ragops 2.0.0__tar.gz → 2.0.2__tar.gz

ragops-2.0.2/.claude-plugin/plugin.json

@@ -0,0 +1,13 @@
+{
+  "name": "ragops",
+  "version": "2.0.2",
+  "description": "Explainable regression tests and release gates for RAG systems and AI agents.",
+  "author": {
+    "name": "Thang Luu",
+    "url": "https://github.com/thangldw"
+  },
+  "homepage": "https://github.com/thangldw/ragops",
+  "repository": "https://github.com/thangldw/ragops",
+  "license": "MIT",
+  "keywords": ["rag", "ai-agents", "evaluation", "release-gates"]
+}

ragops-2.0.2/.codex-plugin/plugin.json

@@ -0,0 +1,32 @@
+{
+  "name": "ragops",
+  "version": "2.0.2",
+  "description": "Offline, explainable release gates and evidence bundles for RAG systems and AI agents.",
+  "author": {
+    "name": "Thang Luu",
+    "url": "https://github.com/thangldw"
+  },
+  "homepage": "https://github.com/thangldw/ragops",
+  "repository": "https://github.com/thangldw/ragops",
+  "license": "MIT",
+  "keywords": ["rag", "ai-agents", "evaluation", "release-gates", "regression-testing"],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "RAGOps",
+    "shortDescription": "Gate AI releases with evidence",
+    "longDescription": "Compare recorded candidate behavior with an accepted baseline, localize regressions by policy and case, and produce verifiable release evidence without requiring a model provider.",
+    "developerName": "DUC THANG LUU",
+    "category": "Productivity",
+    "capabilities": ["Read"],
+    "websiteURL": "https://github.com/thangldw/ragops",
+    "privacyPolicyURL": "https://github.com/thangldw/ragops/blob/main/PRIVACY.md",
+    "termsOfServiceURL": "https://github.com/thangldw/ragops/blob/main/TERMS.md",
+    "defaultPrompt": [
+      "Compare this candidate run with the accepted baseline.",
+      "Explain why this RAG release is blocked.",
+      "Create a review-ready release gate report."
+    ],
+    "logo": "./assets/plugin-icon.png",
+    "composerIcon": "./assets/plugin-icon.png"
+  }
+}

ragops-2.0.2/.github/workflows/ci.yml

@@ -0,0 +1,72 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - name: Install test dependencies
+        run: python -m pip install --disable-pip-version-check -e '.[dev]' build
+      - name: Lint
+        run: ruff check .
+      - name: Test
+        env:
+          PYTEST_DISABLE_PLUGIN_AUTOLOAD: "1"
+        run: pytest -q
+      - name: Build and inspect distributions
+        run: |
+          python -m build
+          python -m zipfile --list dist/ragops-*.whl | grep 'ragops/web/index.html'
+          python -m zipfile --list dist/ragops-*.whl | grep 'ragops/api/main.py'
+      - name: Run credential-free release gate
+        run: |
+          ragops demo --profile engineer --output demo-output
+          ragops evidence verify --bundle demo-output/evidence
+
+  windows-no-clone:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.5"
+          enable-cache: false
+          ignore-empty-workdir: true
+      - name: Run published credential-free demo without checkout
+        shell: pwsh
+        run: |
+          $demoJson = (& uvx --from "ragops==2.0.1" ragops demo --profile engineer --output demo-output | Out-String)
+          if ($LASTEXITCODE -ne 0) {
+            throw "ragops demo returned $LASTEXITCODE"
+          }
+          $summary = $demoJson | ConvertFrom-Json
+          if ($summary.candidate_decision -ne "BLOCK") {
+            throw "expected BLOCK, got $($summary.candidate_decision)"
+          }
+          if (-not (Test-Path "demo-output/release-report.html" -PathType Leaf)) {
+            throw "release-report.html was not generated"
+          }
+          uvx --from "ragops==2.0.1" ragops evidence verify --bundle demo-output/evidence
+          if ($LASTEXITCODE -ne 0) {
+            throw "evidence verification returned $LASTEXITCODE"
+          }

ragops-2.0.2/.github/workflows/codeql.yml

@@ -0,0 +1,29 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: "17 3 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
+        with:
+          languages: python
+          build-mode: none
+      - uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
+        with:
+          category: "/language:python"

{ragops-2.0.0 → ragops-2.0.2}/.github/workflows/publish-pypi.yml

@@ -16,10 +16,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.tag }}
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
       - name: Verify tag and package version
@@ -33,8 +33,14 @@ jobs:
 
           tag = sys.argv[1]
           version = tomllib.loads(Path("pyproject.toml").read_text())["project"]["version"]
-          if tag != f"v{version}":
-              raise SystemExit(f"tag {tag!r} does not match package version v{version}")
+          parts = version.split(".")
+          if len(parts) != 3 or not all(part.isdigit() for part in parts):
+              raise SystemExit("package version must use numeric MAJOR.MINOR.PATCH")
+          expected_tag = f"v{version}"
+          if tag != expected_tag:
+              raise SystemExit(
+                  f"tag {tag!r} does not match package version {version!r}"
+              )
           print(f"publishing ragops {version}")
           PY
       - name: Download promoted GitHub Release artifacts
@@ -47,6 +53,7 @@ jobs:
             --pattern 'ragops-*.whl' \
             --pattern 'ragops-*.tar.gz' \
             --pattern 'ragops-*.cdx.json' \
+            --pattern 'ragops-chatgpt-plugin-*.zip' \
             --pattern 'SHA256SUMS' \
             --dir release-assets
           (cd release-assets && sha256sum --check SHA256SUMS)
@@ -54,4 +61,5 @@ jobs:
           test "$(find release-assets -maxdepth 1 -name 'ragops-*.tar.gz' | wc -l)" -eq 1
           cp release-assets/ragops-*.whl release-assets/ragops-*.tar.gz dist/
       - name: Publish distributions with Trusted Publishing
-        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+        # Upstream container images are published for exact release tags, not commit-SHA refs.
+        uses: pypa/gh-action-pypi-publish@v1.14.2

ragops-2.0.2/.gitignore

@@ -0,0 +1,172 @@
+# Canonical ignore rules for repositories owned by thangldw.
+# Keep this file identical across repositories.
+
+# Operating systems and file managers
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+.DocumentRevisions-V100
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.fseventsd
+.localized
+__MACOSX/
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+[Dd]esktop.ini
+$RECYCLE.BIN/
+*.lnk
+
+# Editors and local assistants
+.idea/
+.vscode/
+*.code-workspace
+*.sublime-project
+*.sublime-workspace
+*.swp
+*.swo
+*~
+.history/
+.claude/
+.codex/
+
+# Secrets and local configuration
+.env
+.env.*
+!.env.example
+!.env.*.example
+*.local
+*.secret
+*.secrets
+*.key
+*.pem
+*.p12
+*.pfx
+credentials.json
+service-account*.json
+
+# Logs, temporary files, backups and local databases
+*.log
+*.tmp
+*.temp
+*.bak
+*.backup
+*.orig
+*.rej
+*.stackdump
+tmp/
+temp/
+logs/
+backups/
+*.db
+*.db-journal
+*.db-shm
+*.db-wal
+*.sqlite
+*.sqlite3
+
+# JavaScript and TypeScript
+node_modules/
+.npm/
+.npm-cache/
+.yarn/
+.pnpm-store/
+.vite/
+.next/
+.nuxt/
+.svelte-kit/
+dist/
+build/
+generated/
+coverage/
+*.tsbuildinfo
+playwright-report/
+test-results/
+blob-report/
+src/generated/
+supabase/.temp/
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+.venv/
+.venv*/
+venv/
+env/
+ENV/
+.python-version
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+.pyre/
+.pytype/
+.hypothesis/
+.tox/
+.nox/
+.coverage
+.coverage.*
+htmlcov/
+*.egg-info/
+.eggs/
+wheels/
+pip-wheel-metadata/
+reports/
+.ipynb_checkpoints/
+**/.ipynb_checkpoints/
+
+# Rust, Go, Java and .NET
+**/target/
+**/gen/schemas/
+vendor/
+bin/
+obj/
+*.class
+*.jar
+*.war
+*.nupkg
+
+# Swift and Apple build artifacts
+**/.build/
+DerivedData/
+*.xcuserstate
+*.xcworkspace/xcuserdata/
+*.xcodeproj/xcuserdata/
+*.app/
+*.dmg
+**/release/
+
+# Windows installers and packaged artifacts
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+*.exe
+*.zip
+release-artifacts/
+artifacts/
+
+# QA and generated visual output
+qa/
+qa-*.png
+qa-*.jpg
+qa-*.jpeg
+audit-*.png
+prototype-*.png
+gameplay-*.png
+design-qa.md
+
+# Project-specific generated resources
+public/ocr/paddleocr/
+src-tauri/generated-resources/ocr/*
+!src-tauri/generated-resources/ocr/.gitkeep
+analysis/outputs/
+analysis/*-artifact.json
+analysis/*.html
+NamiQuant-Claude-Design.html

ragops-2.0.2/.kimi-plugin/plugin.json

@@ -0,0 +1,20 @@
+{
+  "name": "ragops",
+  "version": "2.0.2",
+  "description": "Explainable regression tests and release gates for RAG systems and AI agents.",
+  "author": {
+    "name": "Thang Luu",
+    "url": "https://github.com/thangldw"
+  },
+  "homepage": "https://github.com/thangldw/ragops",
+  "license": "MIT",
+  "keywords": ["rag", "ai-agents", "evaluation", "release-gates"],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "RAGOps",
+    "shortDescription": "Gate RAG and agent releases with evidence",
+    "longDescription": "Compare candidate AI behavior with an accepted baseline, explain failed gates, and produce reviewable release evidence without requiring a model provider.",
+    "developerName": "Thang Luu",
+    "websiteURL": "https://github.com/thangldw/ragops"
+  }
+}

ragops-2.0.2/CHANGELOG.md

@@ -0,0 +1,110 @@
+# RAGOps changelog / Lịch sử thay đổi / 変更履歴
+
+## Unreleased
+
+## [2.0.2] - 2026-08-24
+
+### English
+
+- Added a deterministic synthetic retrieval-poisoning Failure Zoo specimen with explicit unsupported-citation, unsupported-claim, and forbidden-output findings.
+- Added checkout-free Windows verification of the published package, least-privilege CodeQL scanning, and protected-branch release gates.
+- Added disabled-by-default local usage evidence that records only command, exit code, version, and UTC timestamp without arguments or paths.
+- Generate the CycloneDX SBOM from the built wheel in a dependency-free environment so its root version is exact and no local build path is disclosed.
+
+### Tiếng Việt
+
+- Bổ sung mẫu synthetic retrieval poisoning xác định với các finding rõ ràng về citation không được hỗ trợ, claim không có căn cứ và output bị cấm.
+- Bổ sung kiểm tra Windows không checkout từ package đã public, CodeQL theo least privilege và release gate bảo vệ nhánh chính.
+- Bổ sung bằng chứng sử dụng local mặc định tắt, chỉ ghi command, exit code, version và UTC timestamp, không ghi arguments hoặc paths.
+- Tạo CycloneDX SBOM từ wheel đã build trong môi trường không dependency để version gốc chính xác và không lộ local build path.
+
+### 日本語
+
+- unsupported citation、unsupported claim、forbidden output を明示する決定的な synthetic retrieval-poisoning Failure Zoo specimen を追加しました。
+- 公開 package の checkout-free Windows 検証、least-privilege CodeQL、保護 branch release gate を追加しました。
+- デフォルト無効で、引数や path を記録せず command、exit code、version、UTC timestamp のみを残す local usage evidence を追加しました。
+- build 済み wheel を dependency-free environment で読み取り、正確な root version と local build path を含まない CycloneDX SBOM を生成します。
+
+## [2.0.1] - 2026-08-23
+
+### English
+
+- Republished the unchanged RAGOps 2.0 feature set under a new patch version because PyPI permanently reserves filenames from deleted releases.
+- Corrected the Trusted Publishing action reference so GitHub Actions uses the published v1.14.2 container with Core Metadata 2.5 support.
+
+### Tiếng Việt
+
+- Phát hành lại toàn bộ tính năng RAGOps 2.0 dưới patch version mới vì PyPI khóa vĩnh viễn filename của release đã bị xóa.
+- Sửa tham chiếu Trusted Publishing để GitHub Actions dùng container v1.14.2 đã phát hành và hỗ trợ Core Metadata 2.5.
+
+### 日本語
+
+- 削除済みリリースのファイル名を PyPI が恒久的に予約するため、RAGOps 2.0 の機能を新しいパッチ版で再公開しました。
+- Trusted Publishing の参照を修正し、Core Metadata 2.5 対応の公開済み v1.14.2 コンテナを使用します。
+
+## [2.0.0] - 2026-08-23
+
+### English
+
+- Added versioned contract migration, content-addressed evidence bundles, slice/distribution gates, evaluator calibration, trace-graph evaluation, dataset leakage controls, CI renderers, portable vendor adapters, and audited blind review.
+- Packaged the optional FastAPI workbench with CSP-safe DOM rendering and added Python 3.11-3.13 CI.
+- Upgraded the synthetic flagship demo to generate canonical JSON, Markdown, HTML, JUnit, SARIF, GitHub Summary, and verified evidence for executive, engineer, and auditor profiles.
+- Added a deterministic ChatGPT skills-only plugin bundle and v2 release evidence.
+
+### Tiếng Việt
+
+- Bổ sung contract có version, evidence bundle content-addressed, slice/distribution gate, calibration, trace graph, chống dataset leakage, CI renderer, vendor adapter và blind review có audit.
+- Đóng gói FastAPI workbench tùy chọn với CSP/DOM an toàn và CI Python 3.11-3.13.
+- Nâng demo synthetic để xuất cùng một quyết định qua JSON, Markdown, HTML, JUnit, SARIF, GitHub Summary và evidence đã xác minh.
+
+### 日本語
+
+- versioned contract、content-addressed evidence、slice/distribution gate、calibration、trace graph、dataset leakage check、CI renderer、vendor adapter、blind review audit を追加しました。
+- CSP-safe な任意 FastAPI workbench と Python 3.11-3.13 CI を同梱しました。
+- synthetic flagship demo は同一判定を JSON、Markdown、HTML、JUnit、SARIF、GitHub Summary、検証済み evidence に出力します。
+
+## [1.2.0] - 2026-08-02
+
+### English
+
+- Added skills-only plugin packages and directory metadata for ChatGPT, Codex, Claude Code, Cowork and Kimi Code.
+- Added the credential-free customer-support release-gate demonstration and its recorded evidence.
+- Restored a release-only GitHub Actions workflow for PyPI Trusted Publishing; runtime integrations remain local CLI/API workflows.
+
+### Tiếng Việt
+
+- Bổ sung package plugin dạng skills-only và metadata directory cho ChatGPT, Codex, Claude Code, Cowork và Kimi Code.
+- Bổ sung demo release gate cho customer support không cần credential cùng bằng chứng đã ghi lại.
+- Khôi phục GitHub Actions chỉ dùng để phát hành PyPI qua Trusted Publishing; tích hợp runtime vẫn chạy qua CLI/API cục bộ.
+
+### 日本語
+
+- ChatGPT、Codex、Claude Code、Cowork、Kimi Code 向けの skills-only plugin package と directory metadata を追加しました。
+- 認証情報不要の customer-support release-gate demo と記録済み証拠を追加しました。
+- PyPI Trusted Publishing 専用の GitHub Actions workflow を復元しました。runtime integration は引き続きローカル CLI/API を使用します。
+
+## [1.0.0] - 2026-07-26
+
+### English
+
+- Consolidated deterministic and statistical evaluation, policy comparison, provenance diagnosis, offline evidence and API/CLI adapters into one stable baseline.
+- Removed all repository-owned GitHub Actions; release gates remain available through the local CLI and API.
+- Standardized the public tag and package version at `v1.0.0`.
+
+### Tiếng Việt
+
+- Hợp nhất đánh giá xác định/thống kê, so sánh policy, chẩn đoán provenance, bằng chứng offline và adapter API/CLI vào một baseline ổn định.
+- Xóa toàn bộ GitHub Actions thuộc repo; release gate tiếp tục hoạt động qua CLI và API cục bộ.
+- Chuẩn hóa tag public và package version thành `v1.0.0`.
+
+### 日本語
+
+- 決定的・統計的評価、ポリシー比較、来歴診断、オフライン証拠、API/CLI アダプターを1つの安定版へ統合しました。
+- リポジトリ所有の GitHub Actions をすべて削除し、リリースゲートはローカル CLI と API で引き続き利用できます。
+- 公開タグとパッケージ版を `v1.0.0` に統一しました。
+
+[2.0.2]: https://github.com/thangldw/ragops/releases/tag/v2.0.2
+[2.0.1]: https://github.com/thangldw/ragops/releases/tag/v2.0.1
+[2.0.0]: https://github.com/thangldw/ragops/releases/tag/v2.0.0
+[1.2.0]: https://github.com/thangldw/ragops/releases/tag/v1.2.0
+[1.0.0]: https://github.com/thangldw/ragops/releases/tag/v1.0.0

ragops-2.0.2/CONTRIBUTING.md

@@ -0,0 +1,5 @@
+# Contributing / Đóng góp / コントリビューション
+
+- **English:** Preserve offline core semantics, version public schemas, add evidence fixtures and run `ruff check .` plus `PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 pytest -q`.
+- **Tiếng Việt:** Giữ semantics offline của core, version public schema, thêm evidence fixture và chạy lint/test đầy đủ.
+- **日本語:** オフラインコアの意味を維持し、公開 schema を version 管理し、証拠 fixture を追加して lint/test を実行してください。

ragops-2.0.2/PKG-INFO

@@ -0,0 +1,99 @@
+Metadata-Version: 2.5
+Name: ragops
+Version: 2.0.2
+Summary: Regression tests and explainable release gates for RAG and AI agents
+Project-URL: Homepage, https://github.com/thangldw/ragops
+Project-URL: Documentation, https://github.com/thangldw/ragops#readme
+Project-URL: Issues, https://github.com/thangldw/ragops/issues
+Project-URL: Changelog, https://github.com/thangldw/ragops/blob/main/CHANGELOG.md
+Author: Thang Luu
+License: MIT
+License-File: LICENSE
+Keywords: ai-agents,evaluation,rag,regression-testing,release-gates
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.11
+Provides-Extra: api
+Requires-Dist: fastapi>=0.115; extra == 'api'
+Requires-Dist: uvicorn>=0.30; extra == 'api'
+Provides-Extra: dev
+Requires-Dist: fastapi>=0.115; extra == 'dev'
+Requires-Dist: jsonschema>=4.23; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Provides-Extra: release
+Requires-Dist: build>=1.2; extra == 'release'
+Requires-Dist: cyclonedx-bom>=7.3; extra == 'release'
+Requires-Dist: twine>=5.1; extra == 'release'
+Description-Content-Type: text/markdown
+
+# RAGOps
+
+[English](#english) · [Tiếng Việt](#tiếng-việt) · [日本語](#日本語)
+
+Offline, reproducible release gates for RAG systems and AI agents.
+
+```mermaid
+%%{init: {"theme":"base","themeVariables":{"background":"#FFFFFF","fontFamily":"Arial, sans-serif","lineColor":"#667085","primaryTextColor":"#172B4D"}}}%%
+flowchart LR
+    S["Scenario<br/>Kịch bản / シナリオ"]:::yellow
+    B["Accepted baseline<br/>Mốc chuẩn / 基準"]:::blue
+    C["Candidate traces<br/>Ứng viên / 候補"]:::purple
+    E["Evaluators & policy<br/>Đánh giá / 評価"]:::green
+    G{"PASS / WARN / BLOCK"}:::pink
+    S --> E
+    B --> E
+    C --> E --> G
+    classDef yellow fill:#FFF4A3,stroke:#C9A227,stroke-width:2px,color:#172B4D
+    classDef blue fill:#D9EAFD,stroke:#4C78A8,stroke-width:2px,color:#172B4D
+    classDef purple fill:#E9DDF7,stroke:#8064A2,stroke-width:2px,color:#172B4D
+    classDef green fill:#DDF5E3,stroke:#4F9D69,stroke-width:2px,color:#172B4D
+    classDef pink fill:#FFE1E6,stroke:#C96A7B,stroke-width:2px,color:#172B4D
+```
+
+## English
+
+RAGOps compares recorded candidate behavior with an accepted baseline, applies a versioned release policy, and emits one canonical `PASS`, `WARN`, or `BLOCK` decision across JSON, Markdown, HTML, JUnit, SARIF, and GitHub Summary. The dependency-free core performs no network calls. Optional adapters import vendor exports; the API/workbench ships in the wheel through the `api` extra.
+
+Requirements: Python 3.11+.
+
+Current technical references: [architecture](docs/ARCHITECTURE.md), [contracts](docs/CONTRACTS.md), [governance](docs/governance.md), [operations](docs/OPERATIONS.md), [security](SECURITY.md), and [v2.0.2 release notes](docs/releases/v2.0.2.md).
+
+The repository is also a skills-only plugin for ChatGPT, Codex, Claude Code and Cowork. It does not include a hosted MCP connector. See the [directory submission package](docs/submission/DIRECTORY_SUBMISSION.md), [privacy policy](PRIVACY.md), [terms](TERMS.md), and [support guidance](SUPPORT.md).
+
+```bash
+pip install ragops
+ragops demo --profile engineer --output ./demo-output
+ragops evidence verify --bundle ./demo-output/evidence
+open ./demo-output/release-report.html
+```
+
+On Windows PowerShell, replace the final command with
+`Start-Process ./demo-output/release-report.html`.
+
+The credential-free demo intentionally returns `BLOCK`: citation coverage `1.0 -> 0.5`, citation precision `1.0 -> 0.5`, and lexical groundedness `1.0 -> 0.6`. It is synthetic benchmark evidence, not production adoption evidence.
+
+Install `ragops[api]` and run `ragops serve` for the local authenticated API/workbench. Use `ragops adapter list` for Phoenix, Ragas, DeepEval, LangSmith, MLflow, Promptfoo, custom JSON, and installed entry-point adapters.
+
+Local CLI usage evidence is disabled by default. Set `RAGOPS_USAGE_LOG` to an explicit JSONL path to record only the UTC timestamp, RAGOps version, top-level command, and exit code; arguments and file paths are never recorded. Summarize the file with `ragops usage-report --events usage.jsonl`. Use the consent-aware `pilot-report` contract and the [production pilot runbook](docs/gtm/production-pilot.md) for production adoption evidence.
+
+## Tiếng Việt
+
+RAGOps so sánh trace ứng viên với baseline được chấp nhận, áp dụng release policy có version và xuất cùng một quyết định `PASS`, `WARN` hoặc `BLOCK` sang JSON/Markdown/HTML/JUnit/SARIF. Core không dependency, chạy offline; API/workbench là extra tùy chọn. Demo synthetic cố ý tạo `BLOCK`, không phải bằng chứng production adoption.
+
+Yêu cầu: Python 3.11+. Dùng các lệnh ở phần English để cài đặt, kiểm tra scenario, lint và test.
+
+## 日本語
+
+RAGOps は記録済み候補を承認済みベースラインと比較し、バージョン管理された方針から一つの `PASS`・`WARN`・`BLOCK` 判定を JSON、Markdown、HTML、JUnit、SARIF に出力します。依存関係のない core はオフラインで動作し、API/workbench は任意の extra です。デモは synthetic evidence であり、本番導入実績ではありません。
+
+必要環境は Python 3.11 以上です。セットアップ、lint、テストには English セクションのコマンドを使用してください。
+
+Released under the [MIT License](LICENSE).

ragops-2.0.2/PRIVACY.md

@@ -0,0 +1,13 @@
+# Privacy Policy
+
+Last updated: 2026-08-02
+
+RAGOps and its bundled plugin run locally by default. The project does not operate a hosted RAGOps service, create user accounts, collect telemetry, or transmit repository files, scenarios, traces, reports, or credentials to the project author.
+
+RAGOps reads only the files and command arguments selected by the user. It may write reports, replay bundles, baselines, or local experiment records only when the user requests an operation that creates those artifacts. Those files remain in user-controlled storage.
+
+Users may explicitly set `RAGOPS_USAGE_LOG` to write local usage events containing only a UTC timestamp, RAGOps version, top-level command name, and exit code. This is disabled by default, excludes command arguments and file paths, remains in user-controlled storage, and is never transmitted to the project author.
+
+Optional provider or HTTP adapters can send data to an endpoint explicitly configured by the user. In that case, the endpoint operator's privacy terms apply. RAGOps does not enable a provider automatically and does not embed provider credentials.
+
+Users control retention by deleting locally generated artifacts. For privacy questions, open an issue at https://github.com/thangldw/ragops/issues.