erdl-formal 0.1.0__tar.gz

erdl_formal-0.1.0/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

erdl_formal-0.1.0/NOTICE

@@ -0,0 +1,2 @@
+erdl-formal
+Copyright 2026 Shenzhen Miaojing Technology Co., Ltd.

erdl_formal-0.1.0/PKG-INFO

@@ -0,0 +1,169 @@
+Metadata-Version: 2.4
+Name: erdl-formal
+Version: 0.1.0
+Summary: Determinism isn't tested — it's proven. SMT-based formal verification for ERDL, the rule language of enterprise AI agents.
+Author-email: OpenOBA <support@openoba.com>
+License: Apache-2.0
+Keywords: erdl,formal-verification,smt,z3,cvc5,policy,ai-agent,deterministic
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE
+Requires-Dist: z3-solver>=4.13
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Dynamic: license-file
+
+# erdl-formal
+
+**确定性，不是测出来的，是证出来的。**
+
+erdl-formal 是 ERDL 表达内核的**形式化验证器**：把规则编译到 SMT（Z3），做**静态性质证明**——不是「测试通过」，而是「数学上不存在反例」。
+
+> ERDL 是企业 AI Agent 的确定性规则语言（34 节点类型化表达式树 + E1–E12 求值约束）。本仓库回答一个问题：**这条规则，在所有输入下，会不会出错、会不会误放行、会不会该拦不拦？**
+
+## 为什么是现在：LLM 有蛮力，没方向
+
+LLM 是概率性的：同一个输入，两种回答。把企业决策交给概率分布，审计迟早会问——「这个决定，依据是什么？」
+
+行业共识正在成形：**LLM 负责理解，规则负责裁决**——在 Agent 前面，必须有一层确定性规则引擎。但规则引擎的「确定性」通常靠单元测试背书，而测试只能证明**测过的输入**是对的。
+
+金融、保险、政务这类强监管行业，审计只问一个问题：
+
+> **这条规则，对所有输入都成立吗？**
+
+抽样测试回答不了这个问题，回答只能是证明。Cedar Analysis 在 AWS 内部验证了这条路（Lean 形式化 + SMT 符号分析）；erdl-formal 对 ERDL 表达内核做同样的事——把「确定性」从**抽样测试**升到**全量证明**。
+
+**和 Cedar 同一条路（形式化策略分析），不同的战场：我们证明的是为钱、时间和决策对象而生的企业规则内核。**
+
+## 30 秒，看一个证明
+
+G3 密级访问控制：文件密级 > 操作员密级 → DENY。要证明这条规则**可达**且 **fail-closed**：
+
+```python
+from erdl_formal.field_contracts import FieldContract, Schema
+from erdl_formal.properties import always_denies
+
+schema = Schema()
+schema.add(FieldContract(field="file_cls", type="int"))
+schema.add(FieldContract(field="op_cls", type="int"))
+
+# when: file_cls > op_cls  →  DENY
+rule = ["gt", ["field", "file_cls"], ["field", "op_cls"]]
+
+# 一条断言，同时证明两条性质：
+# 1) 可达 —— 字段都在时，密级更高确实触发拦截
+# 2) fail-closed —— op_cls 缺失时，比较按 E11 折叠为假，
+#    规则绝不产生误放行绕过
+assert always_denies(rule, schema, premises=["file_cls", "op_cls"], missing_field="op_cls")
+```
+
+背后没有测试用例，没有抽样。Z3 在**所有整数**的空间里搜索违反性质的输入：找到，返回**可回放的具体反例**（能丢回真实引擎复核）；找不到，UNSAT——性质对全量输入成立，证毕。
+
+## 能证明什么
+
+| 性质 | 含义 | 来源 |
+|---|---|---|
+| never-errors | 求值永不产生 EvalError | Cedar |
+| always-denies | 命中即拦截（含 fail-closed：字段缺失不绕过）| Cedar + E11 |
+| always-allows / subsumption / equivalence / disjointness | 放行 / 蕴含 / 等价 / 互斥 | Cedar |
+| override-soundness | override 仅 DENY→ALLOW 方向（不覆盖到更不安全态）| **ERDL 特有** |
+| ring-respect | 无 override 时，ring 顺序在 DENY 方向被尊重 | **ERDL 特有** |
+| emergency-shortcut | EMERGENCY_HALT 命中即短路 | **ERDL 特有** |
+
+每个性质都能合成具体反例，反例可回放真实引擎交叉验证——证明 + 差分，双保险。
+
+## 34/34 节点覆盖，E1–E12 精确语义
+
+- **34 节点全部有 SMT 编码**：取值 / 逻辑 / 比较 / 集合 / 字符串 / 存在量纲 / 量词 / 算术 / 时间 / 聚合。
+- 关键语义不是「大致对」，是**逐位精确**：
+  - **E2** 定点小数：scale=14 + half-even——钱，不允许 `0.1 + 0.2` 式漂移；
+  - **E8** 量词空数组折叠：反空洞真，`all([])` 是假不是真；
+  - **E11** 三值逻辑：字段缺失在叶子处折叠为假（非 Kleene，不 fail-open）；
+  - **E12** tier 折叠、**E10** NFC 归一化。
+
+## 独立验证者：三重独立，逐字节对拍
+
+验证者的可信度来自**不看被验证者的答案**。erdl-formal 只依据规范（[`erdl-spec-v2.0`](https://github.com/OpenOBA/erdl-landing/blob/main/spec/erdl-spec-v2.0.md)）编码，零依赖任何 ERDL 引擎实现，与 `erdl`（TS 引擎）、`erdl-vectors`（冻结向量）构成三重独立：
+
+| 交叉验证 | 对象 | 结果 |
+|---|---|---|
+| 定点小数 | `fixed_point.py` ↔ erdl `fixed-point.js` | 逐字节一致 |
+| 裁决语义 | `resolution.py` ↔ erdl `Evaluator` | 4 场景 |
+| 算术向量 | ↔ erdl-vectors V-ENGINE | 7/7 |
+| 日历向量 | ↔ erdl-vectors V-ENGINE | 6/6 |
+| G3 反例回放 | `tvl.py` ↔ erdl engine | 逐场景一致 |
+
+**Measurements, not endorsements.** 三个独立构建的系统逐字节一致——说明规范足够精确，能支撑独立实现的精确复现。
+
+## 与 Cedar / OPA 的差异
+
+| | Cedar Analysis | OPA / Rego | **erdl-formal** |
+|---|---|---|---|
+| 形式化 | ✅ Lean + SMT（业界最强）| ❌ 无形式化语义（实现即规范）| ✅ SMT（Z3）|
+| 钱 | 小数仅扩展插件 | float64 丢精度 | ✅ scale=14 定点 + half-even |
+| 决策对象 | 只有策略 ID | 日志无签名 | ✅ 富决策对象（DO）|
+| 自然语言 | 单向（NL→策略）| 单向 | ✅ 确定性 gloss 锚定回译（双向）|
+
+差异不是「更形式化」——Cedar 的形式化栈是业界标杆。差异在**被形式化的东西**：ERDL 是为钱、时间、聚合、量词、决策对象与双向自然语言而生的企业规则内核，这些在 Cedar / OPA 的世界里不存在。
+
+## 架构
+
+```
+ERDL 规则 (S-expression)
+   │
+   ▼  compiler.py（符号编译器：schema 驱动字段类型 + 量词索引展开）
+Z3 TVL 表达式（TVL(τ) = Def | Missing，叶子折叠）
+   │
+   ▼  properties.py（性质验证）/ resolution.py（裁决参考模型）
+sat / unsat + 反例（回放真实引擎交叉验证）
+```
+
+## 安装
+
+**用户**（从 PyPI，一条命令）：
+
+```bash
+pip install erdl-formal
+```
+
+**开发者**（从源码，可编辑安装，改代码即时生效）：
+
+```bash
+git clone https://github.com/OpenOBA/erdl-formal.git
+cd erdl-formal
+python -m pip install -e ".[dev]"   # Python ≥3.11（3.14 开发），z3-solver ≥4.13（5.1.0 验证）
+```
+
+**从源码构建分发包**（wheel + sdist，供发布 / 离线分发）：
+
+```bash
+python -m pip install build
+python -m build        # 产出 dist/erdl_formal-0.1.0-py3-none-any.whl + .tar.gz
+```
+
+## 快速上手
+
+```bash
+pytest                               # 130 全绿
+python examples/verify_g3.py         # 验证 G3 密级规则（可达 + fail-closed）
+python replay/crosscheck-vectors.py  # 与 erdl-vectors 冻结向量对拍
+```
+
+## 文档
+
+- `docs/semantics.md` — 34 节点指称语义
+- `docs/tvl-encoding.md` — 三值逻辑 SMT 编码规范
+- `docs/field-contracts.md` — 验证 schema 契约
+- `docs/DEVELOPER-GUIDE.md` — 二开指南（架构 / 加节点 / 加性质 / API）
+
+## 贡献与安全
+
+- `CONTRIBUTING.md` — 贡献流程（先 issue 后 PR / review）
+- `SECURITY.md` — 漏洞私下报，不开公开 issue
+- `CHANGELOG.md` — 变更记录（Keep a Changelog）
+- `CODE_OF_CONDUCT.md` / `style_guide.md`
+
+## 许可证
+
+Apache-2.0 · © 2026 深圳市秒镜科技有限公司 (Shenzhen Miaojing Technology Co., Ltd.)

erdl_formal-0.1.0/README.md

@@ -0,0 +1,153 @@
+# erdl-formal
+
+**确定性，不是测出来的，是证出来的。**
+
+erdl-formal 是 ERDL 表达内核的**形式化验证器**：把规则编译到 SMT（Z3），做**静态性质证明**——不是「测试通过」，而是「数学上不存在反例」。
+
+> ERDL 是企业 AI Agent 的确定性规则语言（34 节点类型化表达式树 + E1–E12 求值约束）。本仓库回答一个问题：**这条规则，在所有输入下，会不会出错、会不会误放行、会不会该拦不拦？**
+
+## 为什么是现在：LLM 有蛮力，没方向
+
+LLM 是概率性的：同一个输入，两种回答。把企业决策交给概率分布，审计迟早会问——「这个决定，依据是什么？」
+
+行业共识正在成形：**LLM 负责理解，规则负责裁决**——在 Agent 前面，必须有一层确定性规则引擎。但规则引擎的「确定性」通常靠单元测试背书，而测试只能证明**测过的输入**是对的。
+
+金融、保险、政务这类强监管行业，审计只问一个问题：
+
+> **这条规则，对所有输入都成立吗？**
+
+抽样测试回答不了这个问题，回答只能是证明。Cedar Analysis 在 AWS 内部验证了这条路（Lean 形式化 + SMT 符号分析）；erdl-formal 对 ERDL 表达内核做同样的事——把「确定性」从**抽样测试**升到**全量证明**。
+
+**和 Cedar 同一条路（形式化策略分析），不同的战场：我们证明的是为钱、时间和决策对象而生的企业规则内核。**
+
+## 30 秒，看一个证明
+
+G3 密级访问控制：文件密级 > 操作员密级 → DENY。要证明这条规则**可达**且 **fail-closed**：
+
+```python
+from erdl_formal.field_contracts import FieldContract, Schema
+from erdl_formal.properties import always_denies
+
+schema = Schema()
+schema.add(FieldContract(field="file_cls", type="int"))
+schema.add(FieldContract(field="op_cls", type="int"))
+
+# when: file_cls > op_cls  →  DENY
+rule = ["gt", ["field", "file_cls"], ["field", "op_cls"]]
+
+# 一条断言，同时证明两条性质：
+# 1) 可达 —— 字段都在时，密级更高确实触发拦截
+# 2) fail-closed —— op_cls 缺失时，比较按 E11 折叠为假，
+#    规则绝不产生误放行绕过
+assert always_denies(rule, schema, premises=["file_cls", "op_cls"], missing_field="op_cls")
+```
+
+背后没有测试用例，没有抽样。Z3 在**所有整数**的空间里搜索违反性质的输入：找到，返回**可回放的具体反例**（能丢回真实引擎复核）；找不到，UNSAT——性质对全量输入成立，证毕。
+
+## 能证明什么
+
+| 性质 | 含义 | 来源 |
+|---|---|---|
+| never-errors | 求值永不产生 EvalError | Cedar |
+| always-denies | 命中即拦截（含 fail-closed：字段缺失不绕过）| Cedar + E11 |
+| always-allows / subsumption / equivalence / disjointness | 放行 / 蕴含 / 等价 / 互斥 | Cedar |
+| override-soundness | override 仅 DENY→ALLOW 方向（不覆盖到更不安全态）| **ERDL 特有** |
+| ring-respect | 无 override 时，ring 顺序在 DENY 方向被尊重 | **ERDL 特有** |
+| emergency-shortcut | EMERGENCY_HALT 命中即短路 | **ERDL 特有** |
+
+每个性质都能合成具体反例，反例可回放真实引擎交叉验证——证明 + 差分，双保险。
+
+## 34/34 节点覆盖，E1–E12 精确语义
+
+- **34 节点全部有 SMT 编码**：取值 / 逻辑 / 比较 / 集合 / 字符串 / 存在量纲 / 量词 / 算术 / 时间 / 聚合。
+- 关键语义不是「大致对」，是**逐位精确**：
+  - **E2** 定点小数：scale=14 + half-even——钱，不允许 `0.1 + 0.2` 式漂移；
+  - **E8** 量词空数组折叠：反空洞真，`all([])` 是假不是真；
+  - **E11** 三值逻辑：字段缺失在叶子处折叠为假（非 Kleene，不 fail-open）；
+  - **E12** tier 折叠、**E10** NFC 归一化。
+
+## 独立验证者：三重独立，逐字节对拍
+
+验证者的可信度来自**不看被验证者的答案**。erdl-formal 只依据规范（[`erdl-spec-v2.0`](https://github.com/OpenOBA/erdl-landing/blob/main/spec/erdl-spec-v2.0.md)）编码，零依赖任何 ERDL 引擎实现，与 `erdl`（TS 引擎）、`erdl-vectors`（冻结向量）构成三重独立：
+
+| 交叉验证 | 对象 | 结果 |
+|---|---|---|
+| 定点小数 | `fixed_point.py` ↔ erdl `fixed-point.js` | 逐字节一致 |
+| 裁决语义 | `resolution.py` ↔ erdl `Evaluator` | 4 场景 |
+| 算术向量 | ↔ erdl-vectors V-ENGINE | 7/7 |
+| 日历向量 | ↔ erdl-vectors V-ENGINE | 6/6 |
+| G3 反例回放 | `tvl.py` ↔ erdl engine | 逐场景一致 |
+
+**Measurements, not endorsements.** 三个独立构建的系统逐字节一致——说明规范足够精确，能支撑独立实现的精确复现。
+
+## 与 Cedar / OPA 的差异
+
+| | Cedar Analysis | OPA / Rego | **erdl-formal** |
+|---|---|---|---|
+| 形式化 | ✅ Lean + SMT（业界最强）| ❌ 无形式化语义（实现即规范）| ✅ SMT（Z3）|
+| 钱 | 小数仅扩展插件 | float64 丢精度 | ✅ scale=14 定点 + half-even |
+| 决策对象 | 只有策略 ID | 日志无签名 | ✅ 富决策对象（DO）|
+| 自然语言 | 单向（NL→策略）| 单向 | ✅ 确定性 gloss 锚定回译（双向）|
+
+差异不是「更形式化」——Cedar 的形式化栈是业界标杆。差异在**被形式化的东西**：ERDL 是为钱、时间、聚合、量词、决策对象与双向自然语言而生的企业规则内核，这些在 Cedar / OPA 的世界里不存在。
+
+## 架构
+
+```
+ERDL 规则 (S-expression)
+   │
+   ▼  compiler.py（符号编译器：schema 驱动字段类型 + 量词索引展开）
+Z3 TVL 表达式（TVL(τ) = Def | Missing，叶子折叠）
+   │
+   ▼  properties.py（性质验证）/ resolution.py（裁决参考模型）
+sat / unsat + 反例（回放真实引擎交叉验证）
+```
+
+## 安装
+
+**用户**（从 PyPI，一条命令）：
+
+```bash
+pip install erdl-formal
+```
+
+**开发者**（从源码，可编辑安装，改代码即时生效）：
+
+```bash
+git clone https://github.com/OpenOBA/erdl-formal.git
+cd erdl-formal
+python -m pip install -e ".[dev]"   # Python ≥3.11（3.14 开发），z3-solver ≥4.13（5.1.0 验证）
+```
+
+**从源码构建分发包**（wheel + sdist，供发布 / 离线分发）：
+
+```bash
+python -m pip install build
+python -m build        # 产出 dist/erdl_formal-0.1.0-py3-none-any.whl + .tar.gz
+```
+
+## 快速上手
+
+```bash
+pytest                               # 130 全绿
+python examples/verify_g3.py         # 验证 G3 密级规则（可达 + fail-closed）
+python replay/crosscheck-vectors.py  # 与 erdl-vectors 冻结向量对拍
+```
+
+## 文档
+
+- `docs/semantics.md` — 34 节点指称语义
+- `docs/tvl-encoding.md` — 三值逻辑 SMT 编码规范
+- `docs/field-contracts.md` — 验证 schema 契约
+- `docs/DEVELOPER-GUIDE.md` — 二开指南（架构 / 加节点 / 加性质 / API）
+
+## 贡献与安全
+
+- `CONTRIBUTING.md` — 贡献流程（先 issue 后 PR / review）
+- `SECURITY.md` — 漏洞私下报，不开公开 issue
+- `CHANGELOG.md` — 变更记录（Keep a Changelog）
+- `CODE_OF_CONDUCT.md` / `style_guide.md`
+
+## 许可证
+
+Apache-2.0 · © 2026 深圳市秒镜科技有限公司 (Shenzhen Miaojing Technology Co., Ltd.)

erdl_formal-0.1.0/pyproject.toml

@@ -0,0 +1,27 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "erdl-formal"
+version = "0.1.0"
+description = "Determinism isn't tested — it's proven. SMT-based formal verification for ERDL, the rule language of enterprise AI agents."
+readme = "README.md"
+requires-python = ">=3.11"
+license = { text = "Apache-2.0" }
+authors = [{ name = "OpenOBA", email = "support@openoba.com" }]
+keywords = ["erdl", "formal-verification", "smt", "z3", "cvc5", "policy", "ai-agent", "deterministic"]
+dependencies = ["z3-solver>=4.13"]
+
+[project.optional-dependencies]
+dev = ["pytest>=8"]
+
+[tool.setuptools]
+package-dir = { "" = "src" }
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]

erdl_formal-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

erdl_formal-0.1.0/src/erdl_formal/__init__.py

@@ -0,0 +1,21 @@
+# Copyright 2026 Shenzhen Miaojing Technology Co., Ltd.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""erdl-formal — ERDL expression kernel formal verification (SMT).
+
+Independent of any ERDL engine implementation (verifier independent of the
+verified, mirroring the erdl-vectors-independent-of-erdl principle).
+"""
+
+__version__ = "0.1.0"