proofgate-runtime 0.1.0__tar.gz → 0.2.0__tar.gz

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proofgate-runtime
-Version: 0.1.0
+Version: 0.2.0
 Summary: Evidence-first claim verification, signed receipts, lite injection guard and MCP server (stdlib only).
 Author-email: gamAI <info@gamai.io>
 License: Apache-2.0
@@ -19,7 +19,7 @@ Dynamic: license-file
 # ProofGate Runtime
 
 **Evidence-first claim verification, signed receipts, and a lite injection guard for AI agents.**  
-[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.1.0 · Python 3.10+ · stdlib only · Apache-2.0
+[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.2.0 · Python 3.10+ · stdlib only · Apache-2.0
 
 Agent says "done". ProofGate asks: **where is the evidence?**
 
@@ -72,7 +72,7 @@ echo '{"posted":true,"total":"2808.00"}' > result.json
 printf 'shared-secret' > key.bin
 
 proofgate make-receipt intent.json result.json --key-file key.bin > receipt.json
-proofgate verify-receipt receipt.json --key-file key.bin --require-signature
+proofgate verify-receipt receipt.json --key-file key.bin
 ```
 
 Tamper with `result.json` or the receipt and verification fails closed.
@@ -107,8 +107,8 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - **No anchor/lease service.** That is [`sigil`](https://github.com/gamai-io/sigil) (grants, receipts, anchor, MCP middleware). ProofGate v0.1 is the local verification core.
 - **No embedding-based guard.** This is the lexical layer; the full multilingual cascade is [`gamai-guard`](https://github.com/gamai-io/gamai-guard).
 - **No independent security audit.** Treat v0.1 as a reference implementation, not a certified product.
-- **MCP receipts are unsigned.** Signing over MCP would expose the key to the client; use the CLI with a protected key file, or call the library.
-- **PyPI 0.1.0 is available.** Install with `pip install proofgate-runtime`.
+- **MCP receipts are signed only when `PROOFGATE_HMAC_KEY` is set** and are rejected as unsigned otherwise. Set it in the server environment; never put the key in a client or in git.
+- **PyPI 0.2.0 is available.** Install with `pip install proofgate-runtime`.
 
 ## Design rules
 
@@ -126,6 +126,10 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - [`evidence-gate-runtime`](https://github.com/gamai-io/evidence-gate-runtime) — fuller runtime with replay.
 - [`floor-copilot`](https://github.com/gamai-io/floor-copilot) — production case study: invoice intake with 17% VAT gate.
 
+## v0.2 breaking change
+
+`verify_receipt()` now requires a valid signature by default. For legacy unsigned receipts, call `verify_receipt(..., require_signature=False)` or the CLI with `--allow-unsigned`. Create signed receipts with `proofgate make-receipt ... --key-file`; the MCP server signs when `PROOFGATE_HMAC_KEY` is set.
+
 ## Honest status
 
 - Claim verification: tested (BHS/EU/US money formats, predicates, tamper detection).

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/README.md

@@ -1,7 +1,7 @@
 # ProofGate Runtime
 
 **Evidence-first claim verification, signed receipts, and a lite injection guard for AI agents.**  
-[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.1.0 · Python 3.10+ · stdlib only · Apache-2.0
+[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.2.0 · Python 3.10+ · stdlib only · Apache-2.0
 
 Agent says "done". ProofGate asks: **where is the evidence?**
 
@@ -54,7 +54,7 @@ echo '{"posted":true,"total":"2808.00"}' > result.json
 printf 'shared-secret' > key.bin
 
 proofgate make-receipt intent.json result.json --key-file key.bin > receipt.json
-proofgate verify-receipt receipt.json --key-file key.bin --require-signature
+proofgate verify-receipt receipt.json --key-file key.bin
 ```
 
 Tamper with `result.json` or the receipt and verification fails closed.
@@ -89,8 +89,8 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - **No anchor/lease service.** That is [`sigil`](https://github.com/gamai-io/sigil) (grants, receipts, anchor, MCP middleware). ProofGate v0.1 is the local verification core.
 - **No embedding-based guard.** This is the lexical layer; the full multilingual cascade is [`gamai-guard`](https://github.com/gamai-io/gamai-guard).
 - **No independent security audit.** Treat v0.1 as a reference implementation, not a certified product.
-- **MCP receipts are unsigned.** Signing over MCP would expose the key to the client; use the CLI with a protected key file, or call the library.
-- **PyPI 0.1.0 is available.** Install with `pip install proofgate-runtime`.
+- **MCP receipts are signed only when `PROOFGATE_HMAC_KEY` is set** and are rejected as unsigned otherwise. Set it in the server environment; never put the key in a client or in git.
+- **PyPI 0.2.0 is available.** Install with `pip install proofgate-runtime`.
 
 ## Design rules
 
@@ -108,6 +108,10 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - [`evidence-gate-runtime`](https://github.com/gamai-io/evidence-gate-runtime) — fuller runtime with replay.
 - [`floor-copilot`](https://github.com/gamai-io/floor-copilot) — production case study: invoice intake with 17% VAT gate.
 
+## v0.2 breaking change
+
+`verify_receipt()` now requires a valid signature by default. For legacy unsigned receipts, call `verify_receipt(..., require_signature=False)` or the CLI with `--allow-unsigned`. Create signed receipts with `proofgate make-receipt ... --key-file`; the MCP server signs when `PROOFGATE_HMAC_KEY` is set.
+
 ## Honest status
 
 - Claim verification: tested (BHS/EU/US money formats, predicates, tamper detection).

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "proofgate-runtime"
-version = "0.1.0"
+version = "0.2.0"
 description = "Evidence-first claim verification, signed receipts, lite injection guard and MCP server (stdlib only)."
 readme = "README.md"
 requires-python = ">=3.10"

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/src/proofgate_runtime/__init__.py

@@ -3,7 +3,7 @@ from .claims import evaluate, check, verify, demo, EvidenceError
 from .guard import check_injection
 from .receipts import make_receipt, verify_receipt, verify_chain, canonical_json, sha256_hex
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
 
 __all__ = [
     "evaluate", "check", "verify", "demo", "EvidenceError",

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/src/proofgate_runtime/cli.py

@@ -43,12 +43,13 @@ def main(argv: list[str] | None = None) -> int:
     m = sub.add_parser("make-receipt", help="create a receipt from intent/result JSON files")
     m.add_argument("intent")
     m.add_argument("result")
-    m.add_argument("--key-file", default=None, help="optional HMAC key file")
+    m.add_argument("--key-file", default=None, help="HMAC key file (required unless --allow-unsigned)")
+    m.add_argument("--allow-unsigned", action="store_true", help="create an unsigned receipt (not recommended)")
 
     v = sub.add_parser("verify-receipt", help="verify a receipt JSON file")
     v.add_argument("receipt")
     v.add_argument("--key-file", default=None)
-    v.add_argument("--require-signature", action="store_true")
+    v.add_argument("--allow-unsigned", action="store_true", help="accept an unsigned receipt")
 
     g = sub.add_parser("check-injection", help="lexical prompt-injection pre-filter")
     g.add_argument("text")
@@ -63,12 +64,17 @@ def main(argv: list[str] | None = None) -> int:
         _print(check(claims or [], args.reported_hash))
         return 0
     if args.cmd == "make-receipt":
-        _print(make_receipt(_load(args.intent), _load(args.result), key=_key(args.key_file)))
+        key = _key(args.key_file)
+        if key is None and not args.allow_unsigned:
+            print("refusing unsigned receipt: pass --key-file or --allow-unsigned", file=sys.stderr)
+            return 2
+        _print(make_receipt(_load(args.intent), _load(args.result), key=key))
         return 0
     if args.cmd == "verify-receipt":
-        _print(verify_receipt(_load(args.receipt), key=_key(args.key_file),
-                              require_signature=args.require_signature))
-        return 0
+        res = verify_receipt(_load(args.receipt), key=_key(args.key_file),
+                             require_signature=not args.allow_unsigned)
+        _print(res)
+        return 0 if res["valid"] else 1
     if args.cmd == "check-injection":
         _print(check_injection(args.text, args.tool))
         return 0

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/src/proofgate_runtime/mcp_server.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import os
 import sys
 from typing import Any
 
@@ -74,18 +75,24 @@ def call_tool(name: str, args: dict) -> dict:
     if name == "make_receipt":
         if "intent" not in args or "result" not in args:
             return _text({"error": "intent and result are required"}, True)
-        return _text(make_receipt(args["intent"], args["result"], meta=args.get("meta")))
+        key = os.environ.get("PROOFGATE_HMAC_KEY") or None
+        rec = make_receipt(args["intent"], args["result"], key=key, meta=args.get("meta"))
+        if not key:
+            rec["_warning"] = "unsigned: set PROOFGATE_HMAC_KEY to sign MCP receipts"
+        return _text(rec)
     if name == "verify_receipt":
         if not isinstance(args.get("receipt"), dict):
             return _text({"error": "receipt object is required"}, True)
-        return _text(verify_receipt(args["receipt"], require_signature=bool(args.get("require_signature"))))
+        return _text(verify_receipt(args["receipt"],
+                                        require_signature=bool(args.get("require_signature", True))))
     if name == "check_injection":
         return _text(check_injection(args.get("text", ""), args.get("tool")))
     if name == "runtime_info":
         return _text({"name": "proofgate-runtime", "version": __version__,
                       "capabilities": ["verify_claims", "make_receipt", "verify_receipt",
                                        "check_injection_lite"],
-                      "signed_receipts": "HMAC-SHA256 via CLI key file"})
+                      "signed_receipts": "HMAC-SHA256; MCP uses PROOFGATE_HMAC_KEY; unsigned rejected by default",
+                      "require_signature_default": True})
     return _text({"error": "unknown tool: %s" % name}, True)
 
 

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/src/proofgate_runtime/receipts.py

@@ -61,7 +61,7 @@ def make_receipt(intent: Any, result: Any, key: str | bytes | None = None,
 
 
 def verify_receipt(receipt: dict, key: str | bytes | None = None,
-                   require_signature: bool = False) -> dict:
+                   require_signature: bool = True) -> dict:
     """Verify hashes and, when present, the signature. Fail closed."""
     errors: list[str] = []
     if not isinstance(receipt, dict):
@@ -100,14 +100,15 @@ def verify_receipt(receipt: dict, key: str | bytes | None = None,
             "receipt_hash": receipt.get("receipt_hash")}
 
 
-def verify_chain(receipts: list[dict], key: str | bytes | None = None) -> dict:
+def verify_chain(receipts: list[dict], key: str | bytes | None = None,
+                 require_signature: bool = True) -> dict:
     """Verify a simple prev_hash chain (first prev_hash = GENESIS)."""
     errors: list[str] = []
     prev = "GENESIS"
     for i, rec in enumerate(receipts or []):
         if rec.get("prev_hash") != prev:
             errors.append("E_CHAIN_AT_%d" % i)
-        res = verify_receipt(rec, key=key)
+        res = verify_receipt(rec, key=key, require_signature=require_signature)
         if not res["valid"]:
             errors.extend("%s@%d" % (e, i) for e in res["errors"])
         prev = rec.get("receipt_hash", "")

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/src/proofgate_runtime.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proofgate-runtime
-Version: 0.1.0
+Version: 0.2.0
 Summary: Evidence-first claim verification, signed receipts, lite injection guard and MCP server (stdlib only).
 Author-email: gamAI <info@gamai.io>
 License: Apache-2.0
@@ -19,7 +19,7 @@ Dynamic: license-file
 # ProofGate Runtime
 
 **Evidence-first claim verification, signed receipts, and a lite injection guard for AI agents.**  
-[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.1.0 · Python 3.10+ · stdlib only · Apache-2.0
+[![PyPI](https://img.shields.io/pypi/v/proofgate-runtime.svg)](https://pypi.org/project/proofgate-runtime/) v0.2.0 · Python 3.10+ · stdlib only · Apache-2.0
 
 Agent says "done". ProofGate asks: **where is the evidence?**
 
@@ -72,7 +72,7 @@ echo '{"posted":true,"total":"2808.00"}' > result.json
 printf 'shared-secret' > key.bin
 
 proofgate make-receipt intent.json result.json --key-file key.bin > receipt.json
-proofgate verify-receipt receipt.json --key-file key.bin --require-signature
+proofgate verify-receipt receipt.json --key-file key.bin
 ```
 
 Tamper with `result.json` or the receipt and verification fails closed.
@@ -107,8 +107,8 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - **No anchor/lease service.** That is [`sigil`](https://github.com/gamai-io/sigil) (grants, receipts, anchor, MCP middleware). ProofGate v0.1 is the local verification core.
 - **No embedding-based guard.** This is the lexical layer; the full multilingual cascade is [`gamai-guard`](https://github.com/gamai-io/gamai-guard).
 - **No independent security audit.** Treat v0.1 as a reference implementation, not a certified product.
-- **MCP receipts are unsigned.** Signing over MCP would expose the key to the client; use the CLI with a protected key file, or call the library.
-- **PyPI 0.1.0 is available.** Install with `pip install proofgate-runtime`.
+- **MCP receipts are signed only when `PROOFGATE_HMAC_KEY` is set** and are rejected as unsigned otherwise. Set it in the server environment; never put the key in a client or in git.
+- **PyPI 0.2.0 is available.** Install with `pip install proofgate-runtime`.
 
 ## Design rules
 
@@ -126,6 +126,10 @@ Tools: `verify_claims`, `make_receipt`, `verify_receipt`, `check_injection`, `ru
 - [`evidence-gate-runtime`](https://github.com/gamai-io/evidence-gate-runtime) — fuller runtime with replay.
 - [`floor-copilot`](https://github.com/gamai-io/floor-copilot) — production case study: invoice intake with 17% VAT gate.
 
+## v0.2 breaking change
+
+`verify_receipt()` now requires a valid signature by default. For legacy unsigned receipts, call `verify_receipt(..., require_signature=False)` or the CLI with `--allow-unsigned`. Create signed receipts with `proofgate make-receipt ... --key-file`; the MCP server signs when `PROOFGATE_HMAC_KEY` is set.
+
 ## Honest status
 
 - Claim verification: tested (BHS/EU/US money formats, predicates, tamper detection).

{proofgate_runtime-0.1.0 → proofgate_runtime-0.2.0}/tests/test_receipts.py

@@ -6,9 +6,10 @@ from proofgate_runtime.receipts import make_receipt, verify_receipt, canonical_j
 class ReceiptTests(unittest.TestCase):
     def test_unsigned_receipt(self):
         r = make_receipt({"op": "x"}, {"ok": True})
-        out = verify_receipt(r)
+        out = verify_receipt(r, require_signature=False)
         self.assertTrue(out["valid"], out)
         self.assertFalse(out["signed"])
+        self.assertFalse(verify_receipt(r)["valid"])
 
     def test_signed_receipt(self):
         r = make_receipt({"op": "x"}, {"ok": True}, key="secret")
@@ -29,9 +30,9 @@ class ReceiptTests(unittest.TestCase):
         self.assertFalse(out["valid"])
         self.assertIn("E_RESULT_DIGEST", out["errors"])
 
-    def test_require_signature(self):
+    def test_require_signature_default(self):
         r = make_receipt({"op": "x"}, {"ok": True})
-        out = verify_receipt(r, require_signature=True)
+        out = verify_receipt(r)
         self.assertFalse(out["valid"])
         self.assertIn("E_UNSIGNED", out["errors"])