ledgix-python 0.1.3__tar.gz → 0.1.4__tar.gz

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ledgix-python
-Version: 0.1.3
+Version: 0.1.4
 Summary: Agent-agnostic compliance shim for SOX 404 policy enforcement via the ALCV Vault
 Project-URL: Homepage, https://github.com/ledgix-dev/python-sdk
 Project-URL: Documentation, https://docs.ledgix.dev
@@ -40,7 +40,7 @@ Description-Content-Type: text/markdown
 
 # Ledgix ALCV — Python SDK
 
-[![PyPI](https://img.shields.io/badge/pypi-v0.1.3-blue)](https://pypi.org/project/ledgix-python/)
+[![PyPI](https://img.shields.io/badge/pypi-v0.1.4-blue)](https://pypi.org/project/ledgix-python/)
 [![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue)](https://python.org)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/README.md

@@ -1,6 +1,6 @@
 # Ledgix ALCV — Python SDK
 
-[![PyPI](https://img.shields.io/badge/pypi-v0.1.3-blue)](https://pypi.org/project/ledgix-python/)
+[![PyPI](https://img.shields.io/badge/pypi-v0.1.4-blue)](https://pypi.org/project/ledgix-python/)
 [![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue)](https://python.org)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "ledgix-python"
-version = "0.1.3"
+version = "0.1.4"
 description = "Agent-agnostic compliance shim for SOX 404 policy enforcement via the ALCV Vault"
 readme = "README.md"
 license = { text = "MIT" }

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/src/ledgix_python/__init__.py

@@ -34,7 +34,7 @@ from .models import (
     PolicyRegistrationResponse,
 )
 
-__version__ = "0.1.1"
+__version__ = "0.1.4"
 
 __all__ = [
     # Core

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/src/ledgix_python/client.py

@@ -526,6 +526,21 @@ class LedgixClient:
             for entry in sorted_entries:
                 if entry.prev_row_hash != previous_row_hash:
                     raise TokenVerificationError(f"Ledger chain broken at seq {entry.seq}")
+                previous_row_hash = entry.row_hash
+
+            first_signed_entry_index = next(
+                (
+                    index
+                    for index, entry in enumerate(sorted_entries)
+                    if entry.receipt_payload and entry.row_signature and entry.signer_key_id
+                ),
+                -1,
+            )
+            if first_signed_entry_index == -1:
+                raise TokenVerificationError("No signed receipt proof data is available for this ledger yet")
+
+            signed_entries = sorted_entries[first_signed_entry_index:]
+            for entry in signed_entries:
                 if not entry.receipt_payload or not entry.row_signature or not entry.signer_key_id:
                     raise TokenVerificationError(f"Missing receipt proof data at seq {entry.seq}")
                 if not algorithm.verify(
@@ -534,7 +549,6 @@ class LedgixClient:
                     self._decode_base64url(entry.row_signature),
                 ):
                     raise TokenVerificationError(f"Ledger receipt signature invalid at seq {entry.seq}")
-                previous_row_hash = entry.row_hash
 
             previous_manifest_hash = "sha256:" + ("0" * 64)
             sorted_manifests = sorted(manifests, key=lambda item: item.period_start)
@@ -565,10 +579,17 @@ class LedgixClient:
 
             return LedgerVerificationResult(
                 intact=True,
-                verified_entries=len(sorted_entries),
+                verified_entries=len(signed_entries),
                 verified_manifests=len(sorted_manifests),
                 latest_row_hash=sorted_entries[-1].row_hash if sorted_entries else None,
                 latest_manifest_hash=sorted_manifests[-1].manifest_hash if sorted_manifests else None,
+                legacy_unsigned_entries=first_signed_entry_index,
+                coverage_note=(
+                    f"Verified signed receipts from seq {signed_entries[0].seq} onward. "
+                    f"{first_signed_entry_index} earlier {'entry predates' if first_signed_entry_index == 1 else 'entries predate'} signed receipt proofs."
+                    if first_signed_entry_index > 0
+                    else None
+                ),
             )
         except Exception as exc:
             return LedgerVerificationResult(
@@ -577,6 +598,8 @@ class LedgixClient:
                 verified_manifests=0,
                 latest_row_hash=None,
                 latest_manifest_hash=None,
+                legacy_unsigned_entries=0,
+                coverage_note=None,
                 error=str(exc),
             )
 

{ledgix_python-0.1.3 → ledgix_python-0.1.4}/src/ledgix_python/models.py

@@ -116,4 +116,6 @@ class LedgerVerificationResult(BaseModel):
     verified_manifests: int
     latest_row_hash: str | None = None
     latest_manifest_hash: str | None = None
+    legacy_unsigned_entries: int = 0
+    coverage_note: str | None = None
     error: str | None = None