cuff-cli 0.2.0__tar.gz → 0.2.1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. {cuff_cli-0.2.0/core/cuff_cli.egg-info → cuff_cli-0.2.1}/PKG-INFO +15 -5
  2. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/README.md +14 -4
  3. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/__init__.py +1 -1
  4. {cuff_cli-0.2.0 → cuff_cli-0.2.1/core/cuff_cli.egg-info}/PKG-INFO +15 -5
  5. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/pyproject.toml +1 -1
  6. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/LICENSE +0 -0
  7. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/__main__.py +0 -0
  8. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/cli.py +0 -0
  9. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/errors.py +0 -0
  10. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/gate.py +0 -0
  11. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/git.py +0 -0
  12. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/ledger.py +0 -0
  13. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/subject.py +0 -0
  14. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/workspace.py +0 -0
  15. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff_cli.egg-info/SOURCES.txt +0 -0
  16. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff_cli.egg-info/dependency_links.txt +0 -0
  17. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff_cli.egg-info/entry_points.txt +0 -0
  18. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff_cli.egg-info/top_level.txt +0 -0
  19. {cuff_cli-0.2.0 → cuff_cli-0.2.1}/setup.cfg +0 -0
{cuff_cli-0.2.0/core/cuff_cli.egg-info → cuff_cli-0.2.1}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: cuff-cli
3
- Version: 0.2.0
3
+ Version: 0.2.1
4
4
  Summary: Cuff subject-bound claim, evidence, and verification gate.
5
5
  Author: Fab7
6
6
  License-Expression: Apache-2.0
@@ -38,7 +38,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
38
38
  Install a released version as a standard uv-managed tool:
39
39
 
40
40
  ```bash
41
- uv tool install cuff-cli==0.2.0
41
+ uv tool install cuff-cli==0.2.1
42
42
  cuff --version
43
43
  ```
44
44
 
@@ -142,19 +142,29 @@ Validate the built candidate and both host payloads without touching the
142
142
  normal host configuration:
143
143
 
144
144
  ```bash
145
- uv build --out-dir ../sandbox/cuff-01/dist
145
+ uv build --out-dir ../sandbox/cuff-02/dist
146
146
  uv run python tools/local_release_check.py --host all
147
147
  uv run python tools/local_release_check.py --host all --prepare-auth \
148
148
  --candidate-commit COMMIT \
149
- --evidence-dir ../sandbox/cuff-01/e2e
149
+ --evidence-dir ../sandbox/cuff-02/e2e
150
150
  # Log each CLI in using the isolated home paths printed by the prepare phase.
151
151
  uv run python tools/local_release_check.py --host all --live --reuse-prepared \
152
152
  --candidate-commit COMMIT \
153
- --evidence-dir ../sandbox/cuff-01/e2e \
153
+ --evidence-dir ../sandbox/cuff-02/e2e \
154
+ --qualification-manifest ../sandbox/cuff-02/control/qualification.json \
155
+ --preflight-evidence ../sandbox/cuff-02/control/preflight.json \
154
156
  --codex-model MODEL \
155
157
  --claude-model MODEL
156
158
  ```
157
159
 
160
+ Before `--live`, freeze the exact candidate, host order, `current` and `stale`
161
+ cases, three-valid-sample rule, prompts, tool policies, and containment policies
162
+ in the qualification manifest. A trusted non-LLM runner must then record a
163
+ passing containment preflight for the same qualification and policy digests.
164
+ The checker rejects missing or mismatched controls and runs six fresh
165
+ workspaces and host sessions per host. Follow the root `LLM_VERIFICATION.md`;
166
+ unsupported isolation is `INCONCLUSIVE`, not a release pass.
167
+
158
168
  See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)
159
169
  for ownership, and [the ledger contract](docs/architecture/ledger.md) for the
160
170
  record and gate invariants.
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/README.md RENAMED
@@ -27,7 +27,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
27
27
  Install a released version as a standard uv-managed tool:
28
28
 
29
29
  ```bash
30
- uv tool install cuff-cli==0.2.0
30
+ uv tool install cuff-cli==0.2.1
31
31
  cuff --version
32
32
  ```
33
33
 
@@ -131,19 +131,29 @@ Validate the built candidate and both host payloads without touching the
131
131
  normal host configuration:
132
132
 
133
133
  ```bash
134
- uv build --out-dir ../sandbox/cuff-01/dist
134
+ uv build --out-dir ../sandbox/cuff-02/dist
135
135
  uv run python tools/local_release_check.py --host all
136
136
  uv run python tools/local_release_check.py --host all --prepare-auth \
137
137
  --candidate-commit COMMIT \
138
- --evidence-dir ../sandbox/cuff-01/e2e
138
+ --evidence-dir ../sandbox/cuff-02/e2e
139
139
  # Log each CLI in using the isolated home paths printed by the prepare phase.
140
140
  uv run python tools/local_release_check.py --host all --live --reuse-prepared \
141
141
  --candidate-commit COMMIT \
142
- --evidence-dir ../sandbox/cuff-01/e2e \
142
+ --evidence-dir ../sandbox/cuff-02/e2e \
143
+ --qualification-manifest ../sandbox/cuff-02/control/qualification.json \
144
+ --preflight-evidence ../sandbox/cuff-02/control/preflight.json \
143
145
  --codex-model MODEL \
144
146
  --claude-model MODEL
145
147
  ```
146
148
 
149
+ Before `--live`, freeze the exact candidate, host order, `current` and `stale`
150
+ cases, three-valid-sample rule, prompts, tool policies, and containment policies
151
+ in the qualification manifest. A trusted non-LLM runner must then record a
152
+ passing containment preflight for the same qualification and policy digests.
153
+ The checker rejects missing or mismatched controls and runs six fresh
154
+ workspaces and host sessions per host. Follow the root `LLM_VERIFICATION.md`;
155
+ unsupported isolation is `INCONCLUSIVE`, not a release pass.
156
+
147
157
  See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)
148
158
  for ownership, and [the ledger contract](docs/architecture/ledger.md) for the
149
159
  record and gate invariants.
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/__init__.py RENAMED
@@ -1,4 +1,4 @@
1
1
  """Cuff's host-neutral claim and evidence gate."""
2
2
 
3
3
  __all__ = ["__version__"]
4
- __version__ = "0.2.0"
4
+ __version__ = "0.2.1"
{cuff_cli-0.2.0 → cuff_cli-0.2.1/core/cuff_cli.egg-info}/PKG-INFO RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: cuff-cli
3
- Version: 0.2.0
3
+ Version: 0.2.1
4
4
  Summary: Cuff subject-bound claim, evidence, and verification gate.
5
5
  Author: Fab7
6
6
  License-Expression: Apache-2.0
@@ -38,7 +38,7 @@ worktree, or stages, commits, fetches, pushes, releases, or deploys anything.
38
38
  Install a released version as a standard uv-managed tool:
39
39
 
40
40
  ```bash
41
- uv tool install cuff-cli==0.2.0
41
+ uv tool install cuff-cli==0.2.1
42
42
  cuff --version
43
43
  ```
44
44
 
@@ -142,19 +142,29 @@ Validate the built candidate and both host payloads without touching the
142
142
  normal host configuration:
143
143
 
144
144
  ```bash
145
- uv build --out-dir ../sandbox/cuff-01/dist
145
+ uv build --out-dir ../sandbox/cuff-02/dist
146
146
  uv run python tools/local_release_check.py --host all
147
147
  uv run python tools/local_release_check.py --host all --prepare-auth \
148
148
  --candidate-commit COMMIT \
149
- --evidence-dir ../sandbox/cuff-01/e2e
149
+ --evidence-dir ../sandbox/cuff-02/e2e
150
150
  # Log each CLI in using the isolated home paths printed by the prepare phase.
151
151
  uv run python tools/local_release_check.py --host all --live --reuse-prepared \
152
152
  --candidate-commit COMMIT \
153
- --evidence-dir ../sandbox/cuff-01/e2e \
153
+ --evidence-dir ../sandbox/cuff-02/e2e \
154
+ --qualification-manifest ../sandbox/cuff-02/control/qualification.json \
155
+ --preflight-evidence ../sandbox/cuff-02/control/preflight.json \
154
156
  --codex-model MODEL \
155
157
  --claude-model MODEL
156
158
  ```
157
159
 
160
+ Before `--live`, freeze the exact candidate, host order, `current` and `stale`
161
+ cases, three-valid-sample rule, prompts, tool policies, and containment policies
162
+ in the qualification manifest. A trusted non-LLM runner must then record a
163
+ passing containment preflight for the same qualification and policy digests.
164
+ The checker rejects missing or mismatched controls and runs six fresh
165
+ workspaces and host sessions per host. Follow the root `LLM_VERIFICATION.md`;
166
+ unsupported isolation is `INCONCLUSIVE`, not a release pass.
167
+
158
168
  See [RUNBOOK.md](RUNBOOK.md) for operations, [the architecture overview](docs/architecture/overview.md)
159
169
  for ownership, and [the ledger contract](docs/architecture/ledger.md) for the
160
170
  record and gate invariants.
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/pyproject.toml RENAMED
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
4
4
 
5
5
  [project]
6
6
  name = "cuff-cli"
7
- version = "0.2.0"
7
+ version = "0.2.1"
8
8
  description = "Cuff subject-bound claim, evidence, and verification gate."
9
9
  readme = "README.md"
10
10
  requires-python = ">=3.11"
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/LICENSE RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/__main__.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/cli.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/errors.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/gate.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/git.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/ledger.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/core/cuff/subject.py RENAMED
File without changes
{cuff_cli-0.2.0 → cuff_cli-0.2.1}/setup.cfg RENAMED
File without changes