darwin-agentic-cloud 3.0.2__tar.gz → 3.0.4__tar.gz

darwin_agentic_cloud-3.0.4/.gitleaks.toml

@@ -0,0 +1,10 @@
+title = "darwin gitleaks config"
+
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Captured AWS API response fixtures contain pagination tokens, not secrets"
+paths = [
+  '''tests/fixtures/.*''',
+]

darwin_agentic_cloud-3.0.4/.pre-commit-config.yaml

@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.0.3] — 2026-05-28
+
+### Added
+
+- CLI integration tests for `darwin run` (`tests/cli/test_run.py`). 15 new tests
+  covering argument parsing (no-args error, help output, documented flags),
+  workload resolution (file path vs inline code, nonexistent-file fallback),
+  flag handling (--substrate, --cost-cap, --timeout, --memory, --language),
+  output formats (--save writes valid JSON, --json emits parseable output), and
+  smoke regression for the file-exists-and-inline-code happy paths. Tests use
+  `typer.testing.CliRunner` with the underlying `darwin.run()` mocked so they
+  run without Docker or AWS credentials.
+- New `tests/cli/` directory + `__init__.py` for future per-verb CLI test files.
+
+### Internal
+
+- Test suite total: 388 → 403 passing.
+
 ## [3.0.2] — 2026-05-28
 
 ### Added

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/CODE_OF_CONDUCT.md

@@ -6,12 +6,7 @@
 
 ## What that means in practice
 
-- Be respectful. Disagree with ideas, not people.
-- No harassment, no discrimination, no personal attacks. Ever.
-- Assume good faith. Give people the benefit of the doubt.
-- Don't waste people's time. Read before asking, search before opening an issue.
-- Credit others' work. Don't claim what isn't yours.
-- Don't use this project to harm people. That includes building surveillance tools targeting individuals, weapons of mass harm, or systems designed to deceive at scale.
+- All actions must increase AI adoption by increasing AI safety.
 
 ## Scope
 

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: darwin-agentic-cloud
-Version: 3.0.2
+Version: 3.0.4
 Summary: Darwin — adaptive software systems. Includes darwin.agenticcloud, the verifiable agentic cloud. Open-source compute for AI agents with cryptographically signed attestations.
 Project-URL: Homepage, https://github.com/vje013/darwin-agentic-cloud
 Project-URL: Repository, https://github.com/vje013/darwin-agentic-cloud
@@ -275,7 +275,21 @@ Description-Content-Type: text/markdown
 [![Python: 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![Schema: v0.2](https://img.shields.io/badge/schema-v0.2-FFB86C.svg)](https://darwin-agentic-cloud.fly.dev/.well-known/schemas/attestation/v0.2)
 
-> **Verifiable compute for AI agents.** Every workload signed. Every cost capped. Every routing decision auditable. Open source, verified, free compute.
+> **Verifiable and free cloud compute for AI agents.**
+>
+> We provide an agent-first environment where every autonomous action and choice is bound and signed, including what they buy. 
+>
+> Your agent acts only where it can provably succeed, spends only what you authorized, and brings back a signed receipt for every step it took.
+> 
+> No new accounts. No new API keys.
+>
+> Just sign in with Gmail. Your card stays in your Google account.
+>
+> Open source. Free to users. All agent and human contributors welcome.
+>
+> Built on: webMCP + AP2
+>
+> Sandboxed Beta + Research: 6/1/2026
 
 **Install:** `pip install darwin-agentic-cloud`
 
@@ -292,6 +306,27 @@ Increase AI adoption by increasing AI safety.
 
 ---
 
+## Darwin's Promises (Beginning 6/1/2026)
+
+Darwin Agentic Cloud keeps businesses in control of their agent spend by providing deterministic execution + signed receipts over every automated purchase.
+
+Simply put, DAC dramatically increases the chances of your business’s agent giving you the purchase outcome you want.
+
+If you want your business’s agent booking your travel, buying your office supplies, making any business purchase at all, we make sure it actually happens.
+
+
+- DAC is free. You never pay us. Ever.
+- All DAC needs is your Google account.
+- You never give DAC your card.
+- You stay in control. Your AI can never act or spend beyond what you authorized.
+- We guarantee deterministic execution surfaces for your AI's actions.
+- Your AI only acts where it can succeed.
+- We provide receipts for your AI's actions.
+- We earn from merchants, not from you.
+- If a site is not agent-ready, we do not send your agent there.
+
+---
+
 ## The question agents can't answer today
 
 Your agent just executed code on its own. You don't see what happened. You can't replay it. You can't prove it ran. You can't show a regulator, an auditor, or another agent that the workload actually executed on real hardware under your policy at the cost you agreed to.
@@ -389,7 +424,7 @@ Every `darwin.run()` call returns a v0.2 attestation. The CLI renders it as an e
 | `issued_at` | When the execution happened |
 | `workload` (sha256) | Exactly what code/spec was executed |
 | `output` (sha256) | Exactly what stdout was produced |
-| `cost` | Real wall-time cost, computed from substrate-specific pricing |
+| `cost` | Real wall-time cost (what you'd pay on a non-Darwin cloud) |
 | `substrate` + `version` | Which substrate ran the workload |
 | `evidence` | Substrate-specific receipt (container status, exit code, hashes, wall time) |
 | `sub-signer` (class key) | Substrate identity signature, anchored to the public Darwin keylist |
@@ -422,10 +457,8 @@ uv pip install -e .
 
 - **Python 3.11+**
 - **Docker** for local execution (any recent Docker Desktop / Engine works)
-- **AWS credentials** in env for AWS Batch / Lambda substrates (optional)
-- **Modal token** in env for the Modal substrate (optional)
 
-If only Docker is available, you get `local-docker-v0`. If AWS creds are set, you also get the four Lambda regions and AWS Batch. Auto-discovery happens at every `darwin.run()` call.
+If only Docker is available, you get `local-docker-v0`. For web based cloud compute, you also get the four Lambda regions and AWS Batch. Auto-discovery happens at every `darwin.run()` call.
 
 ---
 
@@ -461,7 +494,7 @@ Fetches the keylist, looks up the substrate identity key, verifies the signature
 
 ### `darwin price`
 
-Preflight only — see what each substrate would cost without running.
+Preflight only — see what each run environment would cost on a non-Darwin cloud.
 
 ```bash
 darwin price 'print("hi")'
@@ -470,7 +503,7 @@ darwin price hello.py --substrate aws-batch
 darwin price hello.py --json
 ```
 
-Returns a table sorted by estimated cost. Useful for deciding which substrate to run a real workload on.
+Returns a table sorted by estimated cost. Useful for deciding which substrate to run a workload on later if you choose a non-Darwin cloud.
 
 ### `darwin list`
 
@@ -481,7 +514,7 @@ darwin list
 darwin list --json
 ```
 
-Auto-discovery checks credentials, environment variables, and daemon availability. Substrates that fail any check are omitted with a reason.
+Auto-discovery checks environment variables and daemon availability. Substrates that fail any check are omitted with a reason.
 
 ### `darwin sign`
 
@@ -613,7 +646,7 @@ Or manually add to your `claude_desktop_config.json`:
 |---|---|
 | `darwin_run` | Execute workload, return signed v0.2 attestation |
 | `darwin_verify` | Verify attestation against keylist |
-| `darwin_price` | Get cost quote per available substrate |
+| `darwin_price` | Get cost quote per available substrate (what this would've cost you on a non-Darwin cloud) |
 | `darwin_list` | List discovered substrates |
 | `darwin_who` | Show whose keys signed an attestation |
 | `darwin_history` | Recent attestations from local storage |
@@ -675,7 +708,7 @@ Each substrate publishes its own evidence schema. The schema URI is embedded in
 
 ### The Value-Added Service (VAS) block
 
-The VAS block is Darwin's commercial claim — three concrete services Darwin's signing layer provides on top of the wholesale substrate execution:
+The VAS block is Darwin's economic claim — three concrete services Darwin's signing layer provides on top of the wholesale substrate execution:
 
 ```json
 "value_added_service": {
@@ -705,13 +738,11 @@ Three claims, all auditable from the attestation alone:
 2. **Cost cap enforcement.** Pre-execution estimate, actual cost, headroom, within-cap flag.
 3. **Routing decision.** What policy was used, which substrate was picked, what was rejected and why.
 
----
+--- 
 
-## The toll-booth model
+## Darwin is **open.**
 
-Darwin is **open verification, paid signing.**
-
-**What's open (forever, free, Apache 2.0):**
+**What's open (free, Apache 2.0):**
 - The attestation schema
 - The substrate interface
 - The local-docker substrate
@@ -720,14 +751,10 @@ Darwin is **open verification, paid signing.**
 - The schema endpoint
 - The cert renderer
 - All client code
-
-**What's commercial:**
 - The hosted signing service (substrate class keys)
 - The routing layer for cloud substrates (AWS Batch, Lambda, Modal)
-- Enterprise SLAs on the keylist
-- Compliance attestations (SOC 2, FedRAMP, ISO 27001)
 
-You can self-host Darwin entirely — every byte of the verification path is open source. The commercial value is in the trust anchor: a public keylist that customers, auditors, and regulators can rely on. Darwin charges for hosting that anchor.
+You can self-host Darwin entirely — every byte of the verification path is open source. 
 
 ---
 
@@ -865,7 +892,7 @@ total = att1['execution_result']['cost_usd'] + att2['execution_result']['cost_us
 print(f"Total cost: ${total:.4f}")
 ```
 
-### Batch processing with cost guard
+### Batch processing with cost guard (we guarantee your agent NEVER crosses your budget threshold)
 
 ```python
 from darwin import run, CostCapExceeded
@@ -1049,7 +1076,7 @@ If you use Darwin in research, please cite:
 
 Apache 2.0. See [LICENSE](LICENSE).
 
-The attestation schema, substrate interface, and verification code are open. Darwin Adaptive Systems retains commercial rights to the hosted signing service and routing layer.
+The hosted signing service and routing layer are free to all users today; Darwin Adaptive Systems reserves the right to offer paid enterprise tiers in future.
 
 ---
 

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/README.md

@@ -6,7 +6,21 @@
 [![Python: 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![Schema: v0.2](https://img.shields.io/badge/schema-v0.2-FFB86C.svg)](https://darwin-agentic-cloud.fly.dev/.well-known/schemas/attestation/v0.2)
 
-> **Verifiable compute for AI agents.** Every workload signed. Every cost capped. Every routing decision auditable. Open source, verified, free compute.
+> **Verifiable and free cloud compute for AI agents.**
+>
+> We provide an agent-first environment where every autonomous action and choice is bound and signed, including what they buy. 
+>
+> Your agent acts only where it can provably succeed, spends only what you authorized, and brings back a signed receipt for every step it took.
+> 
+> No new accounts. No new API keys.
+>
+> Just sign in with Gmail. Your card stays in your Google account.
+>
+> Open source. Free to users. All agent and human contributors welcome.
+>
+> Built on: webMCP + AP2
+>
+> Sandboxed Beta + Research: 6/1/2026
 
 **Install:** `pip install darwin-agentic-cloud`
 
@@ -23,6 +37,27 @@ Increase AI adoption by increasing AI safety.
 
 ---
 
+## Darwin's Promises (Beginning 6/1/2026)
+
+Darwin Agentic Cloud keeps businesses in control of their agent spend by providing deterministic execution + signed receipts over every automated purchase.
+
+Simply put, DAC dramatically increases the chances of your business’s agent giving you the purchase outcome you want.
+
+If you want your business’s agent booking your travel, buying your office supplies, making any business purchase at all, we make sure it actually happens.
+
+
+- DAC is free. You never pay us. Ever.
+- All DAC needs is your Google account.
+- You never give DAC your card.
+- You stay in control. Your AI can never act or spend beyond what you authorized.
+- We guarantee deterministic execution surfaces for your AI's actions.
+- Your AI only acts where it can succeed.
+- We provide receipts for your AI's actions.
+- We earn from merchants, not from you.
+- If a site is not agent-ready, we do not send your agent there.
+
+---
+
 ## The question agents can't answer today
 
 Your agent just executed code on its own. You don't see what happened. You can't replay it. You can't prove it ran. You can't show a regulator, an auditor, or another agent that the workload actually executed on real hardware under your policy at the cost you agreed to.
@@ -120,7 +155,7 @@ Every `darwin.run()` call returns a v0.2 attestation. The CLI renders it as an e
 | `issued_at` | When the execution happened |
 | `workload` (sha256) | Exactly what code/spec was executed |
 | `output` (sha256) | Exactly what stdout was produced |
-| `cost` | Real wall-time cost, computed from substrate-specific pricing |
+| `cost` | Real wall-time cost (what you'd pay on a non-Darwin cloud) |
 | `substrate` + `version` | Which substrate ran the workload |
 | `evidence` | Substrate-specific receipt (container status, exit code, hashes, wall time) |
 | `sub-signer` (class key) | Substrate identity signature, anchored to the public Darwin keylist |
@@ -153,10 +188,8 @@ uv pip install -e .
 
 - **Python 3.11+**
 - **Docker** for local execution (any recent Docker Desktop / Engine works)
-- **AWS credentials** in env for AWS Batch / Lambda substrates (optional)
-- **Modal token** in env for the Modal substrate (optional)
 
-If only Docker is available, you get `local-docker-v0`. If AWS creds are set, you also get the four Lambda regions and AWS Batch. Auto-discovery happens at every `darwin.run()` call.
+If only Docker is available, you get `local-docker-v0`. For web based cloud compute, you also get the four Lambda regions and AWS Batch. Auto-discovery happens at every `darwin.run()` call.
 
 ---
 
@@ -192,7 +225,7 @@ Fetches the keylist, looks up the substrate identity key, verifies the signature
 
 ### `darwin price`
 
-Preflight only — see what each substrate would cost without running.
+Preflight only — see what each run environment would cost on a non-Darwin cloud.
 
 ```bash
 darwin price 'print("hi")'
@@ -201,7 +234,7 @@ darwin price hello.py --substrate aws-batch
 darwin price hello.py --json
 ```
 
-Returns a table sorted by estimated cost. Useful for deciding which substrate to run a real workload on.
+Returns a table sorted by estimated cost. Useful for deciding which substrate to run a workload on later if you choose a non-Darwin cloud.
 
 ### `darwin list`
 
@@ -212,7 +245,7 @@ darwin list
 darwin list --json
 ```
 
-Auto-discovery checks credentials, environment variables, and daemon availability. Substrates that fail any check are omitted with a reason.
+Auto-discovery checks environment variables and daemon availability. Substrates that fail any check are omitted with a reason.
 
 ### `darwin sign`
 
@@ -344,7 +377,7 @@ Or manually add to your `claude_desktop_config.json`:
 |---|---|
 | `darwin_run` | Execute workload, return signed v0.2 attestation |
 | `darwin_verify` | Verify attestation against keylist |
-| `darwin_price` | Get cost quote per available substrate |
+| `darwin_price` | Get cost quote per available substrate (what this would've cost you on a non-Darwin cloud) |
 | `darwin_list` | List discovered substrates |
 | `darwin_who` | Show whose keys signed an attestation |
 | `darwin_history` | Recent attestations from local storage |
@@ -406,7 +439,7 @@ Each substrate publishes its own evidence schema. The schema URI is embedded in
 
 ### The Value-Added Service (VAS) block
 
-The VAS block is Darwin's commercial claim — three concrete services Darwin's signing layer provides on top of the wholesale substrate execution:
+The VAS block is Darwin's economic claim — three concrete services Darwin's signing layer provides on top of the wholesale substrate execution:
 
 ```json
 "value_added_service": {
@@ -436,13 +469,11 @@ Three claims, all auditable from the attestation alone:
 2. **Cost cap enforcement.** Pre-execution estimate, actual cost, headroom, within-cap flag.
 3. **Routing decision.** What policy was used, which substrate was picked, what was rejected and why.
 
----
+--- 
 
-## The toll-booth model
+## Darwin is **open.**
 
-Darwin is **open verification, paid signing.**
-
-**What's open (forever, free, Apache 2.0):**
+**What's open (free, Apache 2.0):**
 - The attestation schema
 - The substrate interface
 - The local-docker substrate
@@ -451,14 +482,10 @@ Darwin is **open verification, paid signing.**
 - The schema endpoint
 - The cert renderer
 - All client code
-
-**What's commercial:**
 - The hosted signing service (substrate class keys)
 - The routing layer for cloud substrates (AWS Batch, Lambda, Modal)
-- Enterprise SLAs on the keylist
-- Compliance attestations (SOC 2, FedRAMP, ISO 27001)
 
-You can self-host Darwin entirely — every byte of the verification path is open source. The commercial value is in the trust anchor: a public keylist that customers, auditors, and regulators can rely on. Darwin charges for hosting that anchor.
+You can self-host Darwin entirely — every byte of the verification path is open source. 
 
 ---
 
@@ -596,7 +623,7 @@ total = att1['execution_result']['cost_usd'] + att2['execution_result']['cost_us
 print(f"Total cost: ${total:.4f}")
 ```
 
-### Batch processing with cost guard
+### Batch processing with cost guard (we guarantee your agent NEVER crosses your budget threshold)
 
 ```python
 from darwin import run, CostCapExceeded
@@ -780,7 +807,7 @@ If you use Darwin in research, please cite:
 
 Apache 2.0. See [LICENSE](LICENSE).
 
-The attestation schema, substrate interface, and verification code are open. Darwin Adaptive Systems retains commercial rights to the hosted signing service and routing layer.
+The hosted signing service and routing layer are free to all users today; Darwin Adaptive Systems reserves the right to offer paid enterprise tiers in future.
 
 ---
 

darwin_agentic_cloud-3.0.4/att.json

@@ -0,0 +1 @@
+{"attestation_id":"att_ce01c3ba2a784505","schema":"darwin.cloud/agenticcloud/attestation/v0.2","issued_at":"2026-05-27T09:46:24Z","workload_spec_hash":"66af27007bdef0c4f5d7756ffd68919e6b9fae30f685ac38b80d88b68d2e45ee","execution_result":{"output_hash":"87a6e77e106d0aed7e2b52fd7108cee1cb8d7429dad7495e3e67d43dc40ab0a5","substrate":{"id":"local-docker-v0","version":"0.1.0","identity_signature":"KDtItT8vYsh3yJVuk2GXAqa/ksO6pQljggN86nSHs5gjNYmM8XWgcyumTBSFTQxWiIlvQ1xyqRPFyzVFSoM0Aw==","identity_signer_type":"darwin-class-key","identity_signer_key_id":"dac-class-local-docker-v0-ca698355dcb631e3","evidence_schema_id":"darwin.cloud/evidence/local-docker/v1","evidence":{"container_status":"ok","exit_code":0,"stdout_hash":"87a6e77e106d0aed7e2b52fd7108cee1cb8d7429dad7495e3e67d43dc40ab0a5","stderr_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","wall_time_sec":0.18253803253173828},"extensions":{},"tee_required":false},"cost_usd":0.00001825,"stdout":"Hello, agent. This receipt was produced by darwin.run().\n","stderr":""},"value_added_service":{"identity_signing":{"schema_compliant":true,"keylist_url":"https://darwin-agentic-cloud.fly.dev/.well-known/substrate-keys.json"},"cost_cap_enforcement":{"cap_usd":0.1,"estimated_usd_max":0.003,"actual_usd":0.00001825,"within_cap":true,"headroom_usd":0.09998175},"routing_decision":{"policy":"pick_by_cost","chosen_substrate_id":"local-docker-v0","chosen_reason":"lowest_estimated_cost ($0.003000)","candidates_considered":1,"rejected_substrates":[]}},"signer_key_id":"dac-local-d1bf7cad25875cee","signature":"4D7u2WbmkzMhtjsPw2HAxdg8ZgH467Wgk8R++lbDqkiWRQxmzcmi0t9IqoUtyitM5v/SV8Qpaq3+cr4twZSECw=="}

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/darwin/__init__.py

@@ -5,7 +5,7 @@ A family of modules:
     (more to come)
 """
 
-__version__ = "3.0.2"
+__version__ = "3.0.4"
 __author__ = "Vladimir J Edouard"
 __license__ = "Apache-2.0"
 

darwin_agentic_cloud-3.0.4/darwin/agenticcloud/attestation.py

@@ -0,0 +1,144 @@
+"""Build and verify signed attestations.
+
+An attestation is the cryptographic proof that a workload ran. It binds
+together: the workload that was requested, the result that was produced,
+the substrate that ran it, the cost, and the signer's identity.
+
+The signature covers the entire attestation payload. Any tampering with
+any field breaks verification.
+"""
+
+from __future__ import annotations
+
+import time
+import uuid
+from dataclasses import asdict
+
+from darwin.agenticcloud import ATTESTATION_SCHEMA
+from darwin.agenticcloud.hashing import canonical_json, content_hash
+from darwin.agenticcloud.signing import Signer, verify_signature
+from darwin.agenticcloud.types import Attestation, ExecutionResult, SignedAttestation, WorkloadSpec
+
+
+def build_signed_attestation(
+    spec: WorkloadSpec,
+    result: ExecutionResult,
+    signer: Signer,
+) -> SignedAttestation:
+    """Build a signed attestation from a workload spec and execution result."""
+    spec_dict = asdict(spec)
+    result_dict = asdict(result)
+
+    attestation = Attestation(
+        schema=ATTESTATION_SCHEMA,
+        attestation_id=str(uuid.uuid4()),
+        workload_spec_hash=content_hash(spec_dict),
+        workload_spec=spec_dict,
+        execution_result=result_dict,
+        signer_key_id=signer.key_id(),
+        issued_at=time.time(),
+    )
+
+    attestation_dict = asdict(attestation)
+    canonical = canonical_json(attestation_dict)
+
+    return SignedAttestation(
+        attestation=attestation_dict,
+        signature_b64=signer.sign(canonical),
+        public_key_b64=signer.public_key_b64(),
+    )
+
+
+def is_v02_wire(d: object) -> bool:
+    return (
+        isinstance(d, dict)
+        and "signature" in d
+        and "signer_key_id" in d
+        and isinstance(d.get("execution_result"), dict)
+        and isinstance(d["execution_result"].get("substrate"), dict)
+    )
+
+
+def _fetch_keylist(url: str) -> list:
+    import httpx
+
+    resp = httpx.get(url, timeout=10.0)
+    resp.raise_for_status()
+    return list(resp.json().get("keys", []))
+
+
+def verify_attestation_v02(att: dict, *, keylist: list | None = None) -> dict:
+    """Verify a v0.2 wire-form attestation. The identity signature is checked
+    against the substrate class key resolved from the public keylist - the
+    check anyone can run with only the file and the keylist URL."""
+    from darwin.agenticcloud.substrate.base import (
+        SUBSTRATE_KEYLIST_URL,
+        build_identity_payload,
+    )
+
+    out: dict = {
+        "ok": False,
+        "outer_ok": None,
+        "identity_ok": False,
+        "signer_key_id": att.get("signer_key_id"),
+        "identity_signer_key_id": None,
+        "reason": None,
+    }
+    sig_b64 = att.get("signature")
+    op_pub = att.get("operator_public_key_b64")
+    if sig_b64 and op_pub:
+        payload = {
+            k: v
+            for k, v in att.items()
+            if k not in ("signature", "signer_key_id", "operator_public_key_b64")
+        }
+        out["outer_ok"] = verify_signature(canonical_json(payload), sig_b64, op_pub)
+    try:
+        sub = att["execution_result"]["substrate"]
+        out["identity_signer_key_id"] = sub.get("identity_signer_key_id")
+        url = (
+            att.get("value_added_service", {})
+            .get("identity_signing", {})
+            .get("keylist_url", SUBSTRATE_KEYLIST_URL)
+        )
+        ks = keylist if keylist is not None else _fetch_keylist(url)
+        entry = next(
+            (k for k in ks if k.get("signer_key_id") == sub.get("identity_signer_key_id")), None
+        )
+        if entry is None:
+            out["reason"] = "substrate key not in keylist"
+        elif entry.get("status") != "active":
+            out["reason"] = f"substrate key not active ({entry.get('status')})"
+        else:
+            payload = build_identity_payload(
+                substrate_id=sub["id"],
+                substrate_version=sub["version"],
+                workload_spec_hash=att["workload_spec_hash"],
+                output_hash=att["execution_result"]["output_hash"],
+                evidence_schema_id=sub["evidence_schema_id"],
+                issued_at=att["issued_at"],
+            )
+            out["identity_ok"] = verify_signature(
+                canonical_json(payload), sub["identity_signature"], entry["public_key_b64"]
+            )
+    except Exception as e:
+        out["reason"] = out["reason"] or f"identity check error: {e}"
+    out["ok"] = out["identity_ok"] and (out["outer_ok"] is not False)
+    return out
+
+
+def verify_attestation(signed: "SignedAttestation | dict") -> bool:
+    if isinstance(signed, SignedAttestation):
+        return verify_signature(
+            canonical_json(signed.attestation), signed.signature_b64, signed.public_key_b64
+        )
+    if isinstance(signed, dict):
+        if all(k in signed for k in ("attestation", "signature_b64", "public_key_b64")):
+            return verify_signature(
+                canonical_json(signed["attestation"]),
+                signed["signature_b64"],
+                signed["public_key_b64"],
+            )
+        if is_v02_wire(signed):
+            return verify_attestation_v02(signed)["ok"]
+    return False

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/darwin/agenticcloud/cli.py

@@ -635,7 +635,7 @@ def price(
             "green" if q["status"] == "ok" else "yellow" if q["status"] == "rejected" else "red"
         )
         table.add_row(
-            q["substrate_id"],
+            str(q["substrate_id"]),
             cost_str,
             f"[{status_color}]{q['status']}[/{status_color}]",
         )
@@ -728,9 +728,9 @@ def sign(
     Upload the PEM contents as a secret to your hosted signer, then
     publish the public key in the substrate keylist.
     """
-    from darwin.agenticcloud.admin_cli import _cmd_generate
+    from darwin.agenticcloud.admin_cli import class_keys_generate
 
-    _cmd_generate(substrate_id=substrate_id, out_path=out)
+    class_keys_generate(substrate_id=substrate_id, out_dir=out or Path("./class-keys"))
 
 
 @app.command(name="try")
@@ -966,13 +966,32 @@ def attest_verify(
     if not file.exists():
         err_console.print(f"[red]File not found:[/red] {file}")
         raise typer.Exit(code=2)
-
     try:
         data = json.loads(file.read_text(encoding="utf-8"))
     except json.JSONDecodeError as e:
         err_console.print(f"[red]Invalid JSON:[/red] {e}")
         raise typer.Exit(code=2) from e
 
+    from darwin.agenticcloud.attestation import (
+        is_v02_wire,
+        verify_attestation,
+        verify_attestation_v02,
+    )
+
+    if is_v02_wire(data):
+        r = verify_attestation_v02(data)
+        ident = "✓" if r["identity_ok"] else "✗"
+        console.print(
+            "[green]✓ verified[/green]" if r["ok"] else "[red]✗ verification failed[/red]"
+        )
+        console.print(
+            f"  identity: {ident}  class key "
+            f"{r.get('identity_signer_key_id', '?')} (anchored to public keylist)"
+        )
+        if r.get("reason"):
+            console.print(f"  [dim]{r['reason']}[/dim]")
+        raise typer.Exit(code=0 if r["ok"] else 1)
+
     ok = verify_attestation(data)
     if ok:
         a = data.get("attestation", {})
@@ -981,9 +1000,8 @@ def attest_verify(
         console.print(f"  signer_key_id:  {a.get('signer_key_id', '?')}")
         console.print(f"  schema:         {a.get('schema', '?')}")
         raise typer.Exit(code=0)
-    else:
-        console.print("[red]✗ verification failed[/red]")
-        raise typer.Exit(code=1)
+    console.print("[red]✗ verification failed[/red]")
+    raise typer.Exit(code=1)
 
 
 @attest_app.command("show")

{darwin_agentic_cloud-3.0.2 → darwin_agentic_cloud-3.0.4}/darwin/agenticcloud/mcp_server.py

@@ -179,8 +179,8 @@ async def call_tool(name: str, arguments: dict[str, Any]) -> list[TextContent]:
     if handler is None:
         return [TextContent(type="text", text=json.dumps({"error": f"Unknown tool: {name}"}))]
     if asyncio.iscoroutinefunction(handler):
-        return await handler(arguments)
-    return handler(arguments)
+        return await handler(arguments)  # type: ignore[no-any-return]
+    return handler(arguments)  # type: ignore[return-value]
 
 
 async def _handle_run(arguments: dict[str, Any]) -> list[TextContent]:
@@ -372,7 +372,7 @@ def _handle_history(arguments: dict[str, Any]) -> list[TextContent]:
 
 
 def _handle_stats(arguments: dict[str, Any]) -> list[TextContent]:
-    stats = _store.stats()
+    stats = {"count": _store.count(), "total_cost_usd": _store.total_cost_usd()}
     return [TextContent(type="text", text=json.dumps(stats, indent=2))]