gargoyle-receipts 0.7.0.dev0__tar.gz → 0.7.1.dev0__tar.gz

{gargoyle_receipts-0.7.0.dev0/gargoyle_receipts.egg-info → gargoyle_receipts-0.7.1.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.7.0.dev0
+Version: 0.7.1.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.7.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.7.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0}/README.md

@@ -21,7 +21,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.7.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.7.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0}/gargoyle/cli.py

@@ -246,6 +246,10 @@ def cmd_audit(args) -> int:
             why = (" (%s)" % r["verdict"]) if r["kind"] == "refused" and r["verdict"] else ""
             if r.get("released_by"):
                 why += " released by " + ", ".join(r["released_by"])
+            if r.get("state"):
+                # A state-bound call: the target as it was approved, and as the run left it.
+                pre, post = (r["state"].get("pre") or "")[:8], (r["state"].get("post") or "")[:8]
+                why += " state %s -> %s" % (pre or "?", post or "?") if post else " state %s" % pre
             print("%4s %-5s %-8s %-24s %-28s %s%s" % (r["seq"] if r["seq"] is not None else "?",
                                                       "ok" if r["accepted"] else "FAIL", r["kind"] or "?",
                                                       (r["tool"] or "?")[:24], (r["principal"] or "?")[:28], r["reason"], why))

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0}/gargoyle/evidence.py

@@ -160,7 +160,8 @@ def verify_log(
     {"accepted", "reason", "tail_sha256", "count", "honored", "refused",
      "entries": [{"seq", "kind", "tool", "principal", "accepted", "reason", "verdict", "released_by"}, ...]},
     `reason` the verification outcome, `verdict` what the executor recorded,
-    `released_by` the approver key ids of the grants an honored held call carried.
+    `released_by` the approver key ids of the grants an honored held call carried,
+    `state` {"pre", "post"} the target's state hashes when the call was state-bound.
     Verification continues past a bad entry so the report names every one."""
     trust = dict(issuer_public_keys=issuer_public_keys, executor_public_keys=executor_public_keys,
                  approver_public_keys=approver_public_keys)
@@ -178,7 +179,7 @@ def verify_log(
             rc = rc if isinstance(rc, dict) else {}
             report.append({"seq": None, "kind": None, "tool": rc.get("tool"), "principal": rc.get("principal"),
                            "accepted": False, "reason": REF_EVIDENCE_UNCHAINED if legacy else REF_EVIDENCE_MALFORMED,
-                           "verdict": None, "released_by": []})
+                           "verdict": None, "released_by": [], "state": None})
             all_ok = False
             continue
         e = raw
@@ -206,8 +207,12 @@ def verify_log(
         counts[e["kind"]] += 1
         released_by = [g.get("approver_key_id") for g in (e["grant"] if isinstance(e["grant"], list) else [e["grant"]])
                        if isinstance(g, dict)] if e["grant"] is not None else []
+        ex = e["execution"] if isinstance(e["execution"], dict) else {}
+        state = ({"pre": ex.get("pre_state_sha256"), "post": ex.get("post_state_sha256")}
+                 if ex.get("pre_state_sha256") or ex.get("post_state_sha256") else None)
         report.append({"seq": e["seq"], "kind": e["kind"], "tool": e["tool"], "principal": e["principal"],
-                       "accepted": ok, "reason": reason, "verdict": e["reason"], "released_by": released_by})
+                       "accepted": ok, "reason": reason, "verdict": e["reason"], "released_by": released_by,
+                       "state": state})
         all_ok = all_ok and ok
         # The chain continues from what the file says, so one bad entry is
         # reported once rather than cascading into every later one.

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0/gargoyle_receipts.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.7.0.dev0
+Version: 0.7.1.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -59,7 +59,7 @@ your MCP server and lets through only what both agreed to.
 
 [![PyPI](https://img.shields.io/pypi/v/gargoyle-receipts)](https://pypi.org/project/gargoyle-receipts/)
 
-Status: pre-release (`0.7.0.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
+Status: pre-release (`0.7.1.dev0`, on PyPI as `gargoyle-receipts`). The wire format is `gargoyle/3` and may
 still change before the first release; it is specified in [SPEC.md](SPEC.md).
 
 ## What a receipt gives you

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gargoyle-receipts"
-version = "0.7.0.dev0"
+version = "0.7.1.dev0"
 description = "Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls."
 readme = "README.md"
 requires-python = ">=3.12"

{gargoyle_receipts-0.7.0.dev0 → gargoyle_receipts-0.7.1.dev0}/tests/test_state.py

@@ -168,3 +168,13 @@ def test_middleware_refuses_when_the_file_moved_between_card_and_run(tmp_path):
     chain = verify_chain(gate["envelope"], ex, grant=gate["grant"], issuer_public_keys=ISSUER_KEYS,
                          executor_public_keys={"executor-1": executor.public_key()}, approver_public_keys={"approver-1": approver.public_key()})
     assert chain["reason"] == ACCEPT_CHAIN_VERIFIED
+    # The audit names the state transition.
+    from gargoyle.evidence import verify_log
+    entry = {"evidence_version": "gargoyle-evidence/2", "seq": 1, "prev_sha256": "0" * 64, "at": NOW.isoformat(), "kind": "honored",
+             "tool": "write_file", "args_sha256": gate["envelope"]["request_context"]["args_sha256"], "principal": "agent-7",
+             "reason": gate["reason"], "receipt": gate["envelope"], "grant": gate["grant"], "execution": ex}
+    from gargoyle.evidence import entry_sha256
+    entry["entry_sha256"] = entry_sha256(entry)
+    v = verify_log([entry], issuer_public_keys=ISSUER_KEYS, executor_public_keys={"executor-1": executor.public_key()},
+                   approver_public_keys={"approver-1": approver.public_key()})
+    assert v["accepted"] and v["entries"][0]["state"] == {"pre": ex["pre_state_sha256"], "post": ex["post_state_sha256"]}