rowproof 0.1.0__tar.gz

rowproof-0.1.0/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the
+      purposes of this License, Derivative Works shall not include works
+      that remain separable from, or merely link (or bind by name) to the
+      interfaces of, the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including the
+      original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing
+      the origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 the rowproof authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

rowproof-0.1.0/PKG-INFO

@@ -0,0 +1,172 @@
+Metadata-Version: 2.4
+Name: rowproof
+Version: 0.1.0
+Summary: Prove a database migration or replication didn't lose, add or change a single row.
+License: Apache-2.0
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: jinja2>=3.1
+Requires-Dist: typer>=0.12
+Requires-Dist: rich>=13
+Requires-Dist: psycopg[binary]>=3.1
+Requires-Dist: clickhouse-connect>=0.7
+Provides-Extra: snowflake
+Requires-Dist: snowflake-connector-python>=3.6; extra == "snowflake"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+Requires-Dist: ruff>=0.4; extra == "dev"
+Requires-Dist: testcontainers>=4.0; extra == "dev"
+Dynamic: license-file
+
+# rowproof
+
+**rowproof proves that a database migration or replication didn't lose, add or change a single row — and gives you a report you can sign off on.**
+
+Diffing is the plumbing. The product is the proof: exact counts, every difference explained with a rule citation, reproducible SQL, and a self-contained HTML sign-off report.
+
+![rowproof HTML sign-off report](docs/screenshot-report.png)
+
+_60-second terminal demo GIF: recording script is in [docs/demo.tape](docs/demo.tape) (`vhs docs/demo.tape`, needs `ttyd`+`ffmpeg`) — not yet rendered in this environment; see the CLI output further down for what it shows._
+
+## Install
+
+```bash
+pipx install rowproof
+pipx install "rowproof[snowflake]"   # adds Snowflake support
+```
+
+(`pip install rowproof` / `pip install "rowproof[snowflake]"` work too — `pipx` just keeps the CLI's dependencies out of your other Python environments.)
+
+## 60-second demo
+
+Using the Postgres and ClickHouse containers from this repo's `docker-compose.yml`:
+
+```bash
+docker compose up -d
+rowproof diff postgres://postgres:postgres@localhost:5432/postgres/public.orders \
+              clickhouse://default:clickhouse@localhost:8123/default/orders \
+              --key id --output html --html-path report.html
+```
+
+Two commands. Open `report.html` and you have a sign-off document — exact row counts on both sides, every difference cited against a published rule, and the SQL to reproduce each one.
+
+Run it with the default terminal output instead (no `--output`/`--html-path`) and here's what a real run looks like — this table pair has one row deliberately changed and one deliberately deleted on the ClickHouse side, and rowproof catches both:
+
+```
+$ rowproof diff postgres://postgres:postgres@127.0.0.1:5432/postgres/public.orders \
+               clickhouse://default:clickhouse@127.0.0.1:8123/default/orders --key id
+public.orders  postgres:postgres/public.orders  ->  clickhouse:default/orders
+  rows           5000                 4999
+  key            id
+  algorithm      hashdiff · 8 segments · 10 queries/side · 0.2s
+
+  missing in target   1
+  extra in target     0
+  changed             1
+
+    key=42  customer  'customer-42' -> 'customer-999'  (STR-1)
+    key=4500  missing
+  warning: row counts differ: source=5000 target=4999
+
+  result   DIFFERENT   exit 1
+```
+
+## What it checks — and what it never does
+
+- Verifies every row matches: counts, missing rows, extra rows, and changed values, down to the specific column and the exact rule that governed the comparison (a timestamp precision mismatch and a NULL-vs-empty-string mismatch are not the same bug, and rowproof tells you which one you have).
+- **Never writes to your database.** Every connector is read-only by construction — `SELECT` and schema-introspection queries only, nothing else. It works with a read-only database role.
+- **Zero telemetry.** Nothing phones home. Read the source; there's no network call in this codebase that isn't the one you told it to make.
+
+## Supported engines
+
+| Engine | Driver | Notes |
+|---|---|---|
+| Postgres | `psycopg` (v3) | |
+| ClickHouse | `clickhouse-connect` | |
+| Snowflake | `snowflake-connector-python` | Optional extra: `rowproof[snowflake]` |
+
+## Supported types (canonical comparison rules)
+
+Every cross-engine type difference is governed by one of these published rules, and every difference rowproof reports cites the rule ID that applied — never a vague "values differ."
+
+| Rule | Applies to | Canonical form | Notes |
+|---|---|---|---|
+| NULL-1 | any nullable | the literal `\N` | Distinct from empty string. `NULL` ≠ `''` always. |
+| INT-1 | integers | decimal digits, no leading zeros, `-` sign | |
+| DEC-1 | fixed-point decimal | digits at the pair's minimum scale, round half-even | Reported when scales differ |
+| FLT-1 | float / double | scientific notation, 15 significant digits by default | `--float-precision N` overrides |
+| STR-1 | text | as-is, UTF-8 | No trimming, no case folding by default |
+| STR-2 | text, opt-in | `--trim` / `--case-insensitive` | Cited in output when active |
+| BOOL-1 | boolean | `true` / `false` | Handles integer 0/1 vs boolean across engines |
+| TS-1 | timestamp with tz | ISO 8601 UTC, `YYYY-MM-DDTHH:MM:SS.ffffffZ` | Always 6 fractional digits |
+| TS-2 | timestamp precision differs | rounded to the pair's lower precision | e.g. Postgres µs vs ClickHouse `DateTime` (seconds) |
+| TS-3 | timestamp without tz | rendered as-is with `Z`, assumed UTC, warns once | `--assume-tz` overrides |
+| DATE-1 | date | `YYYY-MM-DD` | |
+| TIME-1 | time | `HH:MM:SS.ffffff` | |
+| UUID-1 | uuid | lower-case, hyphenated | Handles a uuid stored as VARCHAR (Snowflake) |
+| BIN-1 | bytea / binary | lower-case hex | |
+| JSON-1 | json / jsonb | text after engine-side canonicalisation if available | Full key-order-independent compare is a future release |
+| ARR-1 | arrays | `[` + elements joined by `,` + `]` | Order-sensitive |
+| ENUM-1 | enums | the label as text | |
+| UNK-1 | anything unmapped | cast to text, warns once, cites the rule | Never fails a run over an unknown type |
+
+## How it works
+
+1. Get `MIN(pk)`, `MAX(pk)`, `COUNT(*)` on both sides.
+2. Split the key range into segments (~100k rows each).
+3. Hash each segment's normalised rows into one aggregate per side, in one query — the databases do the work, not the client.
+4. Compare hashes. Matching segments are done; mismatched ones bisect recursively until small.
+5. For small mismatched segments, fetch normalised rows from both sides and diff them in the client.
+6. Cap the collected row-level differences (`--max-diff-rows`); counts stay exact regardless.
+7. When both tables live in the same connection, skip all of the above — one `FULL OUTER JOIN` does it exactly, in one query.
+8. Client memory never holds more than one segment's worth of rows at a time — a 100-million-row table and a 100-row table cost the client about the same.
+
+## `rowproof explain` — proof of transparency
+
+`explain` prints the exact SQL a `diff` would run, without ever executing it against your data:
+
+```
+$ rowproof explain postgres://postgres:postgres@127.0.0.1:5432/postgres/public.orders \
+                   clickhouse://default:clickhouse@127.0.0.1:8123/default/orders --key id
+-- source: row-count and bounds
+SELECT MIN("id"), MAX("id"), COUNT(*) FROM "public"."orders"
+-- target: row-count and bounds
+SELECT MIN(`id`), MAX(`id`), COUNT(*) FROM `orders`
+-- source: uniqueness check on the key
+SELECT "id", COUNT(*) FROM "public"."orders" GROUP BY "id" HAVING COUNT(*) > 1 LIMIT 1
+-- target: uniqueness check on the key
+SELECT `id`, COUNT(*) FROM `orders` GROUP BY `id` HAVING COUNT(*) > 1 LIMIT 1
+-- source: per-segment count + hash (one per segment)
+SELECT COUNT(*), ((sum(((('x' || substr(md5(("id"::text) || E'\x1f' || ...
+-- target: per-segment count + hash (one per segment)
+SELECT COUNT(*), ((sum(toInt256(reinterpretAsInt64(reverse(unhex(substr(lower(hex(MD5(...
+```
+
+Every line above is real output from an actual Postgres/ClickHouse pair — copied verbatim, not hand-written. The hash expressions get long fast (each engine's DEC-1/TS-1 rendering is spelled out in full, no black box); the complete, unedited transcript for this exact table pair is in [docs/explain-output.txt](docs/explain-output.txt).
+
+## Exit codes (for CI)
+
+| Code | Meaning |
+|---|---|
+| `0` | Tables match |
+| `1` | Differences found |
+| `2` | Could not compare (schema incompatible, missing key, connection failure) |
+
+## How is this different from reladiff / data-diff?
+
+[reladiff](https://github.com/erezsh/reladiff) is an excellent, actively maintained diffing library, and rowproof uses the same hash-and-bisect idea it and its predecessor `data-diff` popularized. rowproof differs in three ways: every cross-engine type difference is governed by a published rule table and cited in the output; the output is a sign-off report meant to be attached to a cutover approval, not just a diff count; and the CLI is the free core of a hosted reconciliation service (scheduled runs, history, alerts) rather than a standalone library.
+
+## Benchmark
+
+100M rows, verified correct (exactly the 1,000 differences introduced, nothing else), 127 MB peak client memory, 8.95 minutes on a laptop with both databases sharing the same 8 vCPUs. Full methodology and hardware details in [docs/benchmarks.md](docs/benchmarks.md).
+
+## Roadmap
+
+- More engines: Databricks, BigQuery, Iceberg, MySQL
+- A hosted reconciliation service: scheduled runs, run history, Slack/email alerts, sign-off reports for a whole migration. Waitlist link coming soon.
+
+## Licence
+
+Apache 2.0.

rowproof-0.1.0/README.md

@@ -0,0 +1,150 @@
+# rowproof
+
+**rowproof proves that a database migration or replication didn't lose, add or change a single row — and gives you a report you can sign off on.**
+
+Diffing is the plumbing. The product is the proof: exact counts, every difference explained with a rule citation, reproducible SQL, and a self-contained HTML sign-off report.
+
+![rowproof HTML sign-off report](docs/screenshot-report.png)
+
+_60-second terminal demo GIF: recording script is in [docs/demo.tape](docs/demo.tape) (`vhs docs/demo.tape`, needs `ttyd`+`ffmpeg`) — not yet rendered in this environment; see the CLI output further down for what it shows._
+
+## Install
+
+```bash
+pipx install rowproof
+pipx install "rowproof[snowflake]"   # adds Snowflake support
+```
+
+(`pip install rowproof` / `pip install "rowproof[snowflake]"` work too — `pipx` just keeps the CLI's dependencies out of your other Python environments.)
+
+## 60-second demo
+
+Using the Postgres and ClickHouse containers from this repo's `docker-compose.yml`:
+
+```bash
+docker compose up -d
+rowproof diff postgres://postgres:postgres@localhost:5432/postgres/public.orders \
+              clickhouse://default:clickhouse@localhost:8123/default/orders \
+              --key id --output html --html-path report.html
+```
+
+Two commands. Open `report.html` and you have a sign-off document — exact row counts on both sides, every difference cited against a published rule, and the SQL to reproduce each one.
+
+Run it with the default terminal output instead (no `--output`/`--html-path`) and here's what a real run looks like — this table pair has one row deliberately changed and one deliberately deleted on the ClickHouse side, and rowproof catches both:
+
+```
+$ rowproof diff postgres://postgres:postgres@127.0.0.1:5432/postgres/public.orders \
+               clickhouse://default:clickhouse@127.0.0.1:8123/default/orders --key id
+public.orders  postgres:postgres/public.orders  ->  clickhouse:default/orders
+  rows           5000                 4999
+  key            id
+  algorithm      hashdiff · 8 segments · 10 queries/side · 0.2s
+
+  missing in target   1
+  extra in target     0
+  changed             1
+
+    key=42  customer  'customer-42' -> 'customer-999'  (STR-1)
+    key=4500  missing
+  warning: row counts differ: source=5000 target=4999
+
+  result   DIFFERENT   exit 1
+```
+
+## What it checks — and what it never does
+
+- Verifies every row matches: counts, missing rows, extra rows, and changed values, down to the specific column and the exact rule that governed the comparison (a timestamp precision mismatch and a NULL-vs-empty-string mismatch are not the same bug, and rowproof tells you which one you have).
+- **Never writes to your database.** Every connector is read-only by construction — `SELECT` and schema-introspection queries only, nothing else. It works with a read-only database role.
+- **Zero telemetry.** Nothing phones home. Read the source; there's no network call in this codebase that isn't the one you told it to make.
+
+## Supported engines
+
+| Engine | Driver | Notes |
+|---|---|---|
+| Postgres | `psycopg` (v3) | |
+| ClickHouse | `clickhouse-connect` | |
+| Snowflake | `snowflake-connector-python` | Optional extra: `rowproof[snowflake]` |
+
+## Supported types (canonical comparison rules)
+
+Every cross-engine type difference is governed by one of these published rules, and every difference rowproof reports cites the rule ID that applied — never a vague "values differ."
+
+| Rule | Applies to | Canonical form | Notes |
+|---|---|---|---|
+| NULL-1 | any nullable | the literal `\N` | Distinct from empty string. `NULL` ≠ `''` always. |
+| INT-1 | integers | decimal digits, no leading zeros, `-` sign | |
+| DEC-1 | fixed-point decimal | digits at the pair's minimum scale, round half-even | Reported when scales differ |
+| FLT-1 | float / double | scientific notation, 15 significant digits by default | `--float-precision N` overrides |
+| STR-1 | text | as-is, UTF-8 | No trimming, no case folding by default |
+| STR-2 | text, opt-in | `--trim` / `--case-insensitive` | Cited in output when active |
+| BOOL-1 | boolean | `true` / `false` | Handles integer 0/1 vs boolean across engines |
+| TS-1 | timestamp with tz | ISO 8601 UTC, `YYYY-MM-DDTHH:MM:SS.ffffffZ` | Always 6 fractional digits |
+| TS-2 | timestamp precision differs | rounded to the pair's lower precision | e.g. Postgres µs vs ClickHouse `DateTime` (seconds) |
+| TS-3 | timestamp without tz | rendered as-is with `Z`, assumed UTC, warns once | `--assume-tz` overrides |
+| DATE-1 | date | `YYYY-MM-DD` | |
+| TIME-1 | time | `HH:MM:SS.ffffff` | |
+| UUID-1 | uuid | lower-case, hyphenated | Handles a uuid stored as VARCHAR (Snowflake) |
+| BIN-1 | bytea / binary | lower-case hex | |
+| JSON-1 | json / jsonb | text after engine-side canonicalisation if available | Full key-order-independent compare is a future release |
+| ARR-1 | arrays | `[` + elements joined by `,` + `]` | Order-sensitive |
+| ENUM-1 | enums | the label as text | |
+| UNK-1 | anything unmapped | cast to text, warns once, cites the rule | Never fails a run over an unknown type |
+
+## How it works
+
+1. Get `MIN(pk)`, `MAX(pk)`, `COUNT(*)` on both sides.
+2. Split the key range into segments (~100k rows each).
+3. Hash each segment's normalised rows into one aggregate per side, in one query — the databases do the work, not the client.
+4. Compare hashes. Matching segments are done; mismatched ones bisect recursively until small.
+5. For small mismatched segments, fetch normalised rows from both sides and diff them in the client.
+6. Cap the collected row-level differences (`--max-diff-rows`); counts stay exact regardless.
+7. When both tables live in the same connection, skip all of the above — one `FULL OUTER JOIN` does it exactly, in one query.
+8. Client memory never holds more than one segment's worth of rows at a time — a 100-million-row table and a 100-row table cost the client about the same.
+
+## `rowproof explain` — proof of transparency
+
+`explain` prints the exact SQL a `diff` would run, without ever executing it against your data:
+
+```
+$ rowproof explain postgres://postgres:postgres@127.0.0.1:5432/postgres/public.orders \
+                   clickhouse://default:clickhouse@127.0.0.1:8123/default/orders --key id
+-- source: row-count and bounds
+SELECT MIN("id"), MAX("id"), COUNT(*) FROM "public"."orders"
+-- target: row-count and bounds
+SELECT MIN(`id`), MAX(`id`), COUNT(*) FROM `orders`
+-- source: uniqueness check on the key
+SELECT "id", COUNT(*) FROM "public"."orders" GROUP BY "id" HAVING COUNT(*) > 1 LIMIT 1
+-- target: uniqueness check on the key
+SELECT `id`, COUNT(*) FROM `orders` GROUP BY `id` HAVING COUNT(*) > 1 LIMIT 1
+-- source: per-segment count + hash (one per segment)
+SELECT COUNT(*), ((sum(((('x' || substr(md5(("id"::text) || E'\x1f' || ...
+-- target: per-segment count + hash (one per segment)
+SELECT COUNT(*), ((sum(toInt256(reinterpretAsInt64(reverse(unhex(substr(lower(hex(MD5(...
+```
+
+Every line above is real output from an actual Postgres/ClickHouse pair — copied verbatim, not hand-written. The hash expressions get long fast (each engine's DEC-1/TS-1 rendering is spelled out in full, no black box); the complete, unedited transcript for this exact table pair is in [docs/explain-output.txt](docs/explain-output.txt).
+
+## Exit codes (for CI)
+
+| Code | Meaning |
+|---|---|
+| `0` | Tables match |
+| `1` | Differences found |
+| `2` | Could not compare (schema incompatible, missing key, connection failure) |
+
+## How is this different from reladiff / data-diff?
+
+[reladiff](https://github.com/erezsh/reladiff) is an excellent, actively maintained diffing library, and rowproof uses the same hash-and-bisect idea it and its predecessor `data-diff` popularized. rowproof differs in three ways: every cross-engine type difference is governed by a published rule table and cited in the output; the output is a sign-off report meant to be attached to a cutover approval, not just a diff count; and the CLI is the free core of a hosted reconciliation service (scheduled runs, history, alerts) rather than a standalone library.
+
+## Benchmark
+
+100M rows, verified correct (exactly the 1,000 differences introduced, nothing else), 127 MB peak client memory, 8.95 minutes on a laptop with both databases sharing the same 8 vCPUs. Full methodology and hardware details in [docs/benchmarks.md](docs/benchmarks.md).
+
+## Roadmap
+
+- More engines: Databricks, BigQuery, Iceberg, MySQL
+- A hosted reconciliation service: scheduled runs, run history, Slack/email alerts, sign-off reports for a whole migration. Waitlist link coming soon.
+
+## Licence
+
+Apache 2.0.

rowproof-0.1.0/pyproject.toml

@@ -0,0 +1,44 @@
+[project]
+name = "rowproof"
+version = "0.1.0"
+description = "Prove a database migration or replication didn't lose, add or change a single row."
+readme = "README.md"
+requires-python = ">=3.11"
+license = { text = "Apache-2.0" }
+
+dependencies = [
+    "pyyaml>=6.0",
+    "jinja2>=3.1",
+    "typer>=0.12",
+    "rich>=13",
+    "psycopg[binary]>=3.1",
+    "clickhouse-connect>=0.7",
+]
+
+[project.optional-dependencies]
+snowflake = ["snowflake-connector-python>=3.6"]
+dev = [
+    "pytest>=7.0",
+    "ruff>=0.4",
+    "testcontainers>=4.0",
+]
+
+[project.scripts]
+rowproof = "rowproof.cli.main:main"
+
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools.packages.find]
+include = ["rowproof*"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["."]
+markers = [
+    "integration: requires a real running Postgres (or other engine) instance",
+]
+
+[tool.ruff]
+line-length = 100

rowproof-0.1.0/rowproof/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"