gargoyle-receipts 0.14.0.dev0__tar.gz → 0.14.2.dev0__tar.gz

{gargoyle_receipts-0.14.0.dev0/gargoyle_receipts.egg-info → gargoyle_receipts-0.14.2.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.14.0.dev0
+Version: 0.14.2.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/README.md

@@ -21,7 +21,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/gargoyle/cli.py

@@ -361,6 +361,12 @@ def cmd_audit(args) -> int:
               % (v["count"], v["honored"], v["refused"], failed, v["reason"], v["tail_sha256"][:16]))
         rc = 0 if v["accepted"] else 1
         entries = read_log(args.log)
+        if args.witness and not Path(args.witness).exists():
+            print("witness file not found: %s (copy the issuer's witness.jsonl here first)" % args.witness, file=sys.stderr)
+            return 2
+        if args.check_tree and not Path(args.check_tree).is_dir():
+            print("not a directory: %s" % args.check_tree, file=sys.stderr)
+            return 2
         if args.witness:
             # The issuer's signed record: the client's evidence must agree with it.
             from gargoyle.reconcile import reconcile
@@ -369,9 +375,16 @@ def cmd_audit(args) -> int:
             print("witness: %d entries, %s, tail %s" % (w["count"], w["reason"], w["tail_sha256"][:16]))
             principal = next((e.get("principal") for e in entries if isinstance(e, dict) and e.get("principal")), None)
             r = reconcile(entries, read_witness(args.witness), principal=principal)
+            older = [f for f in r["findings"] if f["finding"] == "PREDATES_WITNESS"]
             for f in r["findings"]:
+                if f["finding"] == "PREDATES_WITNESS":
+                    continue
                 print("  FINDING %-22s %s" % (f["finding"], " ".join("%s=%s" % (k, str(v)[:40]) for k, v in f.items() if k != "finding")))
-            print("reconciled: %d issued by the issuer, %d in evidence, %d finding(s)" % (r["issued"], r["evidence_with_receipt"], len(r["findings"])))
+            if older:
+                print("  note: %d honored row(s) predate the witness (started %s) and cannot be vouched for either way: seq %s"
+                      % (len(older), (r.get("horizon") or "?")[:19], ", ".join(str(f["seq"]) for f in older[:12]) + (" ..." if len(older) > 12 else "")))
+            hard = len(r["findings"]) - len(older)
+            print("reconciled: %d issued by the issuer, %d in evidence, %d finding(s)" % (r["issued"], r["evidence_with_receipt"], hard))
             rc = rc or (0 if (w["accepted"] and r["accepted"]) else 1)
         if args.check_tree:
             # Every file the gate wrote must still be as the gate left it.

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/gargoyle/reconcile.py

@@ -2,6 +2,7 @@
 the gated folder against the evidence.
 
 Findings, never silently fixed:
+  PREDATES_WITNESS      evidence from before the witness began; it can be vouched for neither way (information)
   UNWITNESSED_RECEIPT   evidence honors a decision the issuer never issued (forged or foreign)
   UNWITNESSED_RELEASE   a held call was honored but the issuer saw no grant for its hold (or plan)
   MISSING_EVIDENCE      the issuer issued a receipt to this principal and the client recorded nothing
@@ -33,9 +34,12 @@ def reconcile(evidence: Iterable[Any], witness: Iterable[Any], *, principal: Opt
     issued: Dict[str, Dict[str, Any]] = {}
     granted: Dict[str, List[Dict[str, Any]]] = {}
     plan_granted: Dict[str, List[Dict[str, Any]]] = {}
+    horizon: Optional[datetime] = None
     for w in witness:
         if not isinstance(w, dict):
             continue
+        if horizon is None:
+            horizon = _parse(w.get("at"))
         if w.get("event") == "issued" and isinstance(w.get("decision_id"), str):
             issued[w["decision_id"]] = w
         elif w.get("event") == "granted" and isinstance(w.get("approval_request_id"), str):
@@ -54,7 +58,11 @@ def reconcile(evidence: Iterable[Any], witness: Iterable[Any], *, principal: Opt
         w = issued.get(did)
         if e.get("kind") == "honored":
             if w is None:
-                findings.append({"finding": "UNWITNESSED_RECEIPT", "seq": e.get("seq"), "decision_id": did, "tool": e.get("tool")})
+                at_e = _parse(e.get("at"))
+                if horizon is not None and at_e is not None and at_e < horizon:
+                    findings.append({"finding": "PREDATES_WITNESS", "seq": e.get("seq"), "decision_id": did, "tool": e.get("tool")})
+                else:
+                    findings.append({"finding": "UNWITNESSED_RECEIPT", "seq": e.get("seq"), "decision_id": did, "tool": e.get("tool")})
                 continue
             if w.get("decision_sha256") != receipt.get("decision_sha256") or w.get("principal") != receipt.get("request_context", {}).get("principal"):
                 findings.append({"finding": "UNWITNESSED_RECEIPT", "seq": e.get("seq"), "decision_id": did, "tool": e.get("tool")})
@@ -78,7 +86,8 @@ def reconcile(evidence: Iterable[Any], witness: Iterable[Any], *, principal: Opt
             continue
         findings.append({"finding": "MISSING_EVIDENCE", "decision_id": did, "tool": w.get("tool"), "principal": w.get("principal"),
                          "held": bool(w.get("held")), "at": w.get("at")})
-    return {"accepted": not findings, "findings": findings,
+    hard = [f for f in findings if f["finding"] != "PREDATES_WITNESS"]
+    return {"accepted": not hard, "findings": findings, "horizon": horizon.isoformat() if horizon else None,
             "issued": len(issued), "evidence_with_receipt": len(seen_decisions)}
 
 

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/gargoyle/witness.py

@@ -63,6 +63,13 @@ class WitnessLog:
                     e = json.loads(line)
                     self.entries.append(e)
                     self._seq, self._tail = int(e["seq"]), e["entry_sha256"]
+        elif self.path is not None:
+            self.path.parent.mkdir(parents=True, exist_ok=True)
+            self.path.touch()
+        # Every start is on record: the first "started" entry is the witness's
+        # horizon (evidence older than it cannot be vouched for either way),
+        # and later ones mark restarts for the operator.
+        self.record("started", resumed=bool(self.entries))
 
     def record(self, event: str, **fields: Any) -> Dict[str, Any]:
         with self._lock:

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0/gargoyle_receipts.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.14.0.dev0
+Version: 0.14.2.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.14.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.14.2.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gargoyle-receipts"
-version = "0.14.0.dev0"
+version = "0.14.2.dev0"
 description = "Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls."
 readme = "README.md"
 requires-python = ">=3.12"

{gargoyle_receipts-0.14.0.dev0 → gargoyle_receipts-0.14.2.dev0}/tests/test_witness.py

@@ -46,12 +46,13 @@ def test_witness_entries_are_signed_and_chained(tmp_path):
     again.record("declined", approval_request_id="r-2")
     entries = read_witness(str(tmp_path / "w.jsonl"))
     v = verify_witness(entries, issuer_public_keys=ISSUER_KEYS)
-    assert v["accepted"] and v["count"] == 3 and [e["seq"] for e in entries] == [1, 2, 3]
-    forged = dict(entries[1], approver="mallory")
-    assert verify_witness([entries[0], forged, entries[2]], issuer_public_keys=ISSUER_KEYS)["entries"][1]["reason"] == REF_WITNESS_HASH_MISMATCH
+    assert v["accepted"] and v["count"] == 5 and [e["event"] for e in entries] == ["started", "issued", "granted", "started", "declined"]
+    assert entries[3]["resumed"] is True and entries[0]["resumed"] is False
+    forged = dict(entries[2], approver="mallory")
+    assert verify_witness(entries[:2] + [forged] + entries[3:], issuer_public_keys=ISSUER_KEYS)["entries"][2]["reason"] == REF_WITNESS_HASH_MISMATCH
     from gargoyle.witness import entry_sha256
     forged["entry_sha256"] = entry_sha256(forged)              # rehashed, but the issuer did not sign it
-    assert verify_witness([entries[0], forged], issuer_public_keys=ISSUER_KEYS)["entries"][1]["reason"] == REF_WITNESS_SIGNATURE_INVALID
+    assert verify_witness(entries[:2] + [forged], issuer_public_keys=ISSUER_KEYS)["entries"][2]["reason"] == REF_WITNESS_SIGNATURE_INVALID
     assert not verify_witness(entries, issuer_public_keys={"other": executor.public_key()})["accepted"]
 
 
@@ -95,14 +96,18 @@ def test_honest_evidence_reconciles_and_tampering_is_found(tmp_path):
     finally:
         up.close()
     evidence = read_log(str(tmp_path / "audit.jsonl")); witness = read_witness(str(tmp_path / "witness.jsonl"))
-    assert [e["event"] for e in witness] == ["issued", "issued", "granted"]
+    assert [e["event"] for e in witness] == ["started", "issued", "issued", "granted"]
     assert evidence[1]["ref"] == str(root / "n.md") and evidence[1]["evidence_version"] == "gargoyle-evidence/4"
     assert verify_log(evidence, issuer_public_keys=ISSUER_KEYS, executor_public_keys={"executor-1": executor.public_key()},
                       approver_public_keys={"approver-1": approver.public_key()})["accepted"]
     r = reconcile(evidence, witness, principal=PRINCIPAL)
     assert r["accepted"] and r["issued"] == 2 and r["evidence_with_receipt"] == 2
     # The witness is served to an authenticated caller too.
-    assert len(c.get("/witness", headers=h).json()["entries"]) == 3
+    assert len(c.get("/witness", headers=h).json()["entries"]) == 4
+    # Evidence from before the witness began is information, not a finding.
+    old = dict(evidence[0], at="2026-01-01T00:00:00+00:00", receipt=dict(evidence[0]["receipt"], decision_id="before-the-witness"))
+    r = reconcile(evidence + [old], witness, principal=PRINCIPAL)      # beside the real rows, not in place of one
+    assert r["accepted"] and [f["finding"] for f in r["findings"]] == ["PREDATES_WITNESS"] and r["horizon"]
 
     # 1. A forged honored entry for a decision the issuer never issued: the user holds the executor key, so it verifies alone.
     now = datetime.now(timezone.utc)
@@ -145,7 +150,21 @@ def test_audit_command_reports_reconciliation_and_tree(tmp_path, capsys):
     assert main(["audit", "--log", str(tmp_path / "audit.jsonl"), "--out", str(out), "--witness", str(tmp_path / "witness.jsonl"),
                  "--check-tree", str(root)]) == 0
     text = capsys.readouterr().out
-    assert "witness: 2 entries, WITNESS_VERIFIED" in text and "0 finding(s)" in text and "1 gated file(s) checked" in text
+    assert "witness: 3 entries, WITNESS_VERIFIED" in text and "0 finding(s)" in text and "1 gated file(s) checked" in text
     (root / "n.md").write_text("tampered", encoding="utf-8")
     assert main(["audit", "--log", str(tmp_path / "audit.jsonl"), "--out", str(out), "--check-tree", str(root)]) == 1
     assert "CHANGED_OUTSIDE_GATE" in capsys.readouterr().out
+
+
+def test_audit_names_a_missing_witness_or_folder_plainly(tmp_path, capsys):
+    from gargoyle.cli import main
+    log = tmp_path / "audit.jsonl"; log.write_text("")
+    out = tmp_path / "deploy"; out.mkdir()
+    (out / "public-keys.json").write_text(json.dumps({"issuer": {}, "executor": {}, "approver": {}}))
+    assert main(["audit", "--log", str(log), "--out", str(out), "--witness", str(tmp_path / "nope.jsonl")]) == 2
+    assert "witness file not found" in capsys.readouterr().err
+    assert main(["audit", "--log", str(log), "--out", str(out), "--check-tree", str(tmp_path / "nodir")]) == 2
+    assert "not a directory" in capsys.readouterr().err
+    # The issuer creates the witness file at start, before any decision.
+    w = WitnessLog(str(tmp_path / "fresh" / "witness.jsonl"), issuer, "issuer-1")
+    assert (tmp_path / "fresh" / "witness.jsonl").exists() and [e["event"] for e in w.entries] == ["started"]