plan-auditor 2.0.1__tar.gz → 2.0.2__tar.gz

plan_auditor-2.0.2/.gitignore

@@ -0,0 +1,15 @@
+__pycache__/
+*.pyc
+.pytest_cache/
+.plan-auditor/evidence.jsonl
+.plan-auditor/*.tmp
+.plan-auditor/archive/
+.plan-auditor/snapshots/
+.plan-auditor/seal.json
+.plan-auditor/supervisor-runtime.json
+.plan-auditor/supervisor-assessment.json
+.plan-auditor/supervisor.stop
+.plan-auditor/supervisor.log
+.plan-auditor/watchdog.jsonl
+.plan-auditor/gate-warning.json
+.plan-auditor/agents/

plan_auditor-2.0.2/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+## v2.0.2 — 2026-09-05
+
+- **Integrated supervisor pipeline:** new `supervisor/orchestrator.py` wires plan validation, requirements, workspace state, policies, sealing, deterministic evidence, adversarial review, completion gating, lifecycle state, and multi-agent state into one fail-closed assessment.
+- **Real hook enforcement:** `hooks/gate_hook.py` no longer trusts `status=verified` or fabricated integrity flags; PASS requires a valid seal and matching fresh full-audit evidence.
+- **Deterministic audit freshness:** full audits now record SHA-256 fingerprints of the verification contract and workspace contents. Any post-audit content change invalidates completion without relying on filesystem mtimes.
+- **Cross-archive evidence anchoring:** rotations write archive anchors and L11 verifies both internal JSONL hash chains and links between archives.
+- **Persistent multi-agent state:** ownership and heartbeat updates are written to the shared registry; separate processes see the same state, and `parallel-strict` rejects overlapping file claims.
+- **Adversarial gate integration:** high/critical L12 findings with no deterministic follow-up prevent PASS and produce UNKNOWN instead of being ignored.
+- **User policy loading:** deterministic JSON/TOML policies now load from configured policy directories.
+- **Workspace safety:** file checks and rollback are path-confined; workspace observation is read-only and uses `shutil.which()` instead of shell redirections that could create files.
+- **Daemon integration:** the background supervisor now persists an integrated assessment and final gate outcome on every observation cycle.
+- **Regression coverage:** integration-hardening tests cover stale `verified` labels, fingerprints, archive anchors, cross-process ownership, strict conflicts, policy loading, and read-only workspace observation.
+
+## v1.1.0 — 2026-09-03
+
+- **Portable skill paths:** `SKILL.md` no longer hardcodes an install path; agents resolve `scripts/audit_check.py` relative to the skill directory. The package now drops into any Agent-Skills tool (Command Code, Claude Code, Codex CLI, Cursor, Grok Build, OpenCode).
+- **Hard attempt cap:** `run` refuses to execute a step that already failed `MAX_ATTEMPTS` (3) times — evidence-based, agent can't grind past it. `--force` overrides explicitly.
+- **Multi-plan support:** `--plan <name>` operates on `.plan-auditor/plans/<name>.json`; the default remains `plan.json`. Evidence records are scoped per plan; `stop_gate.py` checks all active plans.
+- **Snapshot / rollback:** `snapshot` archives the files listed in the plan's optional `snapshot` field (falls back to `git ls-files`) into a zip; `rollback` restores the latest (`--to` to pick one). Both actions are recorded in the evidence chain.
+- **Evidence rotation:** logs over 2 MB are moved to `.plan-auditor/archive/` automatically; the chain restarts cleanly.
+- **Test suite:** 25 unit tests covering schema, checks, chain/tamper, caps, multi-plan, rotation, snapshot/rollback.
+
+## v1.0.0 — 2026-09-03
+
+- Initial release: strict plan + independent auditor Agent Skill.
+- `plan.json` schema with machine-checkable `verify` checks (`run`, `exec`, `file_exists`, `regex`, `pytest`).
+- Deterministic auditor: fresh-shell execution, append-only SHA-256 hash-chained evidence log, tamper detection (exit 2), full-audit final gate.
+- Mandatory behavioral check per step; recovery-loop rules; self-audit CI gate (GitHub Actions); Command Code Stop-hook enforcement gate.

{plan_auditor-2.0.1 → plan_auditor-2.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: plan-auditor
-Version: 2.0.1
+Version: 2.0.2
 Summary: Independent multi-layer verification supervisor for AI coding agents
 Project-URL: Homepage, https://github.com/Furox-Art/plan-auditor
 Project-URL: Repository, https://github.com/Furox-Art/plan-auditor

{plan_auditor-2.0.1 → plan_auditor-2.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plan-auditor"
-version = "2.0.1"
+version = "2.0.2"
 description = "Independent multi-layer verification supervisor for AI coding agents"
 readme = "README.md"
 license = "MIT"