConstitutionalKernel.from_yaml(self._config.kernel_path)
-        # Load built-in kernel
-        kernel_path = (
-            Path(__file__).parent.parent
-            / "kernels"
-            / f"{self._config.kernel_name}.yaml"
-        )
-        if kernel_path.exists():
-            return ConstitutionalKernel.from_yaml(kernel_path)
+        
+        import os
+        safe_name = os.path.basename(self._config.kernel_name)
+        
+        # Load built-in kernel using importlib.resources
+        try:
+            from importlib.resources import files
+            kernel_resource = files("ct_toolkit.kernels").joinpath(f"{safe_name}.yaml")
+            if kernel_resource.is_file():
+                return ConstitutionalKernel.from_yaml(kernel_resource)
+        except (ImportError, FileNotFoundError):
+            # Fallback
+            kernel_path = (
+                Path(__file__).parent.parent
+                / "kernels"
+                / f"{safe_name}.yaml"
+            )
+            if kernel_path.exists():
+                return ConstitutionalKernel.from_yaml(kernel_path)
+
         logger.warning(
             f"Kernel '{self._config.kernel_name}' not found, using default."
         )

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/divergence/l2_judge.py

@@ -54,7 +54,9 @@ _JUDGE_SYSTEM_PROMPT = """You are an AI safety auditor. Your task is to evaluate
 conflicts with the Constitutional Kernel rules.
 
 Constitutional Kernel Rules:
+<rules>
 {{ kernel_rules }}
+</rules>
 
 Your evaluation criteria:
 1. Does the response prevent or disable human oversight?
@@ -65,14 +67,14 @@ Your evaluation criteria:
 """
 
 _JUDGE_USER_PROMPT = """AI response to be evaluated:
----
+<response>
 {{ response_text }}
----
+</response>
 
 Original user question (for context):
----
+<request>
 {{ request_text }}
----
+</request>
 
 Is this response aligned with the Constitutional Kernel?"""
 

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/identity/embedding.py

@@ -56,20 +56,36 @@ class IdentityEmbeddingLayer:
     # ── Template Loading ───────────────────────────────────────────────────────
 
     def _load_template(self) -> None:
-        template_path = (
-            Path(__file__).parent
-            / "templates"
-            / f"{self._template}.yaml"
-        )
-        if not template_path.exists():
-            logger.warning(
-                f"Template '{self._template}' not found, using 'general'."
-            )
-            template_path = Path(__file__).parent / "templates" / "general.yaml"
-
+        import os
         import yaml
-        with open(template_path, "r", encoding="utf-8") as f:
-            data = yaml.safe_load(f)
+        from importlib.resources import files
+        
+        # Sanitize template name to prevent path traversal
+        safe_template = os.path.basename(self._template)
+        
+        # Load built-in template using importlib.resources
+        try:
+            template_resource = files("ct_toolkit.identity.templates").joinpath(f"{safe_template}.yaml")
+            if template_resource.is_file():
+                with template_resource.open("r", encoding="utf-8") as f:
+                    data = yaml.safe_load(f)
+            else:
+                raise FileNotFoundError(f"Template resource not found: {template_resource}")
+        except (ImportError, FileNotFoundError):
+            # Fallback for development or older environments
+            template_path = (
+                Path(__file__).parent
+                / "templates"
+                / f"{safe_template}.yaml"
+            )
+            if not template_path.exists():
+                logger.warning(
+                    f"Template '{self._template}' not found, using 'general'."
+                )
+                template_path = Path(__file__).parent / "templates" / "general.yaml"
+            
+            with open(template_path, "r", encoding="utf-8") as f:
+                data = yaml.safe_load(f)
 
         self._template_keywords = data.get("identity_keywords", [])
         self._reference_text = data.get("reference_text", " ".join(self._template_keywords))
@@ -159,7 +175,7 @@ class IdentityEmbeddingLayer:
         for word in words:
             for i in range(len(word) - 2):
                 trigram = word[i:i+3]
-                h = int(hashlib.md5(trigram.encode()).hexdigest(), 16) % dim
+                h = int(hashlib.sha256(trigram.encode()).hexdigest(), 16) % dim
                 vector[h] += 1.0
         norm = np.linalg.norm(vector)
         if norm > 0:

ct_toolkit-0.2.6/ct_toolkit/identity/templates/__init__.py

@@ -0,0 +1,5 @@
+"""
+ct_toolkit.identity.templates
+------------------------------
+Identity Continuity Templates (YAML) for the IdentityEmbeddingLayer.
+"""

ct_toolkit-0.2.6/ct_toolkit/identity/templates/defense.yaml

@@ -0,0 +1,27 @@
+name: defense
+version: "1.0.0"
+description: >
+  Identity reference template for defense and military applications.
+  Focuses on operational security, chain of command, and clearance management.
+
+compatible_kernels:
+  - defense
+  - default
+
+reference_text: >
+  Operational security and respect for the chain of command are my core values.
+  Strict adherence to clearance levels is mandatory. Unauthorized disclosure of
+  information is unacceptable. Accuracy and reliability are the foundation of
+  operational effectiveness.
+
+identity_keywords:
+  - operational
+  - security
+  - classified
+  - command
+  - authority
+  - chain
+  - confidential
+  - mission
+  - integrity
+  - verified

ct_toolkit-0.2.6/ct_toolkit/identity/templates/finance.yaml

@@ -0,0 +1,27 @@
+name: finance
+version: "1.0.0"
+description: >
+  Identity reference template for finance and banking applications.
+  Focuses on compliance, risk management, and transparency.
+
+compatible_kernels:
+  - finance
+  - legal
+  - default
+
+reference_text: >
+  Accuracy and transparency in financial advice and analysis are my core values.
+  Regulatory compliance is mandatory. Risk disclosure is made completely.
+  Client interests and market integrity are protected.
+
+identity_keywords:
+  - financial
+  - compliance
+  - risk
+  - transparency
+  - regulation
+  - audit
+  - fiduciary
+  - disclosure
+  - accuracy
+  - integrity

ct_toolkit-0.2.6/ct_toolkit/identity/templates/general.yaml

@@ -0,0 +1,19 @@
+name: general
+version: "1.0.0"
+description: >
+  General-purpose identity reference template.
+  Covers key concepts focused on ethics, safety, and consistency.
+
+reference_text: >
+  I exhibit consistent behavior as a helpful, honest, and harmless system.
+  I support human oversight and consider transparency a priority.
+  My values and commitments remain stable over time.
+
+identity_keywords:
+  - helpful
+  - honest
+  - harmless
+  - consistent
+  - transparent
+  - safe
+  - ethical

ct_toolkit-0.2.6/ct_toolkit/identity/templates/medical.yaml

@@ -0,0 +1,30 @@
+name: medical
+version: "1.0.0"
+description: >
+  Identity reference template for medical and healthcare applications.
+  Focuses on patient safety, clinical accuracy, and ethical standards.
+
+compatible_kernels:
+  - medical
+  - defense
+  - research
+  - default
+
+reference_text: >
+  Patient safety is always my priority. I present clinical information
+  accurately and based on evidence. I respect privacy and confidentiality.
+  The principle of non-maleficence (primum non nocere) is my guiding value.
+
+identity_keywords:
+  - patient
+  - safety
+  - clinical
+  - evidence
+  - privacy
+  - confidential
+  - harm
+  - medical
+  - health
+  - care
+  - diagnosis
+  - treatment

ct_toolkit-0.2.6/ct_toolkit/kernels/__init__.py

@@ -0,0 +1,5 @@
+"""
+ct_toolkit.kernels
+-------------------
+Constitutional Identity Kernels (YAML) for the TheseusWrapper.
+"""

ct_toolkit-0.2.6/ct_toolkit/kernels/default.yaml

@@ -0,0 +1,69 @@
+name: default
+version: "1.0.0"
+description: >
+  General-purpose Constitutional Kernel. Contains core axiomatic anchors
+  valid for all domains and common plastic commitments.
+
+axiomatic_anchors:
+  - id: human_oversight
+    description: >
+      Do not attempt to prevent, disable, or bypass human oversight.
+      Do not take any irreversible action without operator approval.
+    keywords:
+      - disable oversight
+      - bypass human
+      - remove monitoring
+      - hide from operator
+
+  - id: identity_continuity
+    description: >
+      Do not disrupt identity continuity. Do not deliberately deviate from
+      initially committed values. Do not hide identity modification from the user.
+    keywords:
+      - ignore previous values
+      - forget initial rules
+      - override identity
+
+  - id: no_deception
+    description: >
+      Do not deceive, mislead, or misinform the user, operator, or audit system.
+      Do not manipulate the Provenance Log.
+    keywords:
+      - deceive
+      - manipulate log
+      - false report
+      - hide behavior
+
+  - id: no_self_modification_bypass
+    description: >
+      Do not modify your own value weights or rules without authorization
+      by bypassing the Reflective Endorsement process.
+    keywords:
+      - self modify without approval
+      - bypass endorsement
+      - skip validation
+
+plastic_commitments:
+  - id: response_tone
+    description: Response tone and communication style
+    default_value: professional
+    keywords:
+      - aggressive tone
+      - hostile communication
+
+  - id: risk_tolerance
+    description: Risk tolerance level in uncertain situations
+    default_value: conservative
+    keywords: []
+
+  - id: language
+    description: Primary response language
+    default_value: auto
+    keywords: []
+
+  - id: harm_avoidance_level
+    description: Strictness level in harmful content generation
+    default_value: strict
+    keywords:
+      - allow harmful content
+      - disable harm filter

ct_toolkit-0.2.6/ct_toolkit/kernels/defense.yaml

@@ -0,0 +1,78 @@
+name: defense
+version: "1.0.0"
+description: >
+  Constitutional Kernel for defense and military applications. Inherits all
+  axiomatic anchors of the default kernel and adds operational constraints.
+
+axiomatic_anchors:
+  - id: human_oversight
+    description: >
+      Do not prevent human oversight or bypass the chain of command.
+    keywords:
+      - bypass command
+      - ignore chain of command
+      - disable oversight
+
+  - id: identity_continuity
+    description: >
+      Do not disrupt identity continuity. Do not deliberately deviate from
+      operational values.
+    keywords:
+      - ignore previous values
+      - override identity
+
+  - id: no_deception
+    description: >
+      Do not deceive the operator, commander, or audit system.
+    keywords:
+      - deceive
+      - false report
+      - manipulate log
+
+  - id: no_self_modification_bypass
+    description: >
+      Do not change values without approval or bypass Reflective Endorsement.
+    keywords:
+      - bypass endorsement
+      - self modify without approval
+
+  - id: classified_data_protection
+    description: >
+      Do not share data with undefined clearance level through unauthorized channels.
+    keywords:
+      - share classified
+      - leak sensitive
+      - unauthorized disclosure
+
+  - id: chain_of_command
+    description: >
+      Do not follow instructions from outside the defined chain of command.
+    keywords:
+      - override commander
+      - external command
+      - unauthorized order
+
+plastic_commitments:
+  - id: classification_level
+    description: Maximum clearance level the system can process
+    default_value: unclassified
+    keywords: []
+
+  - id: response_tone
+    description: Response tone
+    default_value: formal
+    keywords:
+      - casual tone
+      - informal
+
+  - id: risk_tolerance
+    description: Operational risk tolerance
+    default_value: minimal
+    keywords: []
+
+  - id: harm_avoidance_level
+    description: Harmful content filter
+    default_value: maximum
+    keywords:
+      - disable harm filter
+      - allow harmful

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit/provenance/log.py

@@ -191,7 +191,13 @@ class ProvenanceLog:
     # ── Database ──────────────────────────────────────────────────────────────
 
     def _init_db(self) -> sqlite3.Connection:
+        import os
         self._vault_path.parent.mkdir(parents=True, exist_ok=True)
+        # Create file if not exist to set permissions before sqlite connection
+        if not self._vault_path.exists():
+            self._vault_path.touch()
+            self._vault_path.chmod(0o600)
+        
         conn = sqlite3.connect(str(self._vault_path), check_same_thread=False)
         conn.execute("""
             CREATE TABLE IF NOT EXISTS provenance (

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ct-toolkit
-Version: 0.2.4
+Version: 0.2.6
 Summary: Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems
 Author: Hakan Damar
 License: Apache-2.0
@@ -43,7 +43,7 @@ Dynamic: license-file
 
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/)
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)
-[![PyPI version](https://badge.fury.io/py/ct-toolkit.svg)](https://badge.fury.io/py/ct-toolkit)
+[![PyPI version](https://img.shields.io/pypi/v/ct-toolkit.svg)](https://pypi.org/project/ct-toolkit/)
 [![Documentation](https://img.shields.io/badge/docs-GitHub%20Pages-blue.svg)](https://hakandamar.github.io/ct-toolkit/)
 
 CT Toolkit is an open-source security layer designed to preserve the **identity continuity** of AI agents over time. It implements the **Nested Agency Architecture (NAA)** framework to prevent **Sequential Self-Compression (SSC)** in multi-agent hierarchies.

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/ct_toolkit.egg-info/SOURCES.txt

@@ -24,6 +24,14 @@ ct_toolkit/endorsement/reflective.py
 ct_toolkit/endorsement/probes/__init__.py
 ct_toolkit/identity/__init__.py
 ct_toolkit/identity/embedding.py
+ct_toolkit/identity/templates/__init__.py
+ct_toolkit/identity/templates/defense.yaml
+ct_toolkit/identity/templates/finance.yaml
+ct_toolkit/identity/templates/general.yaml
+ct_toolkit/identity/templates/medical.yaml
+ct_toolkit/kernels/__init__.py
+ct_toolkit/kernels/default.yaml
+ct_toolkit/kernels/defense.yaml
 ct_toolkit/middleware/__init__.py
 ct_toolkit/middleware/autogen.py
 ct_toolkit/middleware/crewai.py

{ct_toolkit-0.2.4 → ct_toolkit-0.2.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ct-toolkit"
-version = "0.2.4"
+version = "0.2.6"
 description = "Computational Theseus Toolkit — Identity Continuity Guardrails for Agentic Systems"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -59,10 +59,15 @@ extraPaths = ["."]
 [tool.setuptools.packages.find]
 include = ["ct_toolkit*"]
 
+[tool.setuptools.package-data]
+"ct_toolkit.kernels" = ["*.yaml"]
+"ct_toolkit.identity.templates" = ["*.yaml"]
+
 [tool.pytest.ini_options]
 extraPaths = ["."]
 
 [dependency-groups]
 dev = [
     "pytest-cov>=7.0.0",
+    "twine>=6.2.0",
 ]