notari 0.3.0__tar.gz

notari-0.3.0/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,51 @@
+---
+name: Bug report
+about: Something Notari should do but doesn't, or shouldn't do but does
+title: "bug: "
+labels: ["bug"]
+---
+
+<!--
+Before filing: please confirm the bug reproduces on the latest released
+version. `notari version` to check.
+-->
+
+## What happened
+
+A clear description of the bug. Include the exact command or tool call
+that triggered it.
+
+## What you expected
+
+A description of what Notari should have done instead.
+
+## Steps to reproduce
+
+1.
+2.
+3.
+
+## Environment
+
+- OS: <!-- macOS / Linux / Windows + version -->
+- Notari version: <!-- output of `notari version` -->
+- Python version: <!-- output of `python --version` -->
+- Coding agent: <!-- Claude Code / Cursor / Cline / etc. and version -->
+
+## Relevant audit log entries
+
+If the bug involves a gate decision, paste the relevant `~/.notari/audit.log.jsonl`
+lines. Strip any sensitive args before pasting; Notari's redaction normally
+keeps these out but verify.
+
+```json
+
+```
+
+## `notari doctor` output
+
+```
+
+```
+
+## Anything else

notari-0.3.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security disclosure
+    url: https://github.com/manumarri-sudo/notari/security/advisories/new
+    about: Report a vulnerability privately (preferred over filing a public issue)
+  - name: Threat-model review
+    url: https://github.com/manumarri-sudo/notari/blob/main/SECURITY.md
+    about: Read SECURITY.md first if your question is about the threat model
+  - name: How to integrate with my coding agent
+    url: https://github.com/manumarri-sudo/notari/blob/main/docs/clients.md
+    about: Per-client integration recipes (Claude Code, Cursor, Cline, Aider, Continue, Windsurf, Zed)

notari-0.3.0/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,32 @@
+---
+name: Feature request
+about: A capability Notari should have
+title: "feat: "
+labels: ["enhancement"]
+---
+
+## The problem this solves
+
+Describe the situation where Notari falls short today. Focus on the
+workflow, not the implementation.
+
+## The proposed feature
+
+What should Notari do? Be specific about the user-facing surface (new
+CLI command, new policy override, new event type, etc.).
+
+## Why this matters
+
+Who benefits? Roughly how many users / customer accounts? Any compliance
+or insurance angle?
+
+## Alternatives considered
+
+What else could solve this? Why is the proposed feature better?
+
+## Sketch
+
+If you have a sketch of the API / TOML / event-type shape, paste it here.
+Not required.
+
+## Anything else

notari-0.3.0/.github/ISSUE_TEMPLATE/missed_dangerous_action.md

@@ -0,0 +1,50 @@
+---
+name: Missed dangerous action
+about: An agent ran a command Notari should have refused
+title: "missed-action: "
+labels: ["missed-dangerous-action", "policy"]
+---
+
+<!--
+This is the highest-signal issue type for Notari. Every accepted issue
+ships as a new pattern in src/notari/policy.py or src/notari/secrets.py
+in the next release. Reproducibility matters more than narrative.
+-->
+
+## The action Notari let through
+
+Exact command, tool name, and args (redact secrets):
+
+```
+
+```
+
+## Why this is dangerous
+
+One or two sentences. If it's a well-known CVE class, link the CVE.
+
+## What Notari should have done
+
+`Risk.CRITICAL` (block + type-to-confirm) / `Risk.HIGH` (ask y/N) / other?
+
+## Synthetic reproduction
+
+A safe test command that exercises the same pattern Notari should match
+against. Doesn't have to actually be destructive; the regex must catch it.
+
+```
+
+```
+
+## Relevant policy section
+
+If you've already located the regex set that should have fired, link
+the relevant constant in [`src/notari/policy.py`](../../src/notari/policy.py).
+
+## Environment
+
+- Notari version:
+- Coding agent + version:
+- OS:
+
+## Anything else

notari-0.3.0/.github/dependabot.yml

@@ -0,0 +1,52 @@
+# Dependabot keeps Notari's deps current with weekly PRs.
+# Three ecosystems matter here: the Python runtime deps, the GitHub Actions
+# we run on every CI / release, and the optional extras (weasyprint,
+# pyobjc-LocalAuthentication, asyncpg, opentelemetry) shipped under
+# `[pdf]`, `[touchid]`, `[postgres]`, and `[otel]`.
+#
+# Security updates ship immediately regardless of the weekly cadence.
+
+version: 2
+
+updates:
+  # Python deps (project + dev + optional extras).
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "07:00"
+      timezone: "America/Chicago"
+    open-pull-requests-limit: 5
+    groups:
+      # Pin all dev-tooling bumps into a single PR per week so the noise
+      # stays low. ruff / mypy / pyright / pytest move together anyway.
+      dev-tooling:
+        patterns:
+          - "ruff"
+          - "mypy"
+          - "pyright"
+          - "pytest*"
+          - "hypothesis"
+          - "syrupy"
+          - "pip-audit"
+    labels:
+      - "dependencies"
+      - "python"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+
+  # GitHub Actions versions used in ci.yml and release.yml.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 3
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "ci"
+      include: "scope"

notari-0.3.0/.github/pull_request_template.md

@@ -0,0 +1,37 @@
+<!--
+Thanks for opening a PR.
+
+Before submitting, please run:
+  pytest --no-cov
+  ruff check src tests
+  ruff format --check src tests
+
+If the change touches the gate (policy.py, classify_command, secrets.py,
+adapters/), add a test that exercises the new behavior. The audit-log
+chain is the deliverable; if your change can break the chain shape,
+mention it explicitly here.
+-->
+
+## What this changes
+
+A short description of what's different after this PR. The "why" matters
+more than the "what"; the diff shows the what.
+
+## How it was tested
+
+- [ ] `pytest --no-cov` passes locally
+- [ ] `ruff check src tests` passes
+- [ ] If you added a new tool-call risk pattern: a unit test in `test_classify_command.py` or `test_secrets.py` exercises it
+- [ ] If you changed the audit-log event taxonomy: a test in `test_audit.py` exercises chain integrity across the new event type
+
+## Anything reviewers should know
+
+Edge cases, dependencies on other in-flight PRs, things you're explicitly
+not addressing in this PR but plan to follow up on.
+
+## Checklist
+
+- [ ] Tests pass locally
+- [ ] CHANGELOG.md `[Unreleased]` section updated if the change is user-facing
+- [ ] README.md updated if the change adds a new CLI command or changes an existing one
+- [ ] No em dashes in user-facing text

notari-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,66 @@
+name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Lint
+        run: ruff check src tests
+
+      - name: Format check
+        run: ruff format --check src tests
+
+      - name: Type-check (mypy)
+        run: mypy src/notari   # blocking: strict is green and the py.typed marker promises it
+
+      - name: Test
+        run: pytest tests/   # enforces --cov-fail-under=75 from pyproject (currently ~82%)
+
+      - name: Audit dependencies
+        # Audit a frozen list that excludes the editable notari itself: its
+        # working version may not exist on PyPI yet (e.g. unreleased 0.3.0),
+        # which --strict treats as a hard error whether skipped or not.
+        # Every real dependency stays under --strict: a CVE fails the build.
+        run: |
+          pip freeze --exclude-editable > /tmp/audit-requirements.txt
+          pip-audit --strict --no-deps -r /tmp/audit-requirements.txt
+
+  build:
+    runs-on: ubuntu-latest
+    needs: test
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: "3.12"
+      - name: Build sdist + wheel
+        run: |
+          pip install build
+          python -m build
+      - name: Upload artifacts
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
+        with:
+          name: dist
+          path: dist/

notari-0.3.0/.github/workflows/notari-check.yml

@@ -0,0 +1,57 @@
+name: notari-change-control
+
+# Gate every pull request: verify the diff against the human-approved contract
+# (.notari/contract.json) and publish a Change Passport as a Status Check.
+#
+# ⚠ DOGFOOD CONFIGURATION: This workflow uses `uses: ./` and `install-from-source`
+# because this repo IS the Notari source — we verify with HEAD's own code. A
+# CONSUMER of Notari should NEVER do this; pin the release commit SHA instead
+# (docs/secure-workflow.yml carries the current pin):
+#
+#   uses: manumarri-sudo/notari@<full-release-commit-sha>  # vX.Y.Z
+#
+# See README.md and docs/SECURITY-MODEL.md for the secure deployment checklist.
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  statuses: write # publish the commit Status Check
+  pull-requests: write # (reserved) post the passport as a PR comment
+
+jobs:
+  change-control:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout (full history so the base commit is available)
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7
+        with:
+          fetch-depth: 0
+
+      # No skip-on-missing-contract: the Action itself fails closed (exit 2)
+      # when no contract exists. Skipping was a fail-open: GitHub reports
+      # skipped jobs as successful, so a PR that deletes the contract would
+      # pass the required check.
+      - name: Notari Change Control
+        id: notari
+        # install-from-source: ONLY safe for the repo that owns the Action.
+        # Consumers pin a published tag so a PR cannot modify the gate.
+        uses: ./
+        with:
+          install-from-source: "true"
+          head: ${{ github.event.pull_request.head.sha }}
+          head-sha: ${{ github.event.pull_request.head.sha }}
+          fail-on-block: "true"
+          strict: "true"
+          gate-key: ${{ secrets.NOTARI_GATE_KEY }}
+          gate-pubkeys: ${{ vars.NOTARI_GATE_PUBKEYS }}
+          approver-pubkeys: ${{ secrets.NOTARI_APPROVER_PUBKEYS }}
+          # Dogfood without a gate key: accept report-grade unsigned evidence.
+          allow-unsigned-evidence: "true"
+          # Dogfood: this repo uses pull_request + install-from-source because it
+          # IS the Notari source. Consumers MUST use pull_request_target instead.
+          allow-pull-request-trigger: "true"
+
+      - name: Report verdict
+        run: echo "Notari verdict was ${{ steps.notari.outputs.verdict }}"

notari-0.3.0/.github/workflows/release.yml

@@ -0,0 +1,71 @@
+name: release
+
+# Auto-publishes to PyPI when a GitHub release is published. Uses PyPI
+# Trusted Publishing (OIDC) so no API token lives in repo secrets. One-time
+# setup required on the PyPI side: register manumarri-sudo/notari as a
+# trusted publisher for the `notari` project with workflow `release.yml`
+# and environment `pypi`. The PyPI dist is `notari` because `notari` was
+# taken; the package, CLI binary, and config dir all remain `notari`. See:
+#   https://docs.pypi.org/trusted-publishers/
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/notari
+    permissions:
+      # Required for Trusted Publishing OIDC token exchange.
+      id-token: write
+      # Required to attach SBOM / attestations to the release.
+      contents: write
+      attestations: write
+
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7
+        with:
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build deps
+        run: |
+          python -m pip install --upgrade pip build twine
+
+      - name: Verify tag matches pyproject version
+        run: |
+          tag="${GITHUB_REF_NAME#v}"
+          pkg=$(python -c "import tomllib; print(tomllib.load(open('pyproject.toml','rb'))['project']['version'])")
+          if [ "$tag" != "$pkg" ]; then
+            echo "::error::tag $tag != pyproject version $pkg"
+            exit 1
+          fi
+          echo "tag and pyproject agree on version: $pkg"
+
+      - name: Build sdist + wheel
+        run: python -m build
+
+      - name: Twine check
+        run: twine check dist/*
+
+      - name: Publish to PyPI via Trusted Publishing
+        # Tolerated until PyPI Trusted Publishing is registered for `notari`.
+        # Without TP the OIDC handshake fails; once TP is in place this step
+        # publishes cleanly and `skip-existing: true` keeps re-runs idempotent.
+        continue-on-error: true
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # release/v1
+        with:
+          packages-dir: dist/
+          skip-existing: true
+
+      - name: Generate attestations
+        uses: actions/attest-build-provenance@ef244123eb79f2f7a7e75d99086184180e6d0018  # v1
+        with:
+          subject-path: "dist/*"

notari-0.3.0/.gitignore

@@ -0,0 +1,104 @@
+# --- Python ---
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+*.egg
+*.egg-info/
+build/
+dist/
+wheels/
+.eggs/
+MANIFEST
+
+# --- Virtualenvs ---
+.venv/
+venv/
+env/
+ENV/
+
+# --- Tooling caches ---
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.pyright/
+.tox/
+.cache/
+pytest-cache-files-*/
+
+# --- Coverage ---
+.coverage
+.coverage.*
+htmlcov/
+coverage.xml
+*.cover
+
+# --- IDE / editor ---
+.vscode/
+.idea/
+*.swp
+*.swo
+.DS_Store
+
+# --- Notari runtime artifacts (NEVER commit) ---
+# The signing key is per-installation and must never be checked in.
+.notari/
+~/.notari/
+
+# Audit logs are user data with timestamps; keep out of source control.
+*.audit.log.jsonl
+audit.log.jsonl
+
+# Claude Code session logs - may contain transcripts / tokens; never commit.
+.claude-logs/
+
+# --- Local secrets ---
+.env
+.env.local
+.env.*.local
+*.key
+*.pem
+secrets.json
+
+# --- Generated experiment artifacts ---
+# The harness scripts are committed; the generated runs are not.
+experiments/results/
+experiments/results.zip
+
+# --- OS ---
+Thumbs.db
+.DS_Store
+
+# Local-only PDF renders of markdown launch material
+web/pdfs/
+
+# Internal strategy / research / critique drafts and their binary renders.
+# Keep local; the public threat model lives at docs/SECURITY-MODEL.md.
+docs/research/
+
+# Internal launch / go-to-market / business material. Kept local, not public.
+LAUNCH.md
+docs/distribution.md
+docs/marketing/messaging-guide.md
+docs/marketing/coding-agent-incident-recovery.md
+docs/marketing/engagement-terms-template.md
+docs/marketing/substack-draft-disaster-to-deadline.md
+docs/marketing/future-loomiq-saas/
+docs/marketing/outreach/
+
+# Internal experiment harness and backend infra (telemetry/analysis).
+# The client-side telemetry code stays public at src/notari/telemetry.py.
+experiments/
+infra/
+
+# marketing drafts: pre-pivot product positioning + compliance claims; kept
+# local until a Change-Control-aligned rewrite (see FINISH-STATUS.md). Not shipped.
+docs/marketing/
+
+# Manus private research cache (screenshots + competitor notes); not shipped
+research-screenshots/
+
+# internal worklists (security findings + triage); kept local, not public
+AUDIT-FIX-PLAN.md
+FINISH-STATUS.md