proofline-evidence 2.0.0__tar.gz

proofline_evidence-2.0.0/.gitignore

@@ -0,0 +1,173 @@
+# Canonical ignore rules for repositories owned by thangldw.
+# Keep this file identical across repositories.
+
+# Operating systems and file managers
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+.DocumentRevisions-V100
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.fseventsd
+.localized
+__MACOSX/
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+[Dd]esktop.ini
+$RECYCLE.BIN/
+*.lnk
+
+# Editors and local assistants
+.idea/
+.vscode/
+*.code-workspace
+*.sublime-project
+*.sublime-workspace
+*.swp
+*.swo
+*~
+.history/
+.claude/
+.codex/
+.worktrees/
+
+# Secrets and local configuration
+.env
+.env.*
+!.env.example
+!.env.*.example
+*.local
+*.secret
+*.secrets
+*.key
+*.pem
+*.p12
+*.pfx
+credentials.json
+service-account*.json
+
+# Logs, temporary files, backups and local databases
+*.log
+*.tmp
+*.temp
+*.bak
+*.backup
+*.orig
+*.rej
+*.stackdump
+tmp/
+temp/
+logs/
+backups/
+*.db
+*.db-journal
+*.db-shm
+*.db-wal
+*.sqlite
+*.sqlite3
+
+# JavaScript and TypeScript
+node_modules/
+.npm/
+.npm-cache/
+.yarn/
+.pnpm-store/
+.vite/
+.next/
+.nuxt/
+.svelte-kit/
+dist/
+build/
+generated/
+coverage/
+*.tsbuildinfo
+playwright-report/
+test-results/
+blob-report/
+src/generated/
+supabase/.temp/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+.venv/
+.venv*/
+venv/
+env/
+ENV/
+.python-version
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.pyre/
+.pytype/
+.hypothesis/
+.tox/
+.nox/
+.coverage
+.coverage.*
+htmlcov/
+*.egg-info/
+.eggs/
+wheels/
+pip-wheel-metadata/
+reports/
+.ipynb_checkpoints/
+**/.ipynb_checkpoints/
+
+# Rust, Go, Java and .NET
+**/target/
+**/gen/schemas/
+vendor/
+bin/
+obj/
+*.class
+*.jar
+*.war
+*.nupkg
+
+# Swift and Apple build artifacts
+**/.build/
+DerivedData/
+*.xcuserstate
+*.xcworkspace/xcuserdata/
+*.xcodeproj/xcuserdata/
+*.app/
+*.dmg
+**/release/
+
+# Windows installers and packaged artifacts
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+*.exe
+*.zip
+release-artifacts/
+artifacts/
+
+# QA and generated visual output
+qa/
+qa-*.png
+qa-*.jpg
+qa-*.jpeg
+audit-*.png
+prototype-*.png
+gameplay-*.png
+design-qa.md
+
+# Project-specific generated resources
+public/ocr/paddleocr/
+src-tauri/generated-resources/ocr/*
+!src-tauri/generated-resources/ocr/.gitkeep
+analysis/outputs/
+analysis/*-artifact.json
+analysis/*.html
+NamiQuant-Claude-Design.html

proofline_evidence-2.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 thang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

proofline_evidence-2.0.0/PKG-INFO

@@ -0,0 +1,103 @@
+Metadata-Version: 2.5
+Name: proofline-evidence
+Version: 2.0.0
+Summary: Evidence-first engineering decision memory
+Project-URL: Homepage, https://github.com/thangldw/proofline
+Project-URL: Repository, https://github.com/thangldw/proofline.git
+Project-URL: Issues, https://github.com/thangldw/proofline/issues
+Project-URL: Changelog, https://github.com/thangldw/proofline/blob/main/CHANGELOG.md
+Author: Thang Luu
+License-Expression: MIT
+License-File: LICENSE
+Keywords: engineering,knowledge,local-first,provenance,retrieval
+Requires-Python: >=3.11
+Requires-Dist: cryptography<51,>=50
+Requires-Dist: fastapi<1,>=0.115
+Requires-Dist: httpx<1,>=0.27
+Requires-Dist: keyring<26,>=25
+Requires-Dist: pillow<13,>=12
+Requires-Dist: pydantic<3,>=2.9
+Requires-Dist: python-pptx<2,>=1.0
+Requires-Dist: sqlalchemy<3,>=2.0
+Requires-Dist: uvicorn[standard]<1,>=0.32
+Provides-Extra: dev
+Requires-Dist: build<2,>=1.2; extra == 'dev'
+Requires-Dist: hypothesis<7,>=6; extra == 'dev'
+Requires-Dist: jsonschema<5,>=4.23; extra == 'dev'
+Requires-Dist: pip-audit<3,>=2.10.1; extra == 'dev'
+Requires-Dist: pip<27,>=26.2; extra == 'dev'
+Requires-Dist: pyinstaller<7,>=6.21; extra == 'dev'
+Requires-Dist: pytest<10,>=9.1.1; extra == 'dev'
+Requires-Dist: ruff<1,>=0.8; extra == 'dev'
+Requires-Dist: twine<8,>=7; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# Proofline
+
+[English](#english) · [Tiếng Việt](#tiếng-việt) · [日本語](#日本語)
+
+Proofline shows which immutable evidence justified an engineering decision, traces explicit downstream impact when that evidence changes, and signs portable evidence attestations.
+
+```mermaid
+%%{init: {"theme":"base","themeVariables":{"background":"#FFFFFF","fontFamily":"Arial, sans-serif","lineColor":"#667085","primaryTextColor":"#172B4D"}}}%%
+flowchart LR
+    S["Source version<br/>Nguồn / ソース"]:::yellow
+    P["Exact span<br/>Dòng trích / 引用範囲"]:::blue
+    D["Decision<br/>Quyết định / 判断"]:::purple
+    C["Deterministic check<br/>Kiểm tra / 検証"]:::green
+    R["Review warning<br/>Cảnh báo / 警告"]:::pink
+    S --> P --> D --> C
+    C -->|changed| R
+    classDef yellow fill:#FFF4A3,stroke:#C9A227,stroke-width:2px,color:#172B4D
+    classDef blue fill:#D9EAFD,stroke:#4C78A8,stroke-width:2px,color:#172B4D
+    classDef purple fill:#E9DDF7,stroke:#8064A2,stroke-width:2px,color:#172B4D
+    classDef green fill:#DDF5E3,stroke:#4F9D69,stroke-width:2px,color:#172B4D
+    classDef pink fill:#FFE1E6,stroke:#C96A7B,stroke-width:2px,color:#172B4D
+```
+
+## English
+
+Proofline is a local-first Engineering Decision Memory for evidence-backed ADRs. It preserves source identity, source version and exact cited spans, exports self-contained Decision Evidence Packages, and performs deterministic stale-decision checks without requiring an AI provider.
+
+Decision status and evidence health are separate: an approved ADR remains historical fact while a stale citation is shown as **Accepted · review required**. Proofline never silently rewrites an accepted decision.
+
+Explicit `based_on` and `implements` relations produce cycle-safe transitive impact paths. Ed25519 attestations bind a verified package and optional review receipt to a trusted public key; signing and verification remain local and AI-provider independent.
+
+Requirements: Python 3.11+, Node.js 20+ and npm.
+
+```bash
+python -m pip install proofline-evidence
+proofline demo stale-decision
+```
+
+For repository development:
+
+```bash
+make setup
+.venv/bin/proofline demo stale-decision
+.venv/bin/proofline verify-package proofline-demo-stale-decision/evidence.zip
+.venv/bin/proofline verify-review-receipt proofline-demo-stale-decision/decision-review.json
+.venv/bin/proofline check-impacts --format sarif
+make test
+make check
+```
+
+The current boundary is a single-user local workflow with recoverable data. Hosted sync, shared workspaces, organization identity, trusted timestamps, key revocation and permission-aware connector fleets are not implemented.
+
+Current technical references: [architecture](docs/architecture.md), [evidence package formats](docs/evidence-packages.md), [operations](docs/OPERATIONS.md), [security](SECURITY.md) and [v2.0.0 release notes](docs/releases/v2.0.0.md).
+
+The repository is also packaged as a local plugin for ChatGPT, Codex, Claude Code and Cowork. Proofline is listed in the public [OpenAI Plugins Directory](https://chatgpt.com/plugins/plugins_6a6efdf2ccbc81919ebb4cb01805ebaa); the exact submitted/public version is tracked in the [directory submission package](docs/submission/DIRECTORY_SUBMISSION.md). It does not claim hosted sync or a remote MCP connector. See the [privacy policy](PRIVACY.md), [terms](TERMS.md), and [support guidance](SUPPORT.md).
+
+## Tiếng Việt
+
+Proofline là bộ nhớ quyết định kỹ thuật local-first dành cho ADR có bằng chứng. Hệ thống giữ định danh nguồn, phiên bản nguồn và đúng đoạn trích; phát hiện transitive impact qua quan hệ explicit; xuất package độc lập và ký attestation Ed25519 mà không phụ thuộc nhà cung cấp AI.
+
+Yêu cầu: Python 3.11+, Node.js 20+ và npm. Dùng các lệnh ở phần English để cài đặt, chạy demo và kiểm thử. Phạm vi hiện tại là quy trình local cho một người dùng; chưa có đồng bộ hosted, workspace dùng chung, định danh tổ chức, trusted timestamp hoặc hệ connector phân quyền.
+
+## 日本語
+
+Proofline は、根拠付き ADR のためのローカルファーストな Engineering Decision Memory です。正確な引用範囲を保持し、明示的な関係による推移的影響を追跡し、AI プロバイダーなしで Ed25519 attestation を署名・検証します。
+
+必要環境は Python 3.11 以上、Node.js 20 以上、npm です。現在は単一ユーザーのローカル利用が対象で、ホスト同期、共有ワークスペース、組織 identity、信頼時刻、権限対応コネクター群は未実装です。
+
+Released under the [MIT License](LICENSE).

proofline_evidence-2.0.0/README.md

@@ -0,0 +1,69 @@
+# Proofline
+
+[English](#english) · [Tiếng Việt](#tiếng-việt) · [日本語](#日本語)
+
+Proofline shows which immutable evidence justified an engineering decision, traces explicit downstream impact when that evidence changes, and signs portable evidence attestations.
+
+```mermaid
+%%{init: {"theme":"base","themeVariables":{"background":"#FFFFFF","fontFamily":"Arial, sans-serif","lineColor":"#667085","primaryTextColor":"#172B4D"}}}%%
+flowchart LR
+    S["Source version<br/>Nguồn / ソース"]:::yellow
+    P["Exact span<br/>Dòng trích / 引用範囲"]:::blue
+    D["Decision<br/>Quyết định / 判断"]:::purple
+    C["Deterministic check<br/>Kiểm tra / 検証"]:::green
+    R["Review warning<br/>Cảnh báo / 警告"]:::pink
+    S --> P --> D --> C
+    C -->|changed| R
+    classDef yellow fill:#FFF4A3,stroke:#C9A227,stroke-width:2px,color:#172B4D
+    classDef blue fill:#D9EAFD,stroke:#4C78A8,stroke-width:2px,color:#172B4D
+    classDef purple fill:#E9DDF7,stroke:#8064A2,stroke-width:2px,color:#172B4D
+    classDef green fill:#DDF5E3,stroke:#4F9D69,stroke-width:2px,color:#172B4D
+    classDef pink fill:#FFE1E6,stroke:#C96A7B,stroke-width:2px,color:#172B4D
+```
+
+## English
+
+Proofline is a local-first Engineering Decision Memory for evidence-backed ADRs. It preserves source identity, source version and exact cited spans, exports self-contained Decision Evidence Packages, and performs deterministic stale-decision checks without requiring an AI provider.
+
+Decision status and evidence health are separate: an approved ADR remains historical fact while a stale citation is shown as **Accepted · review required**. Proofline never silently rewrites an accepted decision.
+
+Explicit `based_on` and `implements` relations produce cycle-safe transitive impact paths. Ed25519 attestations bind a verified package and optional review receipt to a trusted public key; signing and verification remain local and AI-provider independent.
+
+Requirements: Python 3.11+, Node.js 20+ and npm.
+
+```bash
+python -m pip install proofline-evidence
+proofline demo stale-decision
+```
+
+For repository development:
+
+```bash
+make setup
+.venv/bin/proofline demo stale-decision
+.venv/bin/proofline verify-package proofline-demo-stale-decision/evidence.zip
+.venv/bin/proofline verify-review-receipt proofline-demo-stale-decision/decision-review.json
+.venv/bin/proofline check-impacts --format sarif
+make test
+make check
+```
+
+The current boundary is a single-user local workflow with recoverable data. Hosted sync, shared workspaces, organization identity, trusted timestamps, key revocation and permission-aware connector fleets are not implemented.
+
+Current technical references: [architecture](docs/architecture.md), [evidence package formats](docs/evidence-packages.md), [operations](docs/OPERATIONS.md), [security](SECURITY.md) and [v2.0.0 release notes](docs/releases/v2.0.0.md).
+
+The repository is also packaged as a local plugin for ChatGPT, Codex, Claude Code and Cowork. Proofline is listed in the public [OpenAI Plugins Directory](https://chatgpt.com/plugins/plugins_6a6efdf2ccbc81919ebb4cb01805ebaa); the exact submitted/public version is tracked in the [directory submission package](docs/submission/DIRECTORY_SUBMISSION.md). It does not claim hosted sync or a remote MCP connector. See the [privacy policy](PRIVACY.md), [terms](TERMS.md), and [support guidance](SUPPORT.md).
+
+## Tiếng Việt
+
+Proofline là bộ nhớ quyết định kỹ thuật local-first dành cho ADR có bằng chứng. Hệ thống giữ định danh nguồn, phiên bản nguồn và đúng đoạn trích; phát hiện transitive impact qua quan hệ explicit; xuất package độc lập và ký attestation Ed25519 mà không phụ thuộc nhà cung cấp AI.
+
+Yêu cầu: Python 3.11+, Node.js 20+ và npm. Dùng các lệnh ở phần English để cài đặt, chạy demo và kiểm thử. Phạm vi hiện tại là quy trình local cho một người dùng; chưa có đồng bộ hosted, workspace dùng chung, định danh tổ chức, trusted timestamp hoặc hệ connector phân quyền.
+
+## 日本語
+
+Proofline は、根拠付き ADR のためのローカルファーストな Engineering Decision Memory です。正確な引用範囲を保持し、明示的な関係による推移的影響を追跡し、AI プロバイダーなしで Ed25519 attestation を署名・検証します。
+
+必要環境は Python 3.11 以上、Node.js 20 以上、npm です。現在は単一ユーザーのローカル利用が対象で、ホスト同期、共有ワークスペース、組織 identity、信頼時刻、権限対応コネクター群は未実装です。
+
+Released under the [MIT License](LICENSE).

proofline_evidence-2.0.0/apps/api/proofline/__init__.py

@@ -0,0 +1,3 @@
+"""Proofline API package."""
+
+__version__ = "2.0.0"

proofline_evidence-2.0.0/apps/api/proofline/anchors.py

@@ -0,0 +1,217 @@
+from __future__ import annotations
+
+import hashlib
+import re
+import unicodedata
+from dataclasses import dataclass
+from difflib import SequenceMatcher
+from typing import Literal
+
+ANCHOR_VERSION = "markdown-context-v1"
+MIN_CHANGED_SIMILARITY = 0.60
+EMPTY_SHA256 = hashlib.sha256(b"").hexdigest()
+
+AnchorState = Literal["current", "unchanged", "moved", "ambiguous", "changed", "deleted"]
+
+_HEADING = re.compile(r"^\s{0,3}(#{1,6})[ \t]+(.+?)\s*#*\s*$")
+
+
+@dataclass(frozen=True)
+class EvidenceAnchor:
+    version: str
+    section_path: tuple[str, ...]
+    prefix_sha256: str
+    suffix_sha256: str
+
+
+@dataclass(frozen=True)
+class AnchorCandidate:
+    start_offset: int
+    end_offset: int
+    start_line: int
+    end_line: int
+    section_path: tuple[str, ...]
+    similarity: float
+
+
+@dataclass(frozen=True)
+class AnchorResolution:
+    state: AnchorState
+    candidates: tuple[AnchorCandidate, ...]
+
+
+@dataclass(frozen=True)
+class _Line:
+    text: str
+    start: int
+    end: int
+
+
+def _lines(content: str) -> list[_Line]:
+    records: list[_Line] = []
+    cursor = 0
+    for raw in content.splitlines(keepends=True):
+        text = raw.rstrip("\r\n")
+        records.append(_Line(text=text, start=cursor, end=cursor + len(text)))
+        cursor += len(raw)
+    if not records or cursor < len(content):
+        records.append(_Line(text=content[cursor:], start=cursor, end=len(content)))
+    return records
+
+
+def _normalize(value: str) -> str:
+    return " ".join(unicodedata.normalize("NFC", value).strip().split())
+
+
+def _hash_lines(values: list[str]) -> str:
+    return hashlib.sha256("\n".join(values).encode("utf-8")).hexdigest()
+
+
+def _section_paths(lines: list[_Line]) -> list[tuple[str, ...]]:
+    path: list[str] = []
+    result: list[tuple[str, ...]] = []
+    for line in lines:
+        match = _HEADING.match(line.text)
+        if match:
+            level = len(match.group(1))
+            heading = _normalize(match.group(2))
+            path = path[: level - 1]
+            path.append(heading)
+        result.append(tuple(path))
+    return result
+
+
+def _line_index(lines: list[_Line], offset: int) -> int:
+    for index, line in enumerate(lines):
+        if line.start <= offset <= line.end:
+            return index
+    return len(lines) - 1
+
+
+def build_evidence_anchor(content: str, start_offset: int, end_offset: int) -> EvidenceAnchor:
+    if not 0 <= start_offset < end_offset <= len(content):
+        raise ValueError("anchor_span_invalid")
+    lines = _lines(content)
+    start_index = _line_index(lines, start_offset)
+    end_index = _line_index(lines, end_offset - 1)
+    paths = _section_paths(lines)
+
+    prefix: list[str] = []
+    for line in reversed(lines[:start_index]):
+        normalized = _normalize(line.text)
+        if normalized:
+            prefix.append(normalized)
+        if len(prefix) == 2:
+            break
+    prefix.reverse()
+
+    suffix: list[str] = []
+    for line in lines[end_index + 1 :]:
+        normalized = _normalize(line.text)
+        if normalized:
+            suffix.append(normalized)
+        if len(suffix) == 2:
+            break
+
+    return EvidenceAnchor(
+        version=ANCHOR_VERSION,
+        section_path=paths[start_index],
+        prefix_sha256=_hash_lines(prefix),
+        suffix_sha256=_hash_lines(suffix),
+    )
+
+
+def _candidate(content: str, start: int, end: int, similarity: float) -> AnchorCandidate:
+    anchor = build_evidence_anchor(content, start, end)
+    return AnchorCandidate(
+        start_offset=start,
+        end_offset=end,
+        start_line=content.count("\n", 0, start) + 1,
+        end_line=content.count("\n", 0, end - 1) + 1,
+        section_path=anchor.section_path,
+        similarity=similarity,
+    )
+
+
+def _exact_occurrences(content: str, quote: str) -> list[int]:
+    offsets: list[int] = []
+    cursor = 0
+    while True:
+        found = content.find(quote, cursor)
+        if found < 0:
+            return offsets
+        offsets.append(found)
+        cursor = found + 1
+
+
+def _context_matches(cited: EvidenceAnchor, current: EvidenceAnchor) -> bool:
+    return (
+        cited.section_path == current.section_path
+        and (cited.prefix_sha256 == EMPTY_SHA256 or cited.prefix_sha256 == current.prefix_sha256)
+        and (cited.suffix_sha256 == EMPTY_SHA256 or cited.suffix_sha256 == current.suffix_sha256)
+    )
+
+
+def _changed_candidates(
+    *, quote: str, cited_anchor: EvidenceAnchor, current_content: str
+) -> tuple[AnchorCandidate, ...]:
+    lines = _lines(current_content)
+    paths = _section_paths(lines)
+    quote_line_count = max(1, len(quote.splitlines()))
+    normalized_quote = _normalize(quote)
+    candidates: list[AnchorCandidate] = []
+    terminal_heading = cited_anchor.section_path[-1:] or ()
+
+    for index in range(0, len(lines) - quote_line_count + 1):
+        window = lines[index : index + quote_line_count]
+        if terminal_heading and paths[index][-1:] != terminal_heading:
+            continue
+        start = window[0].start
+        end = window[-1].end
+        if end <= start:
+            continue
+        similarity = SequenceMatcher(
+            None,
+            normalized_quote,
+            _normalize(current_content[start:end]),
+            autojunk=False,
+        ).ratio()
+        if similarity < MIN_CHANGED_SIMILARITY:
+            continue
+        candidates.append(_candidate(current_content, start, end, similarity))
+
+    return tuple(sorted(candidates, key=lambda item: (-item.similarity, item.start_offset)))
+
+
+def resolve_evidence_anchor(
+    *, quote: str, cited_anchor: EvidenceAnchor, current_content: str
+) -> AnchorResolution:
+    if not quote:
+        raise ValueError("anchor_quote_invalid")
+    if cited_anchor.version != ANCHOR_VERSION:
+        raise ValueError("anchor_version_unsupported")
+
+    occurrences = _exact_occurrences(current_content, quote)
+    exact = tuple(
+        _candidate(current_content, start, start + len(quote), 1.0) for start in occurrences
+    )
+    if len(exact) > 1:
+        return AnchorResolution(state="ambiguous", candidates=exact)
+    if len(exact) == 1:
+        current_anchor = build_evidence_anchor(
+            current_content, exact[0].start_offset, exact[0].end_offset
+        )
+        state: AnchorState = (
+            "unchanged" if _context_matches(cited_anchor, current_anchor) else "moved"
+        )
+        return AnchorResolution(state=state, candidates=exact)
+
+    candidates = _changed_candidates(
+        quote=quote,
+        cited_anchor=cited_anchor,
+        current_content=current_content,
+    )
+    return AnchorResolution(
+        state="changed" if candidates else "deleted",
+        candidates=candidates,
+    )