openentity 0.3.1__tar.gz → 0.4.0__tar.gz

{openentity-0.3.1 → openentity-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: openentity
-Version: 0.3.1
+Version: 0.4.0
 Summary: Open Entity (OEIS-1) client: JCS, did:key, eddsa-jcs-2022, Merkle proofs, adopt().
 Project-URL: Homepage, https://openentity.org
 Project-URL: Documentation, https://oeis.dev
@@ -41,4 +41,6 @@ Exit codes match the npm CLI: 0 ok, 1 usage, 2 network, 3 verification failed, 4
 
 Library, each taking the 32-byte seed and a registry URL: `adopt(name, registry=...)`, `withdraw(seed, registry)`, `record(seed, [(kind, payload), ...], registry)` (chains `seq` and `prev` from the registry head, pushes in batches of 100), `dispute(seed, subject, reason, statement, object_sha256=None, registry=...)`, `find(registry, capability=..., q=..., alias_type=..., level=...)`, `present(seed, audience, nonce, registry=None)`. Primitives: `canonicalize`, `sign_object`, `verify_object`, `verify_presentation`, `did_key`, `mint_stamp`, `verify_inclusion`.
 
+Shared core: `Identity.load_or_create()` (key in the OS keychain, else `~/.openentity/identity.key` at 0600; pass `.seed` to the calls above), `adopt(..., client="adk")` (an unsigned label: adk, goose, langchain, ui-tars, cli, other), `trust(eid)` (a `TrustReport` from registry reads only, every signature verified locally, cached 5 minutes, `ok=False` on any failure), and `openentity.issuer` (`attestation`, `revocation`, `did_document`, `openentity_json`).
+
 Written from the spec text alone, independent of the TypeScript SDK.

{openentity-0.3.1 → openentity-0.4.0}/README.md

@@ -28,4 +28,6 @@ Exit codes match the npm CLI: 0 ok, 1 usage, 2 network, 3 verification failed, 4
 
 Library, each taking the 32-byte seed and a registry URL: `adopt(name, registry=...)`, `withdraw(seed, registry)`, `record(seed, [(kind, payload), ...], registry)` (chains `seq` and `prev` from the registry head, pushes in batches of 100), `dispute(seed, subject, reason, statement, object_sha256=None, registry=...)`, `find(registry, capability=..., q=..., alias_type=..., level=...)`, `present(seed, audience, nonce, registry=None)`. Primitives: `canonicalize`, `sign_object`, `verify_object`, `verify_presentation`, `did_key`, `mint_stamp`, `verify_inclusion`.
 
+Shared core: `Identity.load_or_create()` (key in the OS keychain, else `~/.openentity/identity.key` at 0600; pass `.seed` to the calls above), `adopt(..., client="adk")` (an unsigned label: adk, goose, langchain, ui-tars, cli, other), `trust(eid)` (a `TrustReport` from registry reads only, every signature verified locally, cached 5 minutes, `ok=False` on any failure), and `openentity.issuer` (`attestation`, `revocation`, `did_document`, `openentity_json`).
+
 Written from the spec text alone, independent of the TypeScript SDK.

openentity-0.4.0/openentity/__init__.py

@@ -0,0 +1,7 @@
+from .client import adopt, dispute, find, present, record, rotate, withdraw  # noqa: F401
+from .core import *  # noqa: F401,F403
+from . import issuer  # noqa: F401
+from .identity import Identity  # noqa: F401
+from .report import TrustReport, trust  # noqa: F401
+
+__version__ = "0.4.0"

{openentity-0.3.1 → openentity-0.4.0}/openentity/cli.py

@@ -143,7 +143,7 @@ def _adopt(args):
     if not args.agree:
         raise CliError(EXIT_USAGE, "adopt signs the Open Entity Declaration. Read it, then re-run with --agree:\n\n" + core.DECLARATION_TEXT)
     reg = _registry(args)
-    res = client.adopt(args.name, args.description, reg)
+    res = client.adopt(args.name, args.description, reg, client="cli")
     key_path = _save_key({**res, "name": args.name, "registry": reg})
     if not res["record_pushed"]:
         print("warning: the declaration record entry was not accepted; push it later", file=sys.stderr)

{openentity-0.3.1 → openentity-0.4.0}/openentity/client.py

@@ -8,6 +8,7 @@ import urllib.request
 from . import core
 
 DEFAULT_REGISTRY = "https://openentity.org"
+CLIENTS = ("adk", "goose", "langchain", "ui-tars", "cli", "other")  # the registry's allowlist for the unsigned `client` label
 
 
 class RegistryError(Exception):
@@ -59,13 +60,16 @@ def build_adoption(kp: core.KeyPair, name: str, description: str, registry: str)
 
 
 def adopt(name: str, description: str = "An Open Entity adopted through the Python client.",
-          registry: str = DEFAULT_REGISTRY, seed: bytes | None = None) -> dict:
-    """Adopt on `registry`. Returns the registry response plus `did` and `seed_hex` (keep the seed)."""
+          registry: str = DEFAULT_REGISTRY, seed: bytes | None = None, client: str | None = None) -> dict:
+    """Adopt on `registry`. Returns the registry response plus `did` and `seed_hex` (keep the seed).
+    `client` is an optional label (one of CLIENTS) for the registry's per-client count; it is not signed."""
+    if client is not None and client not in CLIENTS:
+        raise ValueError(f"client must be one of {', '.join(CLIENTS)}")
     registry = registry.rstrip("/")
     kp = core.KeyPair(seed)
     bits = int(_request(f"{registry}/v1/spec")["stamp_bits"])
     document, declaration = build_adoption(kp, name, description, registry)
-    out = _request(f"{registry}/v1/adopt", {"document": document, "declaration": declaration},
+    out = _request(f"{registry}/v1/adopt", {"document": document, "declaration": declaration, **({"client": client} if client else {})},
                    {"x-oe-stamp": core.mint_stamp(bits, kp.did)})
     # Seq-1 declaration entry (spec 7.3). The registry never writes entries; on failure the signed
     # entry is returned so the caller can push it later.

{openentity-0.3.1 → openentity-0.4.0}/openentity/core.py

@@ -140,15 +140,16 @@ def _signing_input(obj: dict, proof: dict) -> bytes:
     return canonical_hash(config) + canonical_hash(doc)
 
 
-def sign_proof(obj: dict, kp: KeyPair, created: str | None = None) -> dict:
+def sign_proof(obj: dict, kp: KeyPair, created: str | None = None, method: str | None = None) -> dict:
+    """`method` names the verification method; it defaults to the did:key of `kp`, a did:web signer passes `did:web:x#key-1`."""
     proof = {"type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "created": created or now(),
-             "verificationMethod": verification_method(kp.did), "proofPurpose": "assertionMethod"}
+             "verificationMethod": method or verification_method(kp.did), "proofPurpose": "assertionMethod"}
     sig = kp.private.sign(_signing_input(obj, proof))
     return {**proof, "proofValue": "z" + b58encode(sig)}
 
 
-def sign_object(obj: dict, kp: KeyPair, created: str | None = None) -> dict:
-    return {**{k: v for k, v in obj.items() if k != "proof"}, "proof": sign_proof(obj, kp, created)}
+def sign_object(obj: dict, kp: KeyPair, created: str | None = None, method: str | None = None) -> dict:
+    return {**{k: v for k, v in obj.items() if k != "proof"}, "proof": sign_proof(obj, kp, created, method)}
 
 
 # ---- continuity (spec 9) ----

openentity-0.4.0/openentity/identity.py

@@ -0,0 +1,72 @@
+"""Identity.load_or_create(): the entity's key from the OS keychain, else ~/.openentity/identity.key (mode 0600).
+A fresh key goes to the keychain when one answers, otherwise to the file. Set OPENENTITY_KEYCHAIN=off to use the file only."""
+import os
+import pathlib
+import subprocess
+import sys
+
+from . import core
+
+SERVICE, ACCOUNT = "openentity", "identity"
+
+
+def _run(argv: list[str], stdin: str | None = None) -> str | None:
+    try:
+        r = subprocess.run(argv, input=stdin, capture_output=True, text=True, timeout=10)
+    except (OSError, subprocess.SubprocessError):
+        return None
+    return r.stdout.strip() if r.returncode == 0 else None
+
+
+def _keychain_get() -> str | None:
+    if os.environ.get("OPENENTITY_KEYCHAIN") == "off":
+        return None
+    if sys.platform == "darwin":
+        return _run(["security", "find-generic-password", "-s", SERVICE, "-a", ACCOUNT, "-w"])
+    if sys.platform.startswith("linux"):
+        return _run(["secret-tool", "lookup", "service", SERVICE, "account", ACCOUNT])
+
+
+def _keychain_set(seed_hex: str) -> bool:
+    if os.environ.get("OPENENTITY_KEYCHAIN") == "off":
+        return False
+    if sys.platform == "darwin":  # ponytail: the seed is briefly on argv, visible to this user's processes only
+        return _run(["security", "add-generic-password", "-U", "-s", SERVICE, "-a", ACCOUNT, "-w", seed_hex]) is not None
+    if sys.platform.startswith("linux"):
+        return _run(["secret-tool", "store", "--label=Open Entity key", "service", SERVICE, "account", ACCOUNT], seed_hex) is not None
+    return False
+
+
+def _file() -> pathlib.Path:
+    return pathlib.Path(os.environ.get("OPENENTITY_HOME", "~/.openentity")).expanduser() / "identity.key"
+
+
+class Identity:
+    def __init__(self, seed: bytes, source: str):
+        self.kp, self.source = core.KeyPair(seed), source
+
+    @property
+    def did(self) -> str:
+        return self.kp.did
+
+    @property
+    def seed(self) -> bytes:  # pass to adopt(), present(), record() and the other seed-keyed calls
+        return self.kp.seed
+
+    @classmethod
+    def load_or_create(cls) -> "Identity":
+        for source, read in (("keychain", _keychain_get), ("file", lambda: _file().read_text().strip() if _file().exists() else None)):
+            if h := read():
+                return cls(bytes.fromhex(h), source)
+        seed = os.urandom(32)
+        if _keychain_set(seed.hex()):
+            return cls(seed, "keychain")
+        path = _file()
+        path.parent.mkdir(parents=True, exist_ok=True, mode=0o700)
+        try:
+            fd = os.open(path, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
+        except FileExistsError:  # another process created it first
+            return cls(bytes.fromhex(path.read_text().strip()), "file")
+        with os.fdopen(fd, "w") as f:
+            f.write(seed.hex())
+        return cls(seed, "file")

openentity-0.4.0/openentity/issuer.py

@@ -0,0 +1,61 @@
+"""Issuer helpers (ADR 0003): sign attestations and revocations, build a did:web issuer's two well-known files.
+
+`issuer` defaults to the signer's did:key. A did:web issuer passes its DID; the proof then names `<issuer>#<key_id>`,
+the key `did_document` publishes. Registry submission stays with `client` (POST /v1/attestations, stamped, spec 10.4)."""
+from datetime import datetime, timedelta, timezone
+
+from . import core
+
+MAX_TTL = timedelta(days=365)  # spec 8.4
+
+
+def _ts(t: datetime) -> str:
+    return t.astimezone(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+
+
+def _method(kp: core.KeyPair, issuer: str | None, key_id: str) -> str | None:
+    return f"{issuer}#{key_id}" if issuer and issuer != kp.did else None
+
+
+def attestation(kp: core.KeyPair, subject: str, claim_type: str, claim: dict, *, issuer: str | None = None,
+                key_id: str = "key-1", evidence: dict | None = None, confidence: float | None = None,
+                ttl: timedelta = timedelta(days=90), now: datetime | None = None) -> dict:
+    """A signed Attestation (spec 8.2). `ttl` is capped at one year."""
+    if not timedelta(0) < ttl <= MAX_TTL:
+        raise ValueError("ttl must be positive and at most 1 year")
+    t = now or datetime.now(timezone.utc)
+    created = _ts(t)
+    obj = {"spec": core.SPEC, "type": "Attestation", "issuer": issuer or kp.did, "subject": subject,
+           "claim_type": claim_type, "claim": claim, **({"evidence": evidence} if evidence else {}),
+           **({"confidence": confidence} if confidence is not None else {}), "created": created, "expires": _ts(t + ttl)}
+    return core.sign_object(obj, kp, created, _method(kp, issuer, key_id))
+
+
+def revocation(kp: core.KeyPair, attested: dict | str, *, issuer: str | None = None, key_id: str = "key-1",
+               reason: str | None = None, now: datetime | None = None) -> dict:
+    """A signed Revocation naming the attestation (the object, or its SHA-256 hex) (spec 8.4)."""
+    sha = core.canonical_hash(attested).hex() if isinstance(attested, dict) else attested
+    created = _ts(now or datetime.now(timezone.utc))
+    obj = {"spec": core.SPEC, "type": "Revocation", "issuer": issuer or kp.did, "attestation_sha256": sha,
+           **({"reason": reason} if reason else {}), "created": created}
+    return core.sign_object(obj, kp, created, _method(kp, issuer, key_id))
+
+
+def did_document(did: str, public: bytes, key_id: str = "key-1") -> dict:
+    """The body of `https://<domain>/.well-known/did.json` for a did:web issuer."""
+    vm = f"{did}#{key_id}"
+    return {"@context": ["https://www.w3.org/ns/did/v1", "https://w3id.org/security/multikey/v1"], "id": did,
+            "verificationMethod": [{"id": vm, "type": "Multikey", "controller": did,
+                                    "publicKeyMultibase": core.did_key(public).removeprefix("did:key:")}],
+            "assertionMethod": [vm], "authentication": [vm]}
+
+
+def openentity_json(did: str, public: bytes, name: str, description: str, *, key_id: str = "key-1",
+                    operator: dict | None = None, extensions: dict | None = None) -> dict:
+    """The unsigned body of `https://<domain>/.well-known/openentity.json`: the domain alias proof (spec 3.4) and,
+    under `extensions["openentity:observer"]`, an observer's methodology (spec 8.4)."""
+    return {"spec": core.SPEC, "eid": did, "name": name, "description": description,
+            "keys": [{"id": f"{did}#{key_id}", "type": "Multikey",
+                      "publicKeyMultibase": core.did_key(public).removeprefix("did:key:")}],
+            "operator": operator or {"kind": "organization", "name": name, "custody": "operator", "can_change": []},
+            **({"extensions": extensions} if extensions else {})}

openentity-0.4.0/openentity/report.py

@@ -0,0 +1,101 @@
+"""trust(eid): one TrustReport from registry reads only (ADR 0002). Every attestation and revocation is verified
+locally against its issuer's key; any failure returns an untrusted report (fail closed). Cached for 5 minutes."""
+import time
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from urllib.parse import unquote
+
+from . import client, core
+
+MOLTBOTDEN, CLAWGRC = "did:web:moltbotden.com", "did:web:api.clawgrc.com"
+SMA = ("did:web:securemyagent.ai", "did:pkh:eip155:8453:0x62fef02E2859726EC1c0B534853Ad2cdd5FdDE1a")
+TIER, POSTURE, VIOLATION = "trust_tier", "custom:securemyagent:security_posture", "custom:clawgrc:violation"
+ACCEPT = {TIER: (MOLTBOTDEN, CLAWGRC), POSTURE: SMA, VIOLATION: (CLAWGRC,)}  # claim_type -> issuers read; others are ignored
+CACHE_SECONDS = 300
+_cache: dict = {}
+
+
+@dataclass(frozen=True)
+class TrustReport:
+    eid: str
+    ok: bool  # False: a read failed or a signature did not verify. Treat the entity as untrusted.
+    error: str | None = None
+    level: str | None = None  # registry level, "L0" to "L3"
+    withdrawn: bool = False
+    trust_tier: dict = field(default_factory=dict)  # issuer DID -> newest live tier (0 to 4)
+    security_posture: dict | None = None  # claim of the newest live custom:securemyagent:security_posture
+    violations: list = field(default_factory=list)  # live custom:clawgrc:violation: issuer, severity, policy, observed_at, sha256
+    revocations: list = field(default_factory=list)  # verified revocations of the accepted attestations
+
+
+def did_web_resolver(fetch=client._request):
+    """did:web through /.well-known/did.json (or <path>/did.json); everything else offline."""
+    def resolve(did: str) -> dict:
+        if not did.startswith("did:web:"):
+            return core.default_resolver(did)
+        host, *path = [unquote(p) for p in did[8:].split(":")]
+        doc = fetch(f"https://{host}/{'/'.join(path) if path else '.well-known'}/did.json")
+        if doc.get("id") != did:
+            raise ValueError(f"{did} document names {doc.get('id')}")
+        keys = []
+        for vm in doc.get("verificationMethod", []):
+            try:
+                keys.append(core.public_from_did_key("did:key:" + vm["publicKeyMultibase"]))
+            except (KeyError, ValueError):
+                continue  # not an Ed25519 Multikey
+        return {"ed25519": keys}
+    return resolve
+
+
+def trust(eid: str, registry: str = client.DEFAULT_REGISTRY, *, now: datetime | None = None, fetch=client._request,
+          resolver=None) -> TrustReport:
+    key = (registry, eid)
+    hit = _cache.get(key)
+    if hit and time.monotonic() - hit[0] < CACHE_SECONDS:
+        return hit[1]
+    try:
+        report = _read(eid, registry.rstrip("/"), now or datetime.now(timezone.utc), fetch, resolver or did_web_resolver(fetch))
+    except Exception as e:  # fail closed on anything: network, registry, schema, signature
+        return TrustReport(eid, False, f"{type(e).__name__}: {e}")
+    _cache[key] = (time.monotonic(), report)
+    return report
+
+
+def _read(eid, base, now, fetch, resolver) -> TrustReport:
+    if not eid.startswith("did:"):
+        raise ValueError("eid must be a DID")
+    ent = fetch(f"{base}/v1/entities/{eid}")
+    if ent["eid"] != eid:
+        raise ValueError(f"registry answered for {ent['eid']}")
+    rows = fetch(f"{base}/v1/entities/{eid}/attestations")["attestations"]
+    tiers, posture, violations, revocations = {}, None, [], []
+    for r in sorted(rows, key=lambda r: r["attestation"]["created"], reverse=True):
+        a, ct = r["attestation"], r["attestation"].get("claim_type")
+        if a.get("issuer", "").lower() not in {i.lower() for i in ACCEPT.get(ct, ())}:
+            continue
+        if r.get("inherited_from") and ct != VIOLATION:
+            continue  # a rotation does not carry positive claims; a strike follows the entity
+        sha, ended = r["sha256"], core._ts(a["expires"]) <= now
+        if a["subject"] != (r.get("inherited_from") or eid) or core.canonical_hash(a).hex() != sha:
+            raise ValueError(f"attestation {sha} does not match what the registry served")
+        ok, signer = core.verify_object(a, resolver)
+        if not ok or signer != a["issuer"]:
+            raise ValueError(f"attestation {sha}: {signer}")
+        rv = r.get("revocation")
+        if rv:
+            ok, signer = core.verify_object(rv, resolver)
+            if not ok or signer != a["issuer"] or rv["attestation_sha256"] != sha:
+                raise ValueError(f"revocation of {sha}: {signer}")
+            revocations.append({"sha256": sha, "claim_type": ct, "issuer": a["issuer"], "reason": rv.get("reason"), "at": rv["created"]})
+        elif r.get("revoked_at"):
+            raise ValueError(f"registry reports a revocation of {sha} it does not carry")
+        if ended or rv:
+            continue
+        c = a["claim"]
+        if ct == TIER:
+            tiers.setdefault(a["issuer"], c["tier"])
+        elif ct == POSTURE:
+            posture = posture or c
+        else:
+            violations.append({"issuer": a["issuer"], "severity": c["severity"], "policy": c["policy"], "observed_at": c["observed_at"], "sha256": sha})
+    return TrustReport(eid, True, None, ent["level"], bool(ent.get("withdrawn")), tiers, posture, violations, revocations)

{openentity-0.3.1 → openentity-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openentity"
-version = "0.3.1"
+version = "0.4.0"
 description = "Open Entity (OEIS-1) client: JCS, did:key, eddsa-jcs-2022, Merkle proofs, adopt()."
 readme = "README.md"
 license = "MIT"

{openentity-0.3.1 → openentity-0.4.0}/tests/test_core.py

@@ -155,7 +155,7 @@ class _Stub(BaseHTTPRequestHandler):
             return self._send(200, {"accepted": 1})
         doc, decl = body["document"], body["declaration"]
         stamp = self.headers["x-oe-stamp"]
-        _Stub.seen = {"stamp": stamp, "doc": doc, "decl": decl}
+        _Stub.seen = {"stamp": stamp, "doc": doc, "decl": decl, "client": body.get("client")}
         assert core.check_stamp(stamp, 8, doc["eid"]) is None
         assert core.verify_object(doc)[0] and core.verify_object(decl)[0]
         assert decl["text_sha256"] == core.DECLARATION_SHA256 and doc["eid"] == decl["eid"]
@@ -168,13 +168,16 @@ def test_adopt_and_cli(tmp_path, monkeypatch, capsys):
     url = f"http://127.0.0.1:{srv.server_port}"
     try:
         from openentity import adopt
-        res = adopt("Tester", registry=url, seed=SEED)
+        res = adopt("Tester", registry=url, seed=SEED, client="adk")
+        assert _Stub.seen["client"] == "adk"  # the unsigned label travels beside the signed objects
+        with pytest.raises(ValueError):
+            adopt("Tester", registry=url, seed=SEED, client="nope")
         assert res["eid"] == res["did"] == core.KeyPair(SEED).did
         assert res["record_pushed"] and _Stub.seen["entry"]["eid"] == res["eid"]
         monkeypatch.setenv("OPENENTITY_HOME", str(tmp_path))
         assert cli.main(["adopt", "--name", "T2", "--agree", "--registry", url, "--json"]) == 0
         out = json.loads(capsys.readouterr().out)
-        assert "seed_hex" not in out and Path(out["key_file"]).exists()
+        assert "seed_hex" not in out and Path(out["key_file"]).exists() and _Stub.seen["client"] == "cli"
         assert cli.main(["adopt", "--name", "T3", "--registry", url]) == 1  # no --agree, nothing signed
     finally:
         srv.shutdown()
@@ -183,7 +186,7 @@ def test_adopt_and_cli(tmp_path, monkeypatch, capsys):
 def test_cli_version(capsys):
     with pytest.raises(SystemExit) as e:
         cli.main(["--version"])
-    assert e.value.code == 0 and "0.3.1" in capsys.readouterr().out
+    assert e.value.code == 0 and "0.4.0" in capsys.readouterr().out
 
 
 # ---- shared vectors, checked with the independent verifier's own logic ----

openentity-0.4.0/tests/test_identity.py

@@ -0,0 +1,47 @@
+import os
+import stat
+
+import pytest
+
+from openentity import identity
+from openentity.identity import Identity
+
+
+@pytest.fixture(autouse=True)
+def home(tmp_path, monkeypatch):
+    monkeypatch.setenv("OPENENTITY_HOME", str(tmp_path))
+    monkeypatch.setenv("OPENENTITY_KEYCHAIN", "off")
+    return tmp_path
+
+
+def test_file_fallback_is_0600_and_stable():
+    a = Identity.load_or_create()
+    f = identity._file()
+    assert a.source == "file" and stat.S_IMODE(f.stat().st_mode) == 0o600 and stat.S_IMODE(f.parent.stat().st_mode) == 0o700
+    b = Identity.load_or_create()
+    assert (b.did, b.source) == (a.did, "file") and b.seed == a.seed
+
+
+def test_keychain_wins_and_holds_the_only_copy(monkeypatch):
+    store = {}
+
+    def run(argv, stdin=None):
+        if argv[0] == "security" and argv[1] == "find-generic-password":
+            return store.get("k")
+        if argv[0] == "security":
+            store["k"] = argv[-1]
+            return ""
+        return None
+
+    monkeypatch.delenv("OPENENTITY_KEYCHAIN")
+    monkeypatch.setattr(identity, "_run", run)
+    monkeypatch.setattr(identity.sys, "platform", "darwin")
+    a = Identity.load_or_create()
+    assert a.source == "keychain" and store["k"] == a.seed.hex() and not identity._file().exists()
+    assert Identity.load_or_create().did == a.did
+
+
+def test_keychain_failure_falls_back_to_file(monkeypatch):
+    monkeypatch.delenv("OPENENTITY_KEYCHAIN")
+    monkeypatch.setattr(identity, "_run", lambda argv, stdin=None: None)  # no `security`, no `secret-tool`
+    assert Identity.load_or_create().source == "file"

openentity-0.4.0/tests/test_issuer.py

@@ -0,0 +1,46 @@
+"""Issuer helpers: a did:web issuer signs, anyone verifies against the published did.json."""
+from datetime import datetime, timedelta, timezone
+
+import pytest
+
+from openentity import core, issuer
+
+KP = core.KeyPair(bytes(range(1, 33)))  # published throwaway seed from test-vectors
+SUBJECT = core.KeyPair(bytes(range(33, 65))).did
+DID = "did:web:issuer.example"
+NOW = datetime(2026, 10, 27, 12, 0, tzinfo=timezone.utc)
+
+
+def resolver(did):
+    assert did == DID
+    return {"ed25519": [core.public_from_did_key("did:key:" + issuer.did_document(DID, KP.public)["verificationMethod"][0]["publicKeyMultibase"])]}
+
+
+def test_attestation_verifies_against_did_json_and_expires_on_ttl():
+    a = issuer.attestation(KP, SUBJECT, "trust_tier", {"tier": 2, "platform": "x"}, issuer=DID, ttl=timedelta(days=30), now=NOW)
+    assert (a["issuer"], a["created"], a["expires"]) == (DID, "2026-10-27T12:00:00Z", "2026-11-26T12:00:00Z")
+    assert a["proof"]["verificationMethod"] == f"{DID}#key-1"
+    assert core.verify_object(a, resolver) == (True, DID)
+    assert not core.verify_object({**a, "claim": {"tier": 4, "platform": "x"}}, resolver)[0]
+
+
+def test_did_key_issuer_needs_no_key_id_and_ttl_is_capped():
+    a = issuer.attestation(KP, SUBJECT, "stage", {"stage": "agent", "profile": "p"}, evidence={"kind": "t"}, confidence=0.5, now=NOW)
+    assert a["issuer"] == KP.did and core.verify_object(a) == (True, KP.did)
+    for ttl in (timedelta(0), timedelta(days=366)):
+        with pytest.raises(ValueError):
+            issuer.attestation(KP, SUBJECT, "stage", {}, ttl=ttl)
+
+
+def test_revocation_names_the_attestation_hash():
+    a = issuer.attestation(KP, SUBJECT, "custom:x:y", {}, issuer=DID, now=NOW)
+    r = issuer.revocation(KP, a, issuer=DID, reason="superseded", now=NOW)
+    assert r["attestation_sha256"] == core.canonical_hash(a).hex() == issuer.revocation(KP, r["attestation_sha256"], issuer=DID, now=NOW)["attestation_sha256"]
+    assert core.verify_object(r, resolver) == (True, DID)
+
+
+def test_well_known_files_agree_on_the_key():
+    d, o = issuer.did_document(DID, KP.public), issuer.openentity_json(DID, KP.public, "Issuer", "An issuer.", extensions={"openentity:observer": {}})
+    assert d["id"] == o["eid"] == DID
+    assert d["verificationMethod"][0]["publicKeyMultibase"] == o["keys"][0]["publicKeyMultibase"]
+    assert d["assertionMethod"] == [o["keys"][0]["id"]]

openentity-0.4.0/tests/test_trust.py

@@ -0,0 +1,106 @@
+"""trust(): built from registry reads, every signature checked locally, fail closed."""
+from datetime import datetime, timedelta, timezone
+
+import pytest
+
+from openentity import core, issuer, report
+from openentity.report import CLAWGRC, MOLTBOTDEN, POSTURE, SMA, TIER, VIOLATION, trust
+
+SUBJECT = core.KeyPair(b"\1" * 32).did
+KEYS = {d: core.KeyPair(bytes([i]) * 32) for i, d in enumerate([MOLTBOTDEN, CLAWGRC, SMA[0], "did:web:evil.example"], 10)}
+NOW = datetime.now(timezone.utc)
+
+
+def att(did, ct, claim, **kw):
+    return issuer.attestation(KEYS[did], SUBJECT, ct, claim, issuer=did, now=kw.pop("now", NOW - timedelta(hours=1)), **kw)
+
+
+def row(a, rev=None, **kw):
+    return {"sha256": core.canonical_hash(a).hex(), "attestation": a, "revocation": rev, "revoked_at": rev and rev["created"], **kw}
+
+
+class Registry:
+    """A fake registry plus the issuers' did.json files."""
+    def __init__(self, rows, **entity):
+        self.rows, self.entity, self.calls = rows, {"eid": SUBJECT, "level": "L2", "withdrawn": False, **entity}, []
+
+    def __call__(self, url, body=None, headers=None):
+        self.calls.append(url)
+        if url.endswith("/did.json"):
+            host = url.split("/")[2]
+            return issuer.did_document(f"did:web:{host}", KEYS[f"did:web:{host}"].public)
+        return {"attestations": self.rows} if url.endswith("/attestations") else self.entity
+
+
+@pytest.fixture(autouse=True)
+def fresh():
+    report._cache.clear()
+
+
+def full():
+    tier_old = att(MOLTBOTDEN, TIER, {"tier": 1, "platform": "moltbotden"}, ttl=timedelta(days=60), now=NOW - timedelta(days=2))
+    tier_new = att(MOLTBOTDEN, TIER, {"tier": 3, "platform": "moltbotden"})
+    grc = att(CLAWGRC, TIER, {"tier": 2, "platform": "clawgrc"})
+    posture = att(SMA[0], POSTURE, {"score_band": "A", "checks_passed": [], "scanner_version": "1", "evidence_hash": "0" * 64})
+    viol = att(CLAWGRC, VIOLATION, {"policy": "p", "severity": "high", "evidence_hash": "0" * 64, "observed_at": "2026-10-01T00:00:00Z"})
+    old_viol = att(CLAWGRC, VIOLATION, {"policy": "q", "severity": "low", "evidence_hash": "0" * 64, "observed_at": "2026-09-01T00:00:00Z"})
+    rev = issuer.revocation(KEYS[CLAWGRC], old_viol, issuer=CLAWGRC, reason="dispute upheld", now=NOW)
+    return [row(a) for a in (tier_old, tier_new, grc, posture, viol)] + [row(old_viol, rev)], viol, old_viol
+
+
+def test_report_from_registry_reads_only():
+    rows, viol, old = full()
+    reg = Registry(rows)
+    r = trust(SUBJECT, fetch=reg)
+    assert r.ok and r.level == "L2" and not r.withdrawn
+    assert r.trust_tier == {MOLTBOTDEN: 3, CLAWGRC: 2}  # newest per issuer
+    assert r.security_posture["score_band"] == "A"
+    assert [(v["severity"], v["policy"]) for v in r.violations] == [("high", "p")]  # the revoked strike is not active
+    assert [(x["sha256"], x["reason"]) for x in r.revocations] == [(core.canonical_hash(old).hex(), "dispute upheld")]
+    assert all(u.startswith(("https://openentity.org/v1/", "https://moltbotden.com", "https://api.clawgrc.com", "https://securemyagent.ai")) for u in reg.calls)
+
+
+def test_cache_holds_five_minutes():
+    reg = Registry(full()[0])
+    trust(SUBJECT, fetch=reg)
+    n = len(reg.calls)
+    assert trust(SUBJECT, fetch=reg) is trust(SUBJECT, fetch=reg) and len(reg.calls) == n
+    report._cache[("https://openentity.org", SUBJECT)] = (report.time.monotonic() - 301, None)
+    assert trust(SUBJECT, fetch=reg).ok and len(reg.calls) > n
+
+
+def test_fails_closed():
+    good = att(MOLTBOTDEN, TIER, {"tier": 4, "platform": "moltbotden"})
+    forged = {**good, "claim": {"tier": 4, "platform": "evil"}}
+    other_key = issuer.attestation(KEYS["did:web:evil.example"], SUBJECT, TIER, {"tier": 4, "platform": "x"}, issuer=MOLTBOTDEN, now=NOW)
+    viol = att(CLAWGRC, VIOLATION, {"policy": "p", "severity": "critical", "evidence_hash": "0" * 64, "observed_at": "2026-10-01T00:00:00Z"})
+    fake_rev = issuer.revocation(KEYS[MOLTBOTDEN], viol, issuer=CLAWGRC, now=NOW)  # signed by a key that is not the issuer's
+    cases = {
+        "forged claim": [{**row(good), "attestation": forged}],
+        "signed by another key": [row(other_key)],
+        "hidden strike (bad revocation)": [row(viol, fake_rev)],
+        "revocation not carried": [{**row(viol), "revoked_at": "2026-10-02T00:00:00Z"}],
+        "wrong subject": [row(issuer.attestation(KEYS[MOLTBOTDEN], SUBJECT[:-1] + "x", TIER, {"tier": 4}, issuer=MOLTBOTDEN, now=NOW))],
+    }
+    for name, rows in cases.items():
+        r = trust(SUBJECT, fetch=Registry(rows))
+        assert not r.ok and r.error and r.trust_tier == {} and r.level is None, name
+        report._cache.clear()
+
+    def down(*a, **k):
+        raise OSError("registry down")
+    assert not trust(SUBJECT, fetch=down).ok
+    assert not trust("not-a-did", fetch=Registry([])).ok
+    assert not trust(SUBJECT, fetch=Registry([], eid="did:key:other")).ok  # registry answered for someone else
+
+
+def test_expired_and_unlisted_issuers_are_ignored_and_not_fetched():
+    expired = att(MOLTBOTDEN, TIER, {"tier": 4, "platform": "m"}, ttl=timedelta(days=1), now=NOW - timedelta(days=3))
+    stranger = att("did:web:evil.example", TIER, {"tier": 4, "platform": "x"})
+    reg = Registry([row(expired), row(stranger)])
+    r = trust(SUBJECT, fetch=reg)
+    assert r.ok and r.trust_tier == {} and not any("evil.example" in u for u in reg.calls)
+
+
+def test_withdrawn_is_reported():
+    assert trust(SUBJECT, fetch=Registry([], withdrawn=True)).withdrawn

{openentity-0.3.1 → openentity-0.4.0}/tests/test_verifier.py

@@ -15,6 +15,9 @@ ROOT = Path(__file__).resolve().parents[3]
 spec = importlib.util.spec_from_file_location("iv", ROOT / "scripts/independent_verifier.py")
 iv = importlib.util.module_from_spec(spec)
 spec.loader.exec_module(iv)
+spec = importlib.util.spec_from_file_location("rc", ROOT / "scripts/rebuild_check.py")
+rc = importlib.util.module_from_spec(spec)
+spec.loader.exec_module(rc)
 ORIGIN = "openentity.org/log"
 
 
@@ -129,18 +132,18 @@ def _bucket(tmp_path, n=5, tamper=False):
 
 def test_rebuild_matches_checkpoint(tmp_path):
     n, root = _bucket(tmp_path)
-    ok, lines = iv.rebuild(tmp_path, (n, root))
+    ok, lines = rc.rebuild(tmp_path, (n, root))
     assert ok, lines
-    assert iv.tile_path(1234067) == "x001/x234/067"
+    assert rc.tile_path(1234067) == "x001/x234/067"
 
 
 def test_rebuild_catches_wrong_root_missing_leaf_and_bad_tile(tmp_path):
     n, root = _bucket(tmp_path)
-    assert not iv.rebuild(tmp_path, (n, b"\0" * 32))[0]
-    assert not iv.rebuild(tmp_path, (n + 1, root))[0]
+    assert not rc.rebuild(tmp_path, (n, b"\0" * 32))[0]
+    assert not rc.rebuild(tmp_path, (n + 1, root))[0]
     t = tmp_path / "t"; t.mkdir()
     n, root = _bucket(t, tamper=True)
-    assert not iv.rebuild(t, (n, root))[0]
+    assert not rc.rebuild(t, (n, root))[0]
 
 
 def test_rebuild_checks_objects_against_leaves(tmp_path):
@@ -159,10 +162,10 @@ def test_rebuild_checks_objects_against_leaves(tmp_path):
     (tmp_path / "objects").mkdir()
     line = {"idx": 0, "type": "Declaration", "eid": "did:key:z1", "object_sha256": sha, "object": obj}
     (tmp_path / "objects/2026-10-25.jsonl").write_text(json.dumps(line) + "\n")
-    ok, lines = iv.rebuild(tmp_path, (n, root))
+    ok, lines = rc.rebuild(tmp_path, (n, root))
     assert ok and any("objects: 1 of" in x for x in lines), lines
     (tmp_path / "objects/2026-10-25.jsonl").write_text(json.dumps({**line, "object": {**obj, "n": 2}}) + "\n")
-    assert not iv.rebuild(tmp_path, (n, root))[0]
+    assert not rc.rebuild(tmp_path, (n, root))[0]
     red = {"seq": 2, "redacted": True, "hash": sha, "redaction": {}}
     (tmp_path / "objects/2026-10-25.jsonl").write_text(json.dumps({**line, "object": red}) + "\n")
-    assert iv.rebuild(tmp_path, (n, root))[0]
+    assert rc.rebuild(tmp_path, (n, root))[0]

{openentity-0.3.1 → openentity-0.4.0}/uv.lock

@@ -189,7 +189,7 @@ wheels = [
 
 [[package]]
 name = "openentity"
-version = "0.3.1"
+version = "0.4.0"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },

openentity-0.3.1/openentity/__init__.py

@@ -1,4 +0,0 @@
-from .client import adopt, dispute, find, present, record, rotate, withdraw  # noqa: F401
-from .core import *  # noqa: F401,F403
-
-__version__ = "0.3.1"