protocol-governed-computing 5.0.0__tar.gz → 6.0.1__tar.gz

protocol_governed_computing-6.0.1/PKG-INFO

@@ -0,0 +1,63 @@
+Metadata-Version: 2.4
+Name: protocol-governed-computing
+Version: 6.0.1
+Summary: Protocol-Governed Computing — installs the full toolchain and reports whether an environment is ready to compile, seal, and execute
+Author-email: Bhash Ganti <bachipeachy@gmail.com>
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://omnibachi.org/
+Project-URL: Repository, https://github.com/protocol-governed-computing
+Project-URL: Standard, https://doi.org/10.5281/zenodo.22150616
+Keywords: protocol-governed-computing,pgc,governance,authorization,sdlc
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Software Development :: Compilers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: pgc-governance==6.0.0
+Requires-Dist: pgc-workloads==6.0.0
+Requires-Dist: pgc-domains==6.0.0
+Requires-Dist: pgc-compiler==6.0.0
+Requires-Dist: pgc-runtime==6.0.0
+Requires-Dist: pgc-assembler==6.0.0
+Requires-Dist: pgc-transport==6.0.0
+Requires-Dist: pgc-inspector==6.0.0
+Requires-Dist: pgc-transformation==6.0.0
+Provides-Extra: blockchain
+Requires-Dist: pgc-domains[blockchain]==6.0.0; extra == "blockchain"
+
+# Protocol-Governed Computing
+
+**Software that runs only what it has declared, and proves it.**
+
+In Protocol-Governed Computing (PGC), declarations decide what a system does. They name who may ask,
+which input is admitted, which steps run, and what each step may touch. PGC compiles the declarations
+and seals them into a **snapshot**. The runtime checks the snapshot is unchanged, executes only what it
+declares, refuses everything else, and records a trace of every run.
+
+## Choose where to start
+
+| You want to | Start here |
+|---|---|
+| See PGC run on your machine in a few minutes | [**Demos**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md) |
+| Build, run and extend PGC from its parts | [**Developer guide**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md) |
+| Verify the sealed composition a paper cites | [`pgc_release`](https://github.com/protocol-governed-computing/pgc_release) |
+| Read the standard PGC implements | https://doi.org/10.5281/zenodo.22150616 |
+
+## This package
+
+This repository publishes `protocol-governed-computing`, the whole toolchain in one install. It
+brings in the nine component packages, pinned to one composition, and puts the `pgc` command on your
+path.
+
+```bash
+pip install protocol-governed-computing
+```
+
+The toolchain carries no declarations. To build and run a platform, follow the
+[developer guide](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md).
+To see one run without building anything, start with the
+[demos](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md).
+
+**Something failed?** Please [open an issue](https://github.com/protocol-governed-computing/pgc_install/issues).

protocol_governed_computing-6.0.1/README.md

@@ -0,0 +1,34 @@
+# Protocol-Governed Computing
+
+**Software that runs only what it has declared, and proves it.**
+
+In Protocol-Governed Computing (PGC), declarations decide what a system does. They name who may ask,
+which input is admitted, which steps run, and what each step may touch. PGC compiles the declarations
+and seals them into a **snapshot**. The runtime checks the snapshot is unchanged, executes only what it
+declares, refuses everything else, and records a trace of every run.
+
+## Choose where to start
+
+| You want to | Start here |
+|---|---|
+| See PGC run on your machine in a few minutes | [**Demos**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md) |
+| Build, run and extend PGC from its parts | [**Developer guide**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md) |
+| Verify the sealed composition a paper cites | [`pgc_release`](https://github.com/protocol-governed-computing/pgc_release) |
+| Read the standard PGC implements | https://doi.org/10.5281/zenodo.22150616 |
+
+## This package
+
+This repository publishes `protocol-governed-computing`, the whole toolchain in one install. It
+brings in the nine component packages, pinned to one composition, and puts the `pgc` command on your
+path.
+
+```bash
+pip install protocol-governed-computing
+```
+
+The toolchain carries no declarations. To build and run a platform, follow the
+[developer guide](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md).
+To see one run without building anything, start with the
+[demos](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md).
+
+**Something failed?** Please [open an issue](https://github.com/protocol-governed-computing/pgc_install/issues).

{protocol_governed_computing-5.0.0 → protocol_governed_computing-6.0.1}/pgc/cli.py

@@ -20,6 +20,7 @@ FAMILY = [
     ("pgc-assembler", "projections → sealed snapshot"),
     ("pgc-runtime", "snapshot → governed execution"),
     ("pgc-inspector", "snapshot → read-only inspection"),
+    ("pgc-transport", "requests → the governed boundary (HTTP and command line)"),
     ("pgc-transformation", "change request → protocol artifacts"),
     ("pgc-governance", "governance surface implementations"),
     ("pgc-workloads", "conformance workload implementations"),
@@ -29,6 +30,27 @@ FAMILY = [
 STANDARD = "https://doi.org/10.5281/zenodo.22150616"
 
 
+def _composition() -> tuple[str, str, dict[str, str]] | None:
+    """The composition this distribution was published as, or None for a source install.
+
+    `pgc/composition.py` is generated when a composition is published. A source tree has none, and
+    that is a fact to report rather than an error.
+    """
+    try:
+        from pgc import composition
+    except ImportError:
+        return None
+    return composition.PUBLIC, composition.SNAPSHOT_ID, composition.PINS
+
+
+def _own_version() -> str:
+    """This distribution's version. It moves on its own; the composition is named by `PUBLIC`."""
+    try:
+        return md.version("protocol-governed-computing")
+    except md.PackageNotFoundError:
+        return "-"
+
+
 def _installed() -> list[tuple[str, str, str]]:
     rows = []
     for dist, role in FAMILY:
@@ -65,12 +87,22 @@ def main(argv: list[str] | None = None) -> int:
         return 0
 
     print("Protocol-Governed Computing\n")
+    composed = _composition()
+    if composed:
+        print(f"  composition {composed[0]}, snapshot {composed[1][:16]}…")
+        print(f"  installed as protocol-governed-computing {_own_version()}\n")
+    else:
+        print("  composition: none recorded — this is a source install\n")
+    pins = composed[2] if composed else {}
     print("  toolchain")
-    missing = 0
+    missing = drifted = 0
     for dist, ver, role in _installed():
         if ver == "-":
             missing += 1
-        print(f"    {dist:<20} {ver:<8} {role}")
+        pinned = pins.get(dist)
+        off = pinned is not None and ver not in ("-", pinned)
+        drifted += off
+        print(f"    {dist:<20} {ver:<8} {role}" + (f"  (composition pins {pinned})" if off else ""))
 
     print("\n  environment")
     ready = True
@@ -81,7 +113,7 @@ def main(argv: list[str] | None = None) -> int:
 
     print()
     if missing:
-        print(f"  {missing} package(s) not installed — `pip install pgc` installs the family.")
+        print(f"  {missing} package(s) not installed — `pip install protocol-governed-computing` installs the family.")
     if not ready:
         print("  PGC_PLATFORM_ROOT must point at a governance repository (the directory")
         print("  containing registry/). The declarations are not shipped in any wheel:")
@@ -89,10 +121,12 @@ def main(argv: list[str] | None = None) -> int:
         print("  governs a build rather than a wheel's stale copy competing with a repo.")
         print("\n    git clone https://github.com/protocol-governed-computing/software_governance")
         print("    export PGC_PLATFORM_ROOT=$PWD/software_governance")
-    if not missing and ready:
+    if drifted:
+        print(f"  {drifted} package(s) differ from the composition's pins — this is not {composed[0]}.")
+    if not missing and ready and not drifted:
         print("  Ready: toolchain installed and a governance surface is anchored.")
     print(f"\n  standard: {STANDARD}")
-    return 0 if (ready and not missing) else 1
+    return 0 if (ready and not missing and not drifted) else 1
 
 
 if __name__ == "__main__":

protocol_governed_computing-6.0.1/pgc/composition.py

@@ -0,0 +1,15 @@
+"""The composition this distribution installs. Generated by `compose_release.py`; never edit."""
+
+PUBLIC = 'v6'
+SNAPSHOT_ID = '13e3c5bb502e2548389f5787caa9438247ee34f9d510ce6a8a3ed980fdf974d1'
+PINS = {
+    'pgc-governance': '6.0.0',
+    'pgc-workloads': '6.0.0',
+    'pgc-domains': '6.0.0',
+    'pgc-compiler': '6.0.0',
+    'pgc-runtime': '6.0.0',
+    'pgc-assembler': '6.0.0',
+    'pgc-transport': '6.0.0',
+    'pgc-inspector': '6.0.0',
+    'pgc-transformation': '6.0.0',
+}

protocol_governed_computing-6.0.1/protocol_governed_computing.egg-info/PKG-INFO

@@ -0,0 +1,63 @@
+Metadata-Version: 2.4
+Name: protocol-governed-computing
+Version: 6.0.1
+Summary: Protocol-Governed Computing — installs the full toolchain and reports whether an environment is ready to compile, seal, and execute
+Author-email: Bhash Ganti <bachipeachy@gmail.com>
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://omnibachi.org/
+Project-URL: Repository, https://github.com/protocol-governed-computing
+Project-URL: Standard, https://doi.org/10.5281/zenodo.22150616
+Keywords: protocol-governed-computing,pgc,governance,authorization,sdlc
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Software Development :: Compilers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: pgc-governance==6.0.0
+Requires-Dist: pgc-workloads==6.0.0
+Requires-Dist: pgc-domains==6.0.0
+Requires-Dist: pgc-compiler==6.0.0
+Requires-Dist: pgc-runtime==6.0.0
+Requires-Dist: pgc-assembler==6.0.0
+Requires-Dist: pgc-transport==6.0.0
+Requires-Dist: pgc-inspector==6.0.0
+Requires-Dist: pgc-transformation==6.0.0
+Provides-Extra: blockchain
+Requires-Dist: pgc-domains[blockchain]==6.0.0; extra == "blockchain"
+
+# Protocol-Governed Computing
+
+**Software that runs only what it has declared, and proves it.**
+
+In Protocol-Governed Computing (PGC), declarations decide what a system does. They name who may ask,
+which input is admitted, which steps run, and what each step may touch. PGC compiles the declarations
+and seals them into a **snapshot**. The runtime checks the snapshot is unchanged, executes only what it
+declares, refuses everything else, and records a trace of every run.
+
+## Choose where to start
+
+| You want to | Start here |
+|---|---|
+| See PGC run on your machine in a few minutes | [**Demos**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md) |
+| Build, run and extend PGC from its parts | [**Developer guide**](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md) |
+| Verify the sealed composition a paper cites | [`pgc_release`](https://github.com/protocol-governed-computing/pgc_release) |
+| Read the standard PGC implements | https://doi.org/10.5281/zenodo.22150616 |
+
+## This package
+
+This repository publishes `protocol-governed-computing`, the whole toolchain in one install. It
+brings in the nine component packages, pinned to one composition, and puts the `pgc` command on your
+path.
+
+```bash
+pip install protocol-governed-computing
+```
+
+The toolchain carries no declarations. To build and run a platform, follow the
+[developer guide](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEV.md).
+To see one run without building anything, start with the
+[demos](https://github.com/protocol-governed-computing/pgc_install/blob/main/README_DEMO.md).
+
+**Something failed?** Please [open an issue](https://github.com/protocol-governed-computing/pgc_install/issues).

{protocol_governed_computing-5.0.0 → protocol_governed_computing-6.0.1}/protocol_governed_computing.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ README.md
 pyproject.toml
 pgc/__init__.py
 pgc/cli.py
+pgc/composition.py
 protocol_governed_computing.egg-info/PKG-INFO
 protocol_governed_computing.egg-info/SOURCES.txt
 protocol_governed_computing.egg-info/dependency_links.txt

protocol_governed_computing-6.0.1/protocol_governed_computing.egg-info/requires.txt

@@ -0,0 +1,12 @@
+pgc-governance==6.0.0
+pgc-workloads==6.0.0
+pgc-domains==6.0.0
+pgc-compiler==6.0.0
+pgc-runtime==6.0.0
+pgc-assembler==6.0.0
+pgc-transport==6.0.0
+pgc-inspector==6.0.0
+pgc-transformation==6.0.0
+
+[blockchain]
+pgc-domains[blockchain]==6.0.0

{protocol_governed_computing-5.0.0 → protocol_governed_computing-6.0.1}/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 # composition takes the full project name. The import package and the console script are unaffected:
 # a user still runs `pgc`.
 name = "protocol-governed-computing"
-version = "5.0.0"
+version = "6.0.1"
 description = "Protocol-Governed Computing — installs the full toolchain and reports whether an environment is ready to compile, seal, and execute"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -24,24 +24,25 @@ classifiers = [
   "Topic :: Software Development :: Compilers",
 ]
 
-# The whole family, pinned to one composition. PGC versions the composition:
-# the repos release together and the governance closure forces lockstep, so a
-# mixed-version install is not a supported configuration.
+# The whole family, pinned to one composition. `compose_release.py` writes these pins from
+# `pgc_release/composition.json`, the record of which version of each distribution the composition
+# holds. Never edit them by hand.
 dependencies = [
-  "pgc-compiler==5.0.0",
-  "pgc-assembler==5.0.0",
-  "pgc-runtime==5.0.0",
-  "pgc-inspector==5.0.0",
-  "pgc-transformation==5.0.0",
-  "pgc-governance==5.0.0",
-  "pgc-workloads==5.0.0",
-  "pgc-domains==5.0.0",
+  "pgc-governance==6.0.0",
+  "pgc-workloads==6.0.0",
+  "pgc-domains==6.0.0",
+  "pgc-compiler==6.0.0",
+  "pgc-runtime==6.0.0",
+  "pgc-assembler==6.0.0",
+  "pgc-transport==6.0.0",
+  "pgc-inspector==6.0.0",
+  "pgc-transformation==6.0.0",
 ]
 
 # The blockchain domain's capability transforms need Keccak-256, which is optional in pgc-domains
 # for the same reason it is optional there: the core compile path imports none of it.
 [project.optional-dependencies]
-blockchain = ["pgc-domains[blockchain]==5.0.0"]
+blockchain = ["pgc-domains[blockchain]==6.0.0"]
 
 [project.scripts]
 pgc = "pgc.cli:main"