project-xox 0.1.0__tar.gz

project_xox-0.1.0/.gitignore

@@ -0,0 +1,37 @@
+# Agent-internal workspace
+.agents/
+
+# Python virtual environments
+.venv/
+venv/
+
+# Build outputs & packaging artifacts
+target/
+dist/
+build/
+
+# Python caches and test artifacts
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+
+# Editor and OS files
+.idea/
+.vscode/
+.DS_Store
+*.swp
+*.swo
+*.tmp
+*.log
+
+# Secrets and environment files
+.env
+.env.*
+*.pem
+*.key
+*.p12
+*.pfx

project_xox-0.1.0/Cargo.lock

@@ -0,0 +1,132 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "portable-atomic"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "pyo3"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4688ddedf473e32662b9b067670129a8afb8c18e351482c70d62ba4a88171e8b"
+dependencies = [
+ "libc",
+ "once_cell",
+ "portable-atomic",
+ "pyo3-build-config",
+ "pyo3-ffi",
+ "pyo3-macros",
+]
+
+[[package]]
+name = "pyo3-build-config"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f41027e41b4bd03f6e60f9f417fe24a6341a6bb744edd62b6f709f2a52ea30e9"
+dependencies = [
+ "target-lexicon",
+]
+
+[[package]]
+name = "pyo3-ffi"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e591a95526fead067432c3b3a33fc74770b87b1e04e73671090d9c2055a2b327"
+dependencies = [
+ "libc",
+ "pyo3-build-config",
+]
+
+[[package]]
+name = "pyo3-macros"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73225868fc1cd84eef2c3c230ddb91273bf1de46aeb8a4248da76d32a0924a1c"
+dependencies = [
+ "proc-macro2",
+ "pyo3-macros-backend",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pyo3-macros-backend"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "571575aa3749fa6216757dd47d2a3e7ef360f329a40f0666a9fbd14889024952"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "xox"
+version = "0.1.0"
+dependencies = [
+ "pyo3",
+]

project_xox-0.1.0/Cargo.toml

@@ -0,0 +1,23 @@
+[package]
+name = "xox"
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.83"
+exclude = [
+    ".agents",
+    ".git",
+    ".github",
+    ".venv",
+    ".pytest_cache",
+    "target",
+    "tests",
+    "docs",
+]
+readme = "README.md"
+
+[lib]
+name = "xox"
+crate-type = ["cdylib", "rlib"]
+
+[dependencies]
+pyo3 = { version = "0.29", features = ["extension-module"] }

project_xox-0.1.0/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriement of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

project_xox-0.1.0/PKG-INFO

@@ -0,0 +1,273 @@
+Metadata-Version: 2.4
+Name: project-xox
+Version: 0.1.0
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Programming Language :: Rust
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: POSIX :: Linux
+License-File: LICENSE
+Summary: Tri-state epistemic uncertainty engine preserving explicit True, False, and Unknown decision semantics
+License-Expression: Apache-2.0
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM
+Project-URL: Documentation, https://github.com/linuxx88/XoX/blob/main/docs/04_api/CORE_API.md
+Project-URL: Homepage, https://github.com/linuxx88/XoX
+
+# XoX
+
+Tri-state epistemic uncertainty engine preserving explicit `True`, `False`, and `Unknown` decision semantics in Python.
+
+---
+
+## The Problem
+
+Standard boolean logic provides only two states: `True` and `False`. When a system evaluates an assertion—such as whether an account is authorized, whether a remote record exists, or whether an external precondition holds—the state of that assertion is often indeterminate due to incomplete or unreachable information.
+
+Coercing an unestablished proposition into `False` (or `True`) conflates **known falsity** with **absence of knowledge**. This silent collapse can introduce subtle defects, improper fallbacks, or security vulnerabilities where systems act on assumptions rather than established truth.
+
+XoX provides a principled tri-state logical model where uncertainty is preserved across function boundaries, combined using Strong Kleene logic, and collapsed into Python booleans only when the application explicitly defines a fallback policy.
+
+---
+
+## Semantic Model
+
+XoX represents three distinct, immutable logical states:
+
+- **`xox.TRUE`**: The proposition is definitively established as true.
+- **`xox.FALSE`**: The proposition is definitively refuted as false.
+- **`xox.UNKNOWN`**: The proposition has not been established as true or false.
+
+`Unknown` carries no intrinsic bias toward `True` or `False`.
+
+### What `UNKNOWN` Is Not
+
+To prevent semantic confusion, `xox.UNKNOWN` has strict boundaries:
+- **Not `None`**: It represents an unresolved proposition, not the absence of an object.
+- **Not an exception**: Runtime errors, system failures, and contract violations remain standard Python exceptions.
+- **Not a pending async state**: It is an evaluated outcome, not an incomplete future or promise.
+- **Not a timeout**: A timeout is an execution event, whereas `UNKNOWN` is a state of knowledge.
+- **Not probabilistic confidence**: It indicates that truth has not been established, not a probability score.
+- **Not an action directive**: `UNKNOWN` does not intrinsically mean retry, deny, allow, wait, fail, or default. Any action taken in response to uncertainty is defined strictly by caller policy.
+
+---
+
+## Installation
+
+```bash
+pip install project-xox
+```
+
+> **Note**: The package distribution name on PyPI is `project-xox`, while the Python import name is `xox`.
+
+---
+
+## Basic Usage
+
+```python
+import xox
+
+# Canonical value constants
+t = xox.TRUE
+f = xox.FALSE
+u = xox.UNKNOWN
+
+# State inspection
+if t.is_true():
+    print("Definitely True")
+
+if f.is_false():
+    print("Definitely False")
+
+if u.is_unknown():
+    print("State is indeterminate")
+```
+
+---
+
+## Strict Domain Separation & Truthiness Prohibition
+
+Python `bool` and `xox.XoX` belong to strictly separated domains. Crossing between them requires explicit operations.
+
+### Truthiness is Prohibited
+
+XoX values prohibit direct boolean coercion (`__bool__`). Evaluating an `XoX` instance in an `if`, `while`, `bool()`, `and`, `or`, or `not` context raises a `TypeError`:
+
+```python
+val = xox.UNKNOWN
+
+# Prohibited - raises TypeError:
+# if val:
+#     ...
+# bool(val)
+```
+
+This prevents uncertainty from silently collapsing into boolean control flow.
+
+### Domain Equality Isolation
+
+XoX values never compare equal to native Python booleans:
+
+```python
+assert (xox.TRUE == True) is False
+assert (xox.FALSE == False) is False
+assert (xox.UNKNOWN == False) is False
+```
+
+---
+
+## Ingress: Bool to XoX
+
+To bring a Python boolean into the XoX domain, use `xox.from_bool()`:
+
+```python
+xox_val = xox.from_bool(True)   # returns xox.TRUE
+xox_val = xox.from_bool(False)  # returns xox.FALSE
+```
+
+`xox.from_bool()` accepts only exact Python `bool` instances (`True` or `False`). Non-boolean values (including `1`, `0`, `None`, or truthy objects) raise a `TypeError`.
+
+---
+
+## Strong Kleene Logic Operations
+
+XoX implements standard Strong Kleene ($K_3$) logic with host-level short-circuiting.
+
+### Unary NOT (`~`)
+
+The bitwise inversion operator `~` performs Strong Kleene negation:
+
+```python
+assert ~xox.TRUE == xox.FALSE
+assert ~xox.FALSE == xox.TRUE
+assert ~xox.UNKNOWN == xox.UNKNOWN
+```
+
+### Lazy Conjunction (`lazy_and`) & Disjunction (`lazy_or`)
+
+Python evaluates binary operator operands (`&`, `|`) eagerly. To guarantee real short-circuit evaluation without evaluating unneeded branches, conjunction and disjunction require zero-argument callables:
+
+```python
+# Conjunction: FALSE short-circuits; RHS is never called
+result = xox.FALSE.lazy_and(lambda: expensive_query())  # returns xox.FALSE
+
+# Disjunction: TRUE short-circuits; RHS is never called
+result = xox.TRUE.lazy_or(lambda: expensive_query())    # returns xox.TRUE
+
+# When LHS cannot determine the outcome, RHS is executed exactly once:
+result = xox.UNKNOWN.lazy_and(lambda: xox.TRUE)         # returns xox.UNKNOWN
+result = xox.UNKNOWN.lazy_or(lambda: xox.TRUE)          # returns xox.TRUE
+```
+
+- **Short-circuiting**: If the outcome is determined by the LHS, the RHS callable executes **zero** times.
+- **Evaluation**: When needed, the RHS callable executes **exactly once** and must return an `XoX` instance.
+- **Exceptions**: Exceptions raised inside evaluated RHS callables propagate normally as standard Python exceptions.
+
+---
+
+## Egress: Collapsing Uncertainty to Python Bool
+
+When application code must interface with a native boolean API, collapse the `XoX` value using `collapse_or()` with an explicit fallback callable:
+
+```python
+# TRUE and FALSE resolve directly without invoking fallback
+assert xox.TRUE.collapse_or(lambda: False) is True
+assert xox.FALSE.collapse_or(lambda: True) is False
+
+# UNKNOWN executes the fallback callable exactly once
+decision = xox.UNKNOWN.collapse_or(lambda: False)  # returns False
+```
+
+- **Caller-Owned Policy**: The fallback callable represents an application policy decision (such as fail-closed or optimistic pass), not newly discovered truth.
+- **Lazy Execution**: The fallback callable is evaluated only when the value is `xox.UNKNOWN`.
+- **Type Contract**: The fallback callable must return an exact Python `bool` (`True` or `False`). Returning any other type raises a `TypeError`.
+
+---
+
+## Realistic Example: External Verification Gate
+
+```python
+import xox
+import logging
+
+def verify_remote_entitlement(user_id: str) -> xox.XoX:
+    """Queries an upstream service; returns UNKNOWN if indeterminate."""
+    try:
+        response = call_auth_service(user_id)
+        if response.status == "AUTHORIZED":
+            return xox.TRUE
+        elif response.status == "DENIED":
+            return xox.FALSE
+        else:
+            # Service responded, but entitlement status is indeterminate
+            return xox.UNKNOWN
+    except NetworkTimeoutError:
+        # Runtime transport failure is handled by application logic
+        return xox.UNKNOWN
+
+def handle_user_request(user_id: str):
+    entitlement = verify_remote_entitlement(user_id)
+
+    # 1. Explicit three-way branch
+    if entitlement.is_true():
+        grant_access()
+    elif entitlement.is_false():
+        deny_access("Explicitly denied by auth policy")
+    else:  # entitlement.is_unknown()
+        # The reaction to UNKNOWN is owned by the application:
+        queue_for_manual_review(user_id)
+
+    # 2. Or explicit policy collapse at a boolean boundary (e.g., fail-closed)
+    def fail_closed_policy() -> bool:
+        logging.warning("Entitlement indeterminate for %s; applying fail-closed default.", user_id)
+        return False
+
+    can_proceed = entitlement.collapse_or(fail_closed_policy)
+    if can_proceed:
+        execute_privileged_task()
+```
+
+---
+
+## Project Status: CORE 0.1.0
+
+XoX `0.1.0` delivers the minimal public `CORE` semantic surface:
+- Singleton constants: `xox.TRUE`, `xox.FALSE`, `xox.UNKNOWN`.
+- Canonical ingress: `xox.from_bool()`.
+- State inspection: `.is_true()`, `.is_false()`, `.is_unknown()`, and `==`.
+- Strong Kleene logic: `~` (NOT), `.lazy_and()`, and `.lazy_or()`.
+- Explicit egress: `.collapse_or()`.
+- Strict domain separation and truthiness blocking.
+
+Advanced capabilities (such as auditable policy tokens, evidence provenance tracking, and distributed consensus negotiation) are intentionally outside the scope of `CORE` and are not included in this release.
+
+---
+
+## Supported Platforms & Scope
+
+- **Python Interpreters:** CPython 3.12, 3.13, and 3.14 (version-specific CPython extension wheels).
+- **Supported Platform:** Linux x86_64.
+- **Binary Compatibility Baseline:** `manylinux_2_34_x86_64` (glibc 2.34+).
+- **Source Build MSRV:** Rust 1.83+.
+- **Unclaimed / Unsupported:** macOS, Windows, Linux aarch64, musllinux, PyPy, GraalPy, and free-threaded CPython builds are not currently claimed or supported.
+
+> **Note**: The binary compatibility baseline reflects the currently audited distribution artifact floor, not an intrinsic semantic limitation of XoX logic.
+
+---
+
+## Documentation
+
+- [Normative Public CORE API Specification](docs/04_api/CORE_API.md)
+- [Foundational Guarantees & Philosophy](docs/00_foundations/GUARANTEES.md)
+- [Runtime & Portability Model](docs/03_runtime/PORTABILITY_MODEL.md)
+
+---
+
+## License
+
+XoX is licensed under the [Apache-2.0 License](LICENSE).
+

project_xox-0.1.0/README.md

@@ -0,0 +1,252 @@
+# XoX
+
+Tri-state epistemic uncertainty engine preserving explicit `True`, `False`, and `Unknown` decision semantics in Python.
+
+---
+
+## The Problem
+
+Standard boolean logic provides only two states: `True` and `False`. When a system evaluates an assertion—such as whether an account is authorized, whether a remote record exists, or whether an external precondition holds—the state of that assertion is often indeterminate due to incomplete or unreachable information.
+
+Coercing an unestablished proposition into `False` (or `True`) conflates **known falsity** with **absence of knowledge**. This silent collapse can introduce subtle defects, improper fallbacks, or security vulnerabilities where systems act on assumptions rather than established truth.
+
+XoX provides a principled tri-state logical model where uncertainty is preserved across function boundaries, combined using Strong Kleene logic, and collapsed into Python booleans only when the application explicitly defines a fallback policy.
+
+---
+
+## Semantic Model
+
+XoX represents three distinct, immutable logical states:
+
+- **`xox.TRUE`**: The proposition is definitively established as true.
+- **`xox.FALSE`**: The proposition is definitively refuted as false.
+- **`xox.UNKNOWN`**: The proposition has not been established as true or false.
+
+`Unknown` carries no intrinsic bias toward `True` or `False`.
+
+### What `UNKNOWN` Is Not
+
+To prevent semantic confusion, `xox.UNKNOWN` has strict boundaries:
+- **Not `None`**: It represents an unresolved proposition, not the absence of an object.
+- **Not an exception**: Runtime errors, system failures, and contract violations remain standard Python exceptions.
+- **Not a pending async state**: It is an evaluated outcome, not an incomplete future or promise.
+- **Not a timeout**: A timeout is an execution event, whereas `UNKNOWN` is a state of knowledge.
+- **Not probabilistic confidence**: It indicates that truth has not been established, not a probability score.
+- **Not an action directive**: `UNKNOWN` does not intrinsically mean retry, deny, allow, wait, fail, or default. Any action taken in response to uncertainty is defined strictly by caller policy.
+
+---
+
+## Installation
+
+```bash
+pip install project-xox
+```
+
+> **Note**: The package distribution name on PyPI is `project-xox`, while the Python import name is `xox`.
+
+---
+
+## Basic Usage
+
+```python
+import xox
+
+# Canonical value constants
+t = xox.TRUE
+f = xox.FALSE
+u = xox.UNKNOWN
+
+# State inspection
+if t.is_true():
+    print("Definitely True")
+
+if f.is_false():
+    print("Definitely False")
+
+if u.is_unknown():
+    print("State is indeterminate")
+```
+
+---
+
+## Strict Domain Separation & Truthiness Prohibition
+
+Python `bool` and `xox.XoX` belong to strictly separated domains. Crossing between them requires explicit operations.
+
+### Truthiness is Prohibited
+
+XoX values prohibit direct boolean coercion (`__bool__`). Evaluating an `XoX` instance in an `if`, `while`, `bool()`, `and`, `or`, or `not` context raises a `TypeError`:
+
+```python
+val = xox.UNKNOWN
+
+# Prohibited - raises TypeError:
+# if val:
+#     ...
+# bool(val)
+```
+
+This prevents uncertainty from silently collapsing into boolean control flow.
+
+### Domain Equality Isolation
+
+XoX values never compare equal to native Python booleans:
+
+```python
+assert (xox.TRUE == True) is False
+assert (xox.FALSE == False) is False
+assert (xox.UNKNOWN == False) is False
+```
+
+---
+
+## Ingress: Bool to XoX
+
+To bring a Python boolean into the XoX domain, use `xox.from_bool()`:
+
+```python
+xox_val = xox.from_bool(True)   # returns xox.TRUE
+xox_val = xox.from_bool(False)  # returns xox.FALSE
+```
+
+`xox.from_bool()` accepts only exact Python `bool` instances (`True` or `False`). Non-boolean values (including `1`, `0`, `None`, or truthy objects) raise a `TypeError`.
+
+---
+
+## Strong Kleene Logic Operations
+
+XoX implements standard Strong Kleene ($K_3$) logic with host-level short-circuiting.
+
+### Unary NOT (`~`)
+
+The bitwise inversion operator `~` performs Strong Kleene negation:
+
+```python
+assert ~xox.TRUE == xox.FALSE
+assert ~xox.FALSE == xox.TRUE
+assert ~xox.UNKNOWN == xox.UNKNOWN
+```
+
+### Lazy Conjunction (`lazy_and`) & Disjunction (`lazy_or`)
+
+Python evaluates binary operator operands (`&`, `|`) eagerly. To guarantee real short-circuit evaluation without evaluating unneeded branches, conjunction and disjunction require zero-argument callables:
+
+```python
+# Conjunction: FALSE short-circuits; RHS is never called
+result = xox.FALSE.lazy_and(lambda: expensive_query())  # returns xox.FALSE
+
+# Disjunction: TRUE short-circuits; RHS is never called
+result = xox.TRUE.lazy_or(lambda: expensive_query())    # returns xox.TRUE
+
+# When LHS cannot determine the outcome, RHS is executed exactly once:
+result = xox.UNKNOWN.lazy_and(lambda: xox.TRUE)         # returns xox.UNKNOWN
+result = xox.UNKNOWN.lazy_or(lambda: xox.TRUE)          # returns xox.TRUE
+```
+
+- **Short-circuiting**: If the outcome is determined by the LHS, the RHS callable executes **zero** times.
+- **Evaluation**: When needed, the RHS callable executes **exactly once** and must return an `XoX` instance.
+- **Exceptions**: Exceptions raised inside evaluated RHS callables propagate normally as standard Python exceptions.
+
+---
+
+## Egress: Collapsing Uncertainty to Python Bool
+
+When application code must interface with a native boolean API, collapse the `XoX` value using `collapse_or()` with an explicit fallback callable:
+
+```python
+# TRUE and FALSE resolve directly without invoking fallback
+assert xox.TRUE.collapse_or(lambda: False) is True
+assert xox.FALSE.collapse_or(lambda: True) is False
+
+# UNKNOWN executes the fallback callable exactly once
+decision = xox.UNKNOWN.collapse_or(lambda: False)  # returns False
+```
+
+- **Caller-Owned Policy**: The fallback callable represents an application policy decision (such as fail-closed or optimistic pass), not newly discovered truth.
+- **Lazy Execution**: The fallback callable is evaluated only when the value is `xox.UNKNOWN`.
+- **Type Contract**: The fallback callable must return an exact Python `bool` (`True` or `False`). Returning any other type raises a `TypeError`.
+
+---
+
+## Realistic Example: External Verification Gate
+
+```python
+import xox
+import logging
+
+def verify_remote_entitlement(user_id: str) -> xox.XoX:
+    """Queries an upstream service; returns UNKNOWN if indeterminate."""
+    try:
+        response = call_auth_service(user_id)
+        if response.status == "AUTHORIZED":
+            return xox.TRUE
+        elif response.status == "DENIED":
+            return xox.FALSE
+        else:
+            # Service responded, but entitlement status is indeterminate
+            return xox.UNKNOWN
+    except NetworkTimeoutError:
+        # Runtime transport failure is handled by application logic
+        return xox.UNKNOWN
+
+def handle_user_request(user_id: str):
+    entitlement = verify_remote_entitlement(user_id)
+
+    # 1. Explicit three-way branch
+    if entitlement.is_true():
+        grant_access()
+    elif entitlement.is_false():
+        deny_access("Explicitly denied by auth policy")
+    else:  # entitlement.is_unknown()
+        # The reaction to UNKNOWN is owned by the application:
+        queue_for_manual_review(user_id)
+
+    # 2. Or explicit policy collapse at a boolean boundary (e.g., fail-closed)
+    def fail_closed_policy() -> bool:
+        logging.warning("Entitlement indeterminate for %s; applying fail-closed default.", user_id)
+        return False
+
+    can_proceed = entitlement.collapse_or(fail_closed_policy)
+    if can_proceed:
+        execute_privileged_task()
+```
+
+---
+
+## Project Status: CORE 0.1.0
+
+XoX `0.1.0` delivers the minimal public `CORE` semantic surface:
+- Singleton constants: `xox.TRUE`, `xox.FALSE`, `xox.UNKNOWN`.
+- Canonical ingress: `xox.from_bool()`.
+- State inspection: `.is_true()`, `.is_false()`, `.is_unknown()`, and `==`.
+- Strong Kleene logic: `~` (NOT), `.lazy_and()`, and `.lazy_or()`.
+- Explicit egress: `.collapse_or()`.
+- Strict domain separation and truthiness blocking.
+
+Advanced capabilities (such as auditable policy tokens, evidence provenance tracking, and distributed consensus negotiation) are intentionally outside the scope of `CORE` and are not included in this release.
+
+---
+
+## Supported Platforms & Scope
+
+- **Python Interpreters:** CPython 3.12, 3.13, and 3.14 (version-specific CPython extension wheels).
+- **Supported Platform:** Linux x86_64.
+- **Binary Compatibility Baseline:** `manylinux_2_34_x86_64` (glibc 2.34+).
+- **Source Build MSRV:** Rust 1.83+.
+- **Unclaimed / Unsupported:** macOS, Windows, Linux aarch64, musllinux, PyPy, GraalPy, and free-threaded CPython builds are not currently claimed or supported.
+
+> **Note**: The binary compatibility baseline reflects the currently audited distribution artifact floor, not an intrinsic semantic limitation of XoX logic.
+
+---
+
+## Documentation
+
+- [Normative Public CORE API Specification](docs/04_api/CORE_API.md)
+- [Foundational Guarantees & Philosophy](docs/00_foundations/GUARANTEES.md)
+- [Runtime & Portability Model](docs/03_runtime/PORTABILITY_MODEL.md)
+
+---
+
+## License
+
+XoX is licensed under the [Apache-2.0 License](LICENSE).

project_xox-0.1.0/pyproject.toml

@@ -0,0 +1,31 @@
+[build-system]
+requires = ["maturin>=1.5,<2.0"]
+build-backend = "maturin"
+
+[project]
+name = "project-xox"
+version = "0.1.0"
+description = "Tri-state epistemic uncertainty engine preserving explicit True, False, and Unknown decision semantics"
+readme = "README.md"
+requires-python = ">=3.12"
+license = "Apache-2.0"
+license-files = ["LICENSE"]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: Implementation :: CPython",
+    "Programming Language :: Rust",
+    "License :: OSI Approved :: Apache Software License",
+    "Operating System :: POSIX :: Linux",
+]
+
+[project.urls]
+Homepage = "https://github.com/linuxx88/XoX"
+Documentation = "https://github.com/linuxx88/XoX/blob/main/docs/04_api/CORE_API.md"
+
+[tool.maturin]
+module-name = "xox"
+features = ["pyo3/extension-module"]

project_xox-0.1.0/src/binding.rs

@@ -0,0 +1,161 @@
+//! PyO3 bindings exposing the XoX CORE API to Python.
+
+use pyo3::exceptions::PyTypeError;
+use pyo3::prelude::*;
+use pyo3::types::PyBool;
+
+use crate::core::XoXValue;
+
+/// Python representation of an immutable XoX tri-state logical value.
+#[pyclass(name = "XoX", frozen, from_py_object)]
+#[derive(Clone, Copy, Debug)]
+pub struct PyXoX(pub XoXValue);
+
+#[pymethods]
+impl PyXoX {
+    /// Inspect if the value is definitively True.
+    pub fn is_true(&self) -> bool {
+        self.0 == XoXValue::True
+    }
+
+    /// Inspect if the value is definitively False.
+    pub fn is_false(&self) -> bool {
+        self.0 == XoXValue::False
+    }
+
+    /// Inspect if the value is Unknown.
+    pub fn is_unknown(&self) -> bool {
+        self.0 == XoXValue::Unknown
+    }
+
+    /// Strong Kleene unary NOT (~).
+    pub fn __invert__(&self) -> Self {
+        PyXoX(self.0.not())
+    }
+
+    /// Strong Kleene lazy conjunction (AND).
+    pub fn lazy_and(&self, rhs: &Bound<'_, PyAny>) -> PyResult<Self> {
+        if !rhs.is_callable() {
+            return Err(PyTypeError::new_err(
+                "lazy_and() requires a zero-argument callable returning XoX.",
+            ));
+        }
+
+        if self.0.should_short_circuit_and() {
+            return Ok(PyXoX(XoXValue::False));
+        }
+
+        let res = rhs.call0()?;
+        let rhs_val = match res.extract::<PyRef<PyXoX>>() {
+            Ok(r) => r.0,
+            Err(_) => {
+                return Err(PyTypeError::new_err(
+                    "RHS callable in lazy_and must return an XoX value (xox.TRUE, xox.FALSE, xox.UNKNOWN).",
+                ))
+            }
+        };
+
+        Ok(PyXoX(self.0.and(rhs_val)))
+    }
+
+    /// Strong Kleene lazy disjunction (OR).
+    pub fn lazy_or(&self, rhs: &Bound<'_, PyAny>) -> PyResult<Self> {
+        if !rhs.is_callable() {
+            return Err(PyTypeError::new_err(
+                "lazy_or() requires a zero-argument callable returning XoX.",
+            ));
+        }
+
+        if self.0.should_short_circuit_or() {
+            return Ok(PyXoX(XoXValue::True));
+        }
+
+        let res = rhs.call0()?;
+        let rhs_val = match res.extract::<PyRef<PyXoX>>() {
+            Ok(r) => r.0,
+            Err(_) => {
+                return Err(PyTypeError::new_err(
+                    "RHS callable in lazy_or must return an XoX value (xox.TRUE, xox.FALSE, xox.UNKNOWN).",
+                ))
+            }
+        };
+
+        Ok(PyXoX(self.0.or(rhs_val)))
+    }
+
+    /// Explicit lazy collapse of uncertainty into Python bool.
+    pub fn collapse_or(&self, fallback: &Bound<'_, PyAny>) -> PyResult<bool> {
+        if !fallback.is_callable() {
+            return Err(PyTypeError::new_err(
+                "collapse_or() requires a zero-argument callable returning Python bool.",
+            ));
+        }
+
+        match self.0 {
+            XoXValue::True => Ok(true),
+            XoXValue::False => Ok(false),
+            XoXValue::Unknown => {
+                let res = fallback.call0()?;
+                if !res.is_exact_instance_of::<PyBool>() {
+                    return Err(PyTypeError::new_err(
+                        "Collapse fallback callable must return an exact Python bool (True or False).",
+                    ));
+                }
+                res.extract::<bool>()
+            }
+        }
+    }
+
+    /// Explicitly block Python truthiness evaluation for all states.
+    pub fn __bool__(&self) -> PyResult<bool> {
+        Err(PyTypeError::new_err(
+            "Cannot use XoX value directly in boolean context. Use '.is_true()', pattern match, or '.collapse_or(lambda: fallback)' to resolve uncertainty explicitly.",
+        ))
+    }
+
+    /// State-identity equality. Comparing with Python bool evaluates to False.
+    pub fn __eq__(&self, other: &Bound<'_, PyAny>) -> PyResult<bool> {
+        if let Ok(other_xox) = other.extract::<PyRef<PyXoX>>() {
+            Ok(self.0 == other_xox.0)
+        } else {
+            Ok(false)
+        }
+    }
+
+    pub fn __ne__(&self, other: &Bound<'_, PyAny>) -> PyResult<bool> {
+        Ok(!self.__eq__(other)?)
+    }
+
+    /// Consistent hashing for dict/set collection isolation.
+    pub fn __hash__(&self) -> isize {
+        match self.0 {
+            XoXValue::True => 1_000_003,
+            XoXValue::False => 1_000_004,
+            XoXValue::Unknown => 1_000_005,
+        }
+    }
+
+    pub fn __repr__(&self) -> &'static str {
+        match self.0 {
+            XoXValue::True => "xox.TRUE",
+            XoXValue::False => "xox.FALSE",
+            XoXValue::Unknown => "xox.UNKNOWN",
+        }
+    }
+}
+
+/// Canonical single Bool-to-XoX ingress function.
+#[pyfunction]
+pub fn from_bool(value: &Bound<'_, PyAny>) -> PyResult<PyXoX> {
+    if !value.is_exact_instance_of::<PyBool>() {
+        return Err(PyTypeError::new_err(
+            "xox.from_bool() requires an exact Python bool (True or False).",
+        ));
+    }
+    let b: bool = value.extract()?;
+    if b {
+        Ok(PyXoX(XoXValue::True))
+    } else {
+        Ok(PyXoX(XoXValue::False))
+    }
+}

project_xox-0.1.0/src/core.rs

@@ -0,0 +1,59 @@
+//! Pure Rust semantic core for XoX tri-state epistemic logic.
+//!
+//! This module contains zero dependencies on Python, PyO3, or runtime execution environments.
+
+/// Canonical tri-state logical value.
+#[derive(Copy, Clone, Eq, PartialEq, Hash, Debug)]
+pub enum XoXValue {
+    True,
+    False,
+    Unknown,
+}
+
+impl XoXValue {
+    /// Strong Kleene unary NOT (~).
+    #[inline]
+    pub const fn not(self) -> Self {
+        match self {
+            Self::True => Self::False,
+            Self::False => Self::True,
+            Self::Unknown => Self::Unknown,
+        }
+    }
+
+    /// Strong Kleene binary conjunction (AND) for already-evaluated operands.
+    #[inline]
+    pub const fn and(self, other: Self) -> Self {
+        match (self, other) {
+            (Self::False, _) | (_, Self::False) => Self::False,
+            (Self::True, Self::True) => Self::True,
+            (Self::True, Self::Unknown)
+            | (Self::Unknown, Self::True)
+            | (Self::Unknown, Self::Unknown) => Self::Unknown,
+        }
+    }
+
+    /// Strong Kleene binary disjunction (OR) for already-evaluated operands.
+    #[inline]
+    pub const fn or(self, other: Self) -> Self {
+        match (self, other) {
+            (Self::True, _) | (_, Self::True) => Self::True,
+            (Self::False, Self::False) => Self::False,
+            (Self::False, Self::Unknown)
+            | (Self::Unknown, Self::False)
+            | (Self::Unknown, Self::Unknown) => Self::Unknown,
+        }
+    }
+
+    /// Returns true if an AND expression with `self` as LHS short-circuits (i.e. self is False).
+    #[inline]
+    pub const fn should_short_circuit_and(self) -> bool {
+        matches!(self, Self::False)
+    }
+
+    /// Returns true if an OR expression with `self` as LHS short-circuits (i.e. self is True).
+    #[inline]
+    pub const fn should_short_circuit_or(self) -> bool {
+        matches!(self, Self::True)
+    }
+}

project_xox-0.1.0/src/lib.rs

@@ -0,0 +1,23 @@
+//! XoX epistemic tri-state logic library and Python extension module.
+
+pub mod binding;
+pub mod core;
+
+use pyo3::prelude::*;
+
+use crate::binding::{from_bool, PyXoX};
+use crate::core::XoXValue;
+
+/// XoX core Python module.
+#[pymodule]
+fn xox(m: &Bound<'_, PyModule>) -> PyResult<()> {
+    m.add_class::<PyXoX>()?;
+    m.add_function(wrap_pyfunction!(from_bool, m)?)?;
+
+    // Canonical singleton constants
+    m.add("TRUE", PyXoX(XoXValue::True))?;
+    m.add("FALSE", PyXoX(XoXValue::False))?;
+    m.add("UNKNOWN", PyXoX(XoXValue::Unknown))?;
+
+    Ok(())
+}