rbek 0.2.0__py3-none-any.whl

rbek-0.2.0.dist-info/METADATA

@@ -0,0 +1,210 @@
+Metadata-Version: 2.4
+Name: rbek
+Version: 0.2.0
+Summary: Official bootstrap CLI for RBEK governed execution.
+Author: RBEK Platform
+Project-URL: Homepage, https://rbekplatform.com
+Project-URL: Repository, https://github.com/rbekplatform/rbek
+Keywords: ai-agents,ai-governance,execution-governance,policy-enforcement,workflow-automation
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
+Classifier: Topic :: Security
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# RBEK
+
+**Governed execution for AI agents, workflows and software.**
+
+[![Deterministic Execution Verified](https://github.com/rbekplatform/rbek/actions/workflows/real-governed-agent.yml/badge.svg)](https://github.com/rbekplatform/rbek/actions/workflows/real-governed-agent.yml)
+[![Open in GitHub Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/rbekplatform/rbek?quickstart=1)
+
+RBEK separates what an agent **wants to do** from what it is **authorized to execute**.
+
+## See RBEK govern an action in 10 seconds
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/rbekplatform/rbek/main/examples/real-governed-agent/demo.sh | bash
+```
+
+**No API key. No prior RBEK installation. No configuration.**
+
+The demo installs and validates the public RBEK CLI when needed, then runs an
+offline governed proof:
+
+```text
+Agent requests an action
+        |
+        +-- unauthorized -> DENY  -> executed: NO
+        |
+        +-- authorized   -> ALLOW -> governed dry-run -> AUTHORIZED
+                                                |
+                                                +-- evidence
+```
+
+What you see in the terminal:
+
+```text
+Unauthorized action ............ DENIED
+Denied action executed ......... NO
+Authorized action .............. ALLOWED
+Governed dry-run ............... PASS
+Gate authorization ............. AUTHORIZED
+RBEK policy enforcement ........ REAL
+RBEK evidence .................. REAL
+```
+
+The default proof performs **no external network action**. Policy enforcement
+and evidence generation are real RBEK behavior.
+
+The public GitHub Actions workflow executes the proof twice and verifies that
+the deterministic evidence summary is identical across both runs.
+
+### Prefer zero-install in the browser?
+
+Use **Open in GitHub Codespaces** above, then run:
+
+```bash
+cd examples/real-governed-agent
+./demo.sh
+```
+
+### Want the real AI + Internet path?
+
+```bash
+cd examples/real-governed-agent
+export OPENAI_API_KEY="your-key"
+./demo.sh --live
+```
+
+Live mode performs real model inference and a real Open-Meteo external action
+through the RBEK governed execution boundary.
+
+## Why RBEK?
+
+AI agents can decide what they want to do. Production systems still need a
+controlled boundary for what is actually allowed to execute.
+
+RBEK puts that boundary between application logic and real external actions:
+
+```text
+agent / workflow
+      ↓
+execution request
+      ↓
+RBEK policy admission
+   ↙             ↘
+ DENY            ALLOW
+                   ↓
+               execute
+                   ↓
+               evidence
+```
+
+This keeps execution governance separate from the agent framework, model
+provider or workflow engine.
+
+## Install
+
+```bash
+curl -fsSL https://releases.rbekplatform.com/cli/stable/install.sh | bash
+```
+
+Verify:
+
+```bash
+rbek-cli --version
+```
+
+Current public stable:
+
+```text
+RBEK 0.2.0
+```
+
+## 5-minute quickstart
+
+Create and run a minimal local RBEK project:
+
+```bash
+rbek-cli init ./rbek-demo
+rbek-cli run ./rbek-demo
+```
+
+Or run the repository example:
+
+```bash
+bash examples/5-minute-quickstart/run.sh
+```
+
+The goal of the first five minutes is simple: install RBEK, create a governed
+local project and execute it through the RBEK CLI.
+
+See [QUICKSTART.md](QUICKSTART.md) for the complete first-run walkthrough.
+
+## Run the live AI + Internet version
+
+After the zero-key proof, you can run the real agent path:
+
+```bash
+cd examples/real-governed-agent
+export OPENAI_API_KEY="your-key"
+./demo.sh --live
+```
+
+In live mode:
+
+```text
+OpenAI agent
+     ↓
+weather.current
+     ↓
+RBEK policy admission
+     ↓
+controlled external execution
+     ↓
+Open-Meteo
+     ↓
+receipt + certification
+```
+
+The agent does not call Open-Meteo directly. The external action goes through
+the RBEK governed execution boundary.
+
+See
+[examples/real-governed-agent/README.md](examples/real-governed-agent/README.md)
+for details.
+
+## Developer
+
+Developer is the public CLI entry point for local development, evaluation and
+integration.
+
+It does not require a paid commercial entitlement.
+
+Team and Enterprise commercial access are handled separately.
+
+## Repository role
+
+This repository contains Developer documentation, examples and installation
+guidance.
+
+The RBEK runtime is distributed through the official release host:
+
+`https://releases.rbekplatform.com`
+
+The complete runtime source is not published in this repository.
+
+## Website
+
+`https://rbekplatform.com`
+
+## Security
+
+See [SECURITY.md](SECURITY.md).

rbek-0.2.0.dist-info/RECORD

@@ -0,0 +1,7 @@
+rbek_pypi/__init__.py,sha256=H5NHUmfcrHD0wk_K7HrQonoLpKD-lu-NoJ-swqM3NbI,69
+rbek_pypi/cli.py,sha256=aDSJiSV1Q-0LdhVHX7LaqT0WV7YlnXLDpcltrXQA_q4,3992
+rbek-0.2.0.dist-info/METADATA,sha256=dN934JM65Y4kbm3D4NR-2VMyhExqMM0kPfal20pPclQ,5309
+rbek-0.2.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+rbek-0.2.0.dist-info/entry_points.txt,sha256=LDt7BlAjdNXJE1Vdx0AwgCOiJBoAPyd4zXSmWKbNRVc,44
+rbek-0.2.0.dist-info/top_level.txt,sha256=3zLR7Y0Jsnb6jKBvbd5TpBKJIwl4JTy9h6DKt9PiN9M,10
+rbek-0.2.0.dist-info/RECORD,,

rbek-0.2.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.0.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

rbek-0.2.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+rbek = rbek_pypi.cli:main

rbek-0.2.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+rbek_pypi

rbek_pypi/__init__.py

@@ -0,0 +1,3 @@
+"""Public PyPI bootstrap package for RBEK."""
+
+__version__ = "0.2.0"

rbek_pypi/cli.py

@@ -0,0 +1,167 @@
+from __future__ import annotations
+
+import hashlib
+import os
+import pathlib
+import shutil
+import subprocess
+import sys
+import tempfile
+import urllib.request
+
+EXPECTED_RUNTIME_VERSION = "0.2.0"
+EXPECTED_RUNTIME_VERSION_OUTPUT = f"RBEK {EXPECTED_RUNTIME_VERSION}"
+
+INSTALLER_URL = "https://releases.rbekplatform.com/cli/stable/install.sh"
+INSTALLER_SHA256 = "0a3fabcad4c114c133b96cb71e1406d25279c2c05fa3b37f95a8e446a10b7c86"
+
+DEMO_URL = (
+    "https://raw.githubusercontent.com/"
+    "rbekplatform/rbek/main/examples/real-governed-agent/demo.sh"
+)
+DEMO_SHA256 = "17d299b02a38aec3f722ead47153a82e0f28be2c208d6a099590984e978df2d6"
+
+RUNTIME_COMMAND = "rbek-cli"
+
+
+class RbekBootstrapError(RuntimeError):
+    pass
+
+
+def _sha256(data: bytes) -> str:
+    return hashlib.sha256(data).hexdigest()
+
+
+def _download_verified(url: str, expected_sha256: str) -> bytes:
+    request = urllib.request.Request(
+        url,
+        headers={"User-Agent": "rbek-pypi-bootstrap/0.2.0"},
+    )
+
+    with urllib.request.urlopen(request, timeout=30) as response:
+        data = response.read()
+
+    actual = _sha256(data)
+
+    if actual != expected_sha256:
+        raise RbekBootstrapError(
+            "Downloaded RBEK artifact failed SHA256 validation: "
+            f"expected={expected_sha256} actual={actual}"
+        )
+
+    return data
+
+
+def _runtime_path() -> str | None:
+    return shutil.which(RUNTIME_COMMAND)
+
+
+def _runtime_version(runtime: str) -> str:
+    completed = subprocess.run(
+        [runtime, "--version"],
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+    return completed.stdout.strip()
+
+
+def _validate_runtime(runtime: str) -> None:
+    actual = _runtime_version(runtime)
+
+    if actual != EXPECTED_RUNTIME_VERSION_OUTPUT:
+        raise RbekBootstrapError(
+            "RBEK runtime version mismatch: "
+            f"expected={EXPECTED_RUNTIME_VERSION_OUTPUT!r} "
+            f"actual={actual!r}"
+        )
+
+
+def _install_runtime() -> str:
+    installer = _download_verified(
+        INSTALLER_URL,
+        INSTALLER_SHA256,
+    )
+
+    with tempfile.TemporaryDirectory(prefix="rbek-pypi-install-") as tmp:
+        path = pathlib.Path(tmp) / "install.sh"
+        path.write_bytes(installer)
+        path.chmod(0o700)
+
+        subprocess.run(
+            ["bash", str(path)],
+            check=True,
+            stdout=sys.stderr,
+            stderr=sys.stderr,
+        )
+
+    runtime = _runtime_path()
+
+    if runtime is None:
+        raise RbekBootstrapError(
+            "RBEK installer completed but rbek-cli was not found in PATH."
+        )
+
+    _validate_runtime(runtime)
+    return runtime
+
+
+def ensure_runtime() -> str:
+    runtime = _runtime_path()
+
+    if runtime is None:
+        runtime = _install_runtime()
+    else:
+        _validate_runtime(runtime)
+
+    return runtime
+
+
+def run_demo() -> int:
+    demo = _download_verified(
+        DEMO_URL,
+        DEMO_SHA256,
+    )
+
+    with tempfile.TemporaryDirectory(prefix="rbek-pypi-demo-") as tmp:
+        path = pathlib.Path(tmp) / "demo.sh"
+        path.write_bytes(demo)
+        path.chmod(0o700)
+
+        completed = subprocess.run(
+            ["bash", str(path)],
+            check=False,
+        )
+
+    return int(completed.returncode)
+
+
+def _delegate(runtime: str, args: list[str]) -> int:
+    completed = subprocess.run(
+        [runtime, *args],
+        check=False,
+    )
+    return int(completed.returncode)
+
+
+def main() -> None:
+    args = sys.argv[1:]
+
+    try:
+        if args == ["demo"]:
+            ensure_runtime()
+            raise SystemExit(run_demo())
+
+        runtime = ensure_runtime()
+        raise SystemExit(_delegate(runtime, args))
+
+    except KeyboardInterrupt:
+        raise SystemExit(130)
+
+    except RbekBootstrapError as exc:
+        print(f"RBEK bootstrap error: {exc}", file=sys.stderr)
+        raise SystemExit(2)
+
+    except (OSError, subprocess.SubprocessError) as exc:
+        print(f"RBEK bootstrap failure: {exc}", file=sys.stderr)
+        raise SystemExit(3)