pdf-form-proof 0.1.0__tar.gz

pdf_form_proof-0.1.0/.claude-plugin/marketplace.json

@@ -0,0 +1,12 @@
+{
+  "name": "pdf-form-proof",
+  "owner": { "name": "EssenceAlignment" },
+  "plugins": [
+    {
+      "name": "pdf-form-proof",
+      "source": "./",
+      "description": "Fill fillable PDF forms, then prove every value is visible on the rendered page.",
+      "version": "0.1.0"
+    }
+  ]
+}

pdf_form_proof-0.1.0/.claude-plugin/plugin.json

@@ -0,0 +1,10 @@
+{
+  "name": "pdf-form-proof",
+  "version": "0.1.0",
+  "description": "Fill fillable PDF forms, then prove every value is visible on the rendered page (OCR vs. text layer). Refuses unknown field names; never overwrites; runs locally.",
+  "author": { "name": "EssenceAlignment" },
+  "homepage": "https://github.com/EssenceAlignment/pdf-form-proof",
+  "repository": "https://github.com/EssenceAlignment/pdf-form-proof",
+  "license": "MIT",
+  "keywords": ["pdf", "pdf-form", "form-filling", "acroform", "ocr", "verification", "nonprofit", "mcp"]
+}

pdf_form_proof-0.1.0/.gitignore

@@ -0,0 +1,7 @@
+__pycache__/
+*.pyc
+.venv/
+dist/
+build/
+*.egg-info/
+*.mcpb

pdf_form_proof-0.1.0/.mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "pdf-form-proof": {
+      "command": "uvx",
+      "args": ["--from", "${CLAUDE_PLUGIN_ROOT}", "pdf-form-proof"]
+    }
+  }
+}

pdf_form_proof-0.1.0/.mcpbignore

@@ -0,0 +1,12 @@
+.git/
+.github/
+.claude-plugin/
+.mcp.json
+gemini-extension.json
+GEMINI.md
+Dockerfile
+tests/
+dist/
+**/__pycache__/
+*.mcpb
+server.json

pdf_form_proof-0.1.0/Dockerfile

@@ -0,0 +1,9 @@
+FROM python:3.12-slim
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends poppler-utils tesseract-ocr \
+ && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY pyproject.toml README.md LICENSE ./
+COPY src ./src
+RUN pip install --no-cache-dir .
+ENTRYPOINT ["pdf-form-proof"]

pdf_form_proof-0.1.0/GEMINI.md

@@ -0,0 +1,10 @@
+# pdf-form-proof
+
+Tools: pdf_form_inspect, pdf_form_fill, pdf_form_verify, pdf_sha256.
+
+Workflow for any fillable PDF form: inspect to get exact field names and
+checkbox on-states; fill with exact names (unknown names are refused and
+nothing is written); then verify the output so each value is confirmed
+VISIBLE on the rendered page. Report REFUSE verdicts as-is. Never invent a
+field value; ask the user. This tool fills forms and gives no legal, tax, or
+benefits advice. The verify tool needs poppler and tesseract installed.

pdf_form_proof-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 EssenceAlignment
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pdf_form_proof-0.1.0/PKG-INFO

@@ -0,0 +1,169 @@
+Metadata-Version: 2.5
+Name: pdf-form-proof
+Version: 0.1.0
+Summary: Fill fillable PDF forms, then prove every value is visible on the rendered page. MCP server and CLI.
+Project-URL: Homepage, https://github.com/EssenceAlignment/pdf-form-proof
+Project-URL: Issues, https://github.com/EssenceAlignment/pdf-form-proof/issues
+Author: EssenceAlignment
+License: MIT
+License-File: LICENSE
+Keywords: acroform,form-filling,mcp,nonprofit,ocr,pdf,pdf-form,verification
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Office/Business
+Requires-Python: >=3.10
+Requires-Dist: mcp<2,>=1.10
+Requires-Dist: pillow>=10.0
+Requires-Dist: pypdf>=4.0
+Description-Content-Type: text/markdown
+
+# pdf-form-proof
+
+Fill a fillable PDF form, then prove every value actually shows on the page.
+
+mcp-name: io.github.EssenceAlignment/pdf-form-proof
+
+A PDF can hold a value in its data while the page a person sees, prints, or
+uploads shows nothing, or shows it cut off. Most form tools stop at "the field
+was set." This one keeps going: it renders the page, reads it back with OCR
+(optical character recognition, software that reads text from an image), and
+compares that with the text stored in the file. Each value comes back VISIBLE,
+INVISIBLE, RENDER-ONLY, or MISSING.
+
+It works as an MCP server (MCP, the Model Context Protocol, is the plug-in
+standard that lets AI apps such as Claude call outside tools), as a Claude
+plugin, as a Gemini CLI extension, and as plain command-line tools.
+
+## What it does
+
+| Tool | What it does | Changes files? |
+|---|---|---|
+| `pdf_form_inspect` | Lists every fillable field: exact name, type, current value, required flag, and the values that check each checkbox or radio button | No |
+| `pdf_form_fill` | Fills fields by exact name and writes a new PDF. Refuses the whole fill if any name is not in the form. Never modifies the source, never overwrites an existing file. Returns the new file's SHA-256 and reads every text value back | Writes one new file |
+| `pdf_form_verify` | Renders a page, OCRs it, and gives each value a verdict. Can be limited to one region of the page so a copy of the value elsewhere cannot make it pass | No |
+| `pdf_sha256` | SHA-256 fingerprint of a file, for a record of exactly what was produced | No |
+
+Every tool carries MCP annotations: `readOnlyHint` and `destructiveHint` are set on all four.
+
+## Who it is for
+
+Anyone who fills the same official PDFs again and again: small nonprofits and
+community organizations (vendor forms such as the IRS W-9, grant and funder
+forms, program intake and consent forms), operations staff, and builders who
+want an AI assistant to fill forms without hiding a partial or invisible fill.
+
+## Install
+
+You need Python 3.10 or newer and `uv` (https://docs.astral.sh/uv/). The verify
+tool also needs two free programs:
+
+- macOS: `brew install poppler tesseract`
+- Debian or Ubuntu: `sudo apt install poppler-utils tesseract-ocr`
+
+### Claude Desktop (MCP server)
+
+Add this to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "pdf-form-proof": {
+      "command": "uvx",
+      "args": ["pdf-form-proof"]
+    }
+  }
+}
+```
+
+Or install the `.mcpb` file from the latest GitHub release: double-click it, or
+use Settings > Extensions > Advanced settings > Install Extension.
+
+### Claude Code (plugin)
+
+```
+claude plugin marketplace add EssenceAlignment/pdf-form-proof
+claude plugin install pdf-form-proof@pdf-form-proof
+```
+
+### Gemini CLI (extension)
+
+```
+gemini extensions install https://github.com/EssenceAlignment/pdf-form-proof
+```
+
+### Command line
+
+```
+uvx --from pdf-form-proof pdf-form-inspect form.pdf
+uvx --from pdf-form-proof pdf-form-fill form.pdf filled.pdf values.json
+uvx --from pdf-form-proof pdf-form-verify filled.pdf --require "Sample Community Food Bank"
+```
+
+`values.json` maps exact field names (from `pdf-form-inspect`) to values:
+
+```json
+{
+  "topmostSubform[0].Page1[0].f1_01[0]": "Sample Community Food Bank",
+  "topmostSubform[0].Page1[0].Boxes3a-b_ReadOrder[0].c1_1[0]": "/1"
+}
+```
+
+Text fields take a string. A checkbox or radio takes one of its on-state values
+(shown by inspect, for example "/1" or "/Yes"), or an empty string to clear it.
+
+Exit codes: 0 success; 1 a finding (verify found a value that is not visible,
+or a fill could not be read back); 2 refused (unknown field names, a missing
+file, an existing output, or a tool such as tesseract failed).
+
+## Example
+
+```
+$ pdf-form-verify filled.pdf --require "Sample Community Food Bank" --require "Sample Pantry Program"
+PDF FORM PROOF - legibility check  verdict: PASS
+  file: filled.pdf  page 1 at 300 dpi  scope: whole page
+  VALUE                       SOURCE    TEXT  RENDER  VERDICT
+  Sample Community Food Bank  required  yes   yes     VISIBLE
+  Sample Pantry Program       required  yes   yes     VISIBLE
+  limit: legibility only; says nothing about whether values are correct
+```
+
+## Limits (read these)
+
+- AcroForm forms only. XFA-only forms (Adobe LiveCycle dynamic forms) are
+  detected and refused, not filled.
+- `finalize` removes the XFA packet and the NeedAppearances flag so viewers draw
+  the values from their own appearance streams. It does not flatten the form;
+  fields stay editable.
+- Verify proves legibility, not correctness. It cannot tell you whether a value
+  is the right answer for the form.
+- OCR can misread small, stylized, or handwritten-style fonts. A REFUSE verdict
+  means "look at the page," not "the file is broken." A tool failure (missing
+  poppler or tesseract, a render error) is reported as a tool failure, never as
+  a finding about your document.
+- Signatures are not created. Signature fields are listed by inspect and left alone.
+- This tool fills forms. It does not give legal, tax, benefits, or other
+  professional advice, and it does not decide what belongs in any field.
+
+## Privacy policy
+
+pdf-form-proof runs entirely on your own computer.
+
+- Data collection: none. It reads only the PDF files you name and writes only
+  the output path you name.
+- Usage and storage: rendered page images are kept in `~/.cache/pdf-form-proof`
+  only until the next verify run, which deletes them.
+- Third-party sharing: none. It makes no network calls and sends no telemetry.
+- Retention: nothing is retained beyond the files you create.
+- Contact: open an issue at https://github.com/EssenceAlignment/pdf-form-proof/issues
+
+## Origin
+
+The fill engine and the visible-on-the-page check were built for a production
+document pipeline after a filled form passed every text-based check and was
+still returned because a value could not be seen on the page. The two rules
+that came out of that: never hide a partial fill, and check the page a person
+sees, not only the data in the file.
+
+## License
+
+MIT. See `LICENSE`.

pdf_form_proof-0.1.0/README.md

@@ -0,0 +1,150 @@
+# pdf-form-proof
+
+Fill a fillable PDF form, then prove every value actually shows on the page.
+
+mcp-name: io.github.EssenceAlignment/pdf-form-proof
+
+A PDF can hold a value in its data while the page a person sees, prints, or
+uploads shows nothing, or shows it cut off. Most form tools stop at "the field
+was set." This one keeps going: it renders the page, reads it back with OCR
+(optical character recognition, software that reads text from an image), and
+compares that with the text stored in the file. Each value comes back VISIBLE,
+INVISIBLE, RENDER-ONLY, or MISSING.
+
+It works as an MCP server (MCP, the Model Context Protocol, is the plug-in
+standard that lets AI apps such as Claude call outside tools), as a Claude
+plugin, as a Gemini CLI extension, and as plain command-line tools.
+
+## What it does
+
+| Tool | What it does | Changes files? |
+|---|---|---|
+| `pdf_form_inspect` | Lists every fillable field: exact name, type, current value, required flag, and the values that check each checkbox or radio button | No |
+| `pdf_form_fill` | Fills fields by exact name and writes a new PDF. Refuses the whole fill if any name is not in the form. Never modifies the source, never overwrites an existing file. Returns the new file's SHA-256 and reads every text value back | Writes one new file |
+| `pdf_form_verify` | Renders a page, OCRs it, and gives each value a verdict. Can be limited to one region of the page so a copy of the value elsewhere cannot make it pass | No |
+| `pdf_sha256` | SHA-256 fingerprint of a file, for a record of exactly what was produced | No |
+
+Every tool carries MCP annotations: `readOnlyHint` and `destructiveHint` are set on all four.
+
+## Who it is for
+
+Anyone who fills the same official PDFs again and again: small nonprofits and
+community organizations (vendor forms such as the IRS W-9, grant and funder
+forms, program intake and consent forms), operations staff, and builders who
+want an AI assistant to fill forms without hiding a partial or invisible fill.
+
+## Install
+
+You need Python 3.10 or newer and `uv` (https://docs.astral.sh/uv/). The verify
+tool also needs two free programs:
+
+- macOS: `brew install poppler tesseract`
+- Debian or Ubuntu: `sudo apt install poppler-utils tesseract-ocr`
+
+### Claude Desktop (MCP server)
+
+Add this to `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "pdf-form-proof": {
+      "command": "uvx",
+      "args": ["pdf-form-proof"]
+    }
+  }
+}
+```
+
+Or install the `.mcpb` file from the latest GitHub release: double-click it, or
+use Settings > Extensions > Advanced settings > Install Extension.
+
+### Claude Code (plugin)
+
+```
+claude plugin marketplace add EssenceAlignment/pdf-form-proof
+claude plugin install pdf-form-proof@pdf-form-proof
+```
+
+### Gemini CLI (extension)
+
+```
+gemini extensions install https://github.com/EssenceAlignment/pdf-form-proof
+```
+
+### Command line
+
+```
+uvx --from pdf-form-proof pdf-form-inspect form.pdf
+uvx --from pdf-form-proof pdf-form-fill form.pdf filled.pdf values.json
+uvx --from pdf-form-proof pdf-form-verify filled.pdf --require "Sample Community Food Bank"
+```
+
+`values.json` maps exact field names (from `pdf-form-inspect`) to values:
+
+```json
+{
+  "topmostSubform[0].Page1[0].f1_01[0]": "Sample Community Food Bank",
+  "topmostSubform[0].Page1[0].Boxes3a-b_ReadOrder[0].c1_1[0]": "/1"
+}
+```
+
+Text fields take a string. A checkbox or radio takes one of its on-state values
+(shown by inspect, for example "/1" or "/Yes"), or an empty string to clear it.
+
+Exit codes: 0 success; 1 a finding (verify found a value that is not visible,
+or a fill could not be read back); 2 refused (unknown field names, a missing
+file, an existing output, or a tool such as tesseract failed).
+
+## Example
+
+```
+$ pdf-form-verify filled.pdf --require "Sample Community Food Bank" --require "Sample Pantry Program"
+PDF FORM PROOF - legibility check  verdict: PASS
+  file: filled.pdf  page 1 at 300 dpi  scope: whole page
+  VALUE                       SOURCE    TEXT  RENDER  VERDICT
+  Sample Community Food Bank  required  yes   yes     VISIBLE
+  Sample Pantry Program       required  yes   yes     VISIBLE
+  limit: legibility only; says nothing about whether values are correct
+```
+
+## Limits (read these)
+
+- AcroForm forms only. XFA-only forms (Adobe LiveCycle dynamic forms) are
+  detected and refused, not filled.
+- `finalize` removes the XFA packet and the NeedAppearances flag so viewers draw
+  the values from their own appearance streams. It does not flatten the form;
+  fields stay editable.
+- Verify proves legibility, not correctness. It cannot tell you whether a value
+  is the right answer for the form.
+- OCR can misread small, stylized, or handwritten-style fonts. A REFUSE verdict
+  means "look at the page," not "the file is broken." A tool failure (missing
+  poppler or tesseract, a render error) is reported as a tool failure, never as
+  a finding about your document.
+- Signatures are not created. Signature fields are listed by inspect and left alone.
+- This tool fills forms. It does not give legal, tax, benefits, or other
+  professional advice, and it does not decide what belongs in any field.
+
+## Privacy policy
+
+pdf-form-proof runs entirely on your own computer.
+
+- Data collection: none. It reads only the PDF files you name and writes only
+  the output path you name.
+- Usage and storage: rendered page images are kept in `~/.cache/pdf-form-proof`
+  only until the next verify run, which deletes them.
+- Third-party sharing: none. It makes no network calls and sends no telemetry.
+- Retention: nothing is retained beyond the files you create.
+- Contact: open an issue at https://github.com/EssenceAlignment/pdf-form-proof/issues
+
+## Origin
+
+The fill engine and the visible-on-the-page check were built for a production
+document pipeline after a filled form passed every text-based check and was
+still returned because a value could not be seen on the page. The two rules
+that came out of that: never hide a partial fill, and check the page a person
+sees, not only the data in the file.
+
+## License
+
+MIT. See `LICENSE`.

pdf_form_proof-0.1.0/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: pdf-form-proof
+description: Fill a fillable (AcroForm) PDF form and prove the result is visible on the page. Use when asked to fill out, complete, or check a PDF form (W-9, grant, intake, consent, or any agency form), when a filled field "looks blank", or when a form must be verified before it is sent. Inspect exact field names, fill by name with unknown names refused, then OCR the rendered page to confirm each value shows.
+---
+
+# pdf-form-proof
+
+Three steps, in order. Do not skip step 3.
+
+## 1. Inspect
+
+Call `pdf_form_inspect` (or run `pdf-form-inspect form.pdf`). Copy field names
+exactly as returned. For checkboxes and radio buttons, note the `on_states`
+list: that value (for example "/1") is what checks the box.
+
+If `kind` is `xfa`, stop and tell the user this tool does not fill XFA forms.
+
+## 2. Fill
+
+Call `pdf_form_fill` with a new `output_path` and a `values` map of exact names.
+
+- Leave `strict` on. If the result is `refused` with `unknown_fields`, fix the
+  names from step 1. Never retry with `strict=false` to make an error go away.
+- The source file is never modified and an existing output is never overwritten.
+- Report the returned `sha256` to the user.
+- Ask the user for any value you do not have. Never invent a value for a form
+  field, and do not decide what an official form should say on the user's behalf.
+
+## 3. Verify
+
+Call `pdf_form_verify` on the output with the values you filled (one call per page).
+
+- PASS: every value is VISIBLE. Say so, and repeat the limit: this proves the
+  values show, not that they are correct.
+- REFUSE with `kind: finding`: list each value marked INVISIBLE, RENDER-ONLY or
+  MISSING. INVISIBLE means it is in the file but not on the page; the usual
+  fix is re-filling with `finalize=true`, or a shorter value for a small box.
+- REFUSE with `kind: tool_failure`: say which program failed (poppler or
+  tesseract) and how to install it. Make no claim about the document.
+
+## Limits
+
+AcroForm only. No signatures. OCR can misread small or stylized fonts. This
+skill fills forms; it does not give legal, tax, or benefits advice.

pdf_form_proof-0.1.0/gemini-extension.json

@@ -0,0 +1,13 @@
+{
+  "name": "pdf-form-proof",
+  "version": "0.1.0",
+  "description": "Fill fillable PDF forms, then prove every value is visible on the rendered page.",
+  "mcpServers": {
+    "pdf-form-proof": {
+      "command": "uvx",
+      "args": ["--from", "${extensionPath}", "pdf-form-proof"],
+      "cwd": "${extensionPath}"
+    }
+  },
+  "contextFileName": "GEMINI.md"
+}

pdf_form_proof-0.1.0/manifest.json

@@ -0,0 +1,68 @@
+{
+  "manifest_version": "0.4",
+  "name": "pdf-form-proof",
+  "display_name": "PDF Form Proof",
+  "version": "0.1.0",
+  "description": "Fill fillable PDF forms, then prove every value is visible on the rendered page.",
+  "long_description": "Inspect exact field names, fill AcroForm PDFs by name (unknown names are refused and nothing is written; the source is never modified), then render the page and OCR it to confirm each value is VISIBLE, not only stored in the file. Runs locally with no network calls. The verify tool needs poppler and tesseract installed.",
+  "author": {
+    "name": "EssenceAlignment",
+    "url": "https://github.com/EssenceAlignment"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/EssenceAlignment/pdf-form-proof"
+  },
+  "homepage": "https://github.com/EssenceAlignment/pdf-form-proof",
+  "support": "https://github.com/EssenceAlignment/pdf-form-proof/issues",
+  "license": "MIT",
+  "keywords": [
+    "pdf",
+    "forms",
+    "acroform",
+    "ocr",
+    "verification",
+    "nonprofit"
+  ],
+  "server": {
+    "type": "uv",
+    "entry_point": "run_server.py",
+    "mcp_config": {
+      "command": "uv",
+      "args": [
+        "run",
+        "--directory",
+        "${__dirname}",
+        "run_server.py"
+      ]
+    }
+  },
+  "tools": [
+    {
+      "name": "pdf_form_inspect",
+      "description": "List every fillable field with exact name, type, and checkbox on-states."
+    },
+    {
+      "name": "pdf_form_fill",
+      "description": "Fill fields by exact name into a new PDF; refuses unknown names; never overwrites."
+    },
+    {
+      "name": "pdf_form_verify",
+      "description": "OCR the rendered page and confirm each value is visible, not only stored."
+    },
+    {
+      "name": "pdf_sha256",
+      "description": "SHA-256 fingerprint of a file."
+    }
+  ],
+  "compatibility": {
+    "platforms": [
+      "darwin",
+      "linux",
+      "win32"
+    ],
+    "runtimes": {
+      "python": ">=3.10"
+    }
+  }
+}

pdf_form_proof-0.1.0/pyproject.toml

@@ -0,0 +1,36 @@
+[project]
+name = "pdf-form-proof"
+version = "0.1.0"
+description = "Fill fillable PDF forms, then prove every value is visible on the rendered page. MCP server and CLI."
+readme = "README.md"
+requires-python = ">=3.10"
+license = { text = "MIT" }
+authors = [{ name = "EssenceAlignment" }]
+keywords = ["pdf", "pdf-form", "acroform", "form-filling", "mcp", "ocr", "verification", "nonprofit"]
+classifiers = [
+  "Programming Language :: Python :: 3",
+  "License :: OSI Approved :: MIT License",
+  "Topic :: Office/Business",
+]
+dependencies = [
+  "mcp>=1.10,<2",
+  "pypdf>=4.0",
+  "pillow>=10.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/EssenceAlignment/pdf-form-proof"
+Issues = "https://github.com/EssenceAlignment/pdf-form-proof/issues"
+
+[project.scripts]
+pdf-form-proof = "pdf_form_proof.server:main"
+pdf-form-inspect = "pdf_form_proof.cli:inspect_main"
+pdf-form-fill = "pdf_form_proof.cli:fill_main"
+pdf-form-verify = "pdf_form_proof.legibility:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/pdf_form_proof"]

pdf_form_proof-0.1.0/run_server.py

@@ -0,0 +1,11 @@
+"""Entry point for the MCPB (desktop extension) bundle: runs the stdio MCP server."""
+
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "src"))
+
+from pdf_form_proof.server import main  # noqa: E402
+
+if __name__ == "__main__":
+    main()

pdf_form_proof-0.1.0/server.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.EssenceAlignment/pdf-form-proof",
+  "title": "PDF Form Proof",
+  "description": "Fill fillable PDF forms, then prove every value is visible on the rendered page.",
+  "version": "0.1.0",
+  "repository": {
+    "url": "https://github.com/EssenceAlignment/pdf-form-proof",
+    "source": "github"
+  },
+  "websiteUrl": "https://github.com/EssenceAlignment/pdf-form-proof",
+  "packages": [
+    {
+      "registryType": "pypi",
+      "registryBaseUrl": "https://pypi.org",
+      "identifier": "pdf-form-proof",
+      "version": "0.1.0",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}

pdf_form_proof-0.1.0/skills/pdf-form-proof/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: pdf-form-proof
+description: Fill a fillable (AcroForm) PDF form and prove the result is visible on the page. Use when asked to fill out, complete, or check a PDF form (W-9, grant, intake, consent, or any agency form), when a filled field "looks blank", or when a form must be verified before it is sent. Inspect exact field names, fill by name with unknown names refused, then OCR the rendered page to confirm each value shows.
+---
+
+# pdf-form-proof
+
+Three steps, in order. Do not skip step 3.
+
+## 1. Inspect
+
+Call `pdf_form_inspect` (or run `pdf-form-inspect form.pdf`). Copy field names
+exactly as returned. For checkboxes and radio buttons, note the `on_states`
+list: that value (for example "/1") is what checks the box.
+
+If `kind` is `xfa`, stop and tell the user this tool does not fill XFA forms.
+
+## 2. Fill
+
+Call `pdf_form_fill` with a new `output_path` and a `values` map of exact names.
+
+- Leave `strict` on. If the result is `refused` with `unknown_fields`, fix the
+  names from step 1. Never retry with `strict=false` to make an error go away.
+- The source file is never modified and an existing output is never overwritten.
+- Report the returned `sha256` to the user.
+- Ask the user for any value you do not have. Never invent a value for a form
+  field, and do not decide what an official form should say on the user's behalf.
+
+## 3. Verify
+
+Call `pdf_form_verify` on the output with the values you filled (one call per page).
+
+- PASS: every value is VISIBLE. Say so, and repeat the limit: this proves the
+  values show, not that they are correct.
+- REFUSE with `kind: finding`: list each value marked INVISIBLE, RENDER-ONLY or
+  MISSING. INVISIBLE means it is in the file but not on the page; the usual
+  fix is re-filling with `finalize=true`, or a shorter value for a small box.
+- REFUSE with `kind: tool_failure`: say which program failed (poppler or
+  tesseract) and how to install it. Make no claim about the document.
+
+## Limits
+
+AcroForm only. No signatures. OCR can misread small or stylized fonts. This
+skill fills forms; it does not give legal, tax, or benefits advice.

pdf_form_proof-0.1.0/src/pdf_form_proof/__init__.py

@@ -0,0 +1,3 @@
+"""pdf-form-proof: fill fillable PDF forms, then prove every value is on the page."""
+
+__version__ = "0.1.0"