scopeforge 0.1.0__tar.gz

scopeforge-0.1.0/.gitignore

@@ -0,0 +1,30 @@
+node_modules/
+dist/
+build/
+.turbo/
+*.tsbuildinfo
+
+.venv/
+__pycache__/
+*.pyc
+*.pyo
+*.egg-info/
+uv.lock.bak/
+
+.scopeforge/
+runs/
+
+*.log
+.DS_Store
+.env
+.env.*
+!.env.example
+
+coverage/
+.nyc_output/
+.pytest_cache/
+.hypothesis/
+
+# Generated SBOM / provenance (run `uv run python scripts/sbom.py`)
+sbom.json
+provenance.json

scopeforge-0.1.0/PKG-INFO

@@ -0,0 +1,188 @@
+Metadata-Version: 2.5
+Name: scopeforge
+Version: 0.1.0
+Summary: ScopeForge — Commercial-Grade Cybersecurity Multi-Agent Harness & Interactive TUI
+Author-email: Boopathi Raj <boopathi@neuronestai.in>
+License: Apache-2.0
+Keywords: agent-harness,claude-code,cybersecurity,langchain,langgraph,mcp,security-automation,textual,tui
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Terminals
+Requires-Python: >=3.12
+Requires-Dist: anyio>=4.4
+Requires-Dist: httpx>=0.27
+Requires-Dist: langchain>=1.0.0
+Requires-Dist: langgraph>=1.0.0
+Requires-Dist: llama-index-core>=0.14.0
+Requires-Dist: pydantic>=2.7
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: textual>=8.0.0
+Provides-Extra: dev
+Requires-Dist: hypothesis>=6; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: respx>=0.22; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# ScopeForge
+
+> **Commercial-Grade Cybersecurity Multi-Agent Harness & Claude Code Style TUI**  
+> Autonomous SecOps Orchestrator, LangGraph Multi-Agent Team, LangChain Tool Harness, MCP Bridge & Interactive Terminal UI.
+
+[![PyPI version](https://img.shields.io/pypi/v/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![Python Versions](https://img.shields.io/pypi/pyversions/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![Built with Textual](https://img.shields.io/badge/UI-Textual-darkviolet.svg)](https://textual.textualize.io/)
+[![Orchestration LangGraph](https://img.shields.io/badge/Orchestrator-LangGraph-orange.svg)](https://langchain-ai.github.io/langgraph/)
+
+---
+
+## ⚡ What is ScopeForge?
+
+**ScopeForge** is a standalone, commercial-grade autonomous cybersecurity agent harness and terminal interface designed to work like **Claude Code** and **Open Code**, but specifically engineered with **ScopeGate Rules of Engagement (RoE)** safety guarantees.
+
+Powered by **LangChain**, **LangGraph**, **Textual**, and the **Model Context Protocol (MCP)**, ScopeForge coordinates specialized cybersecurity agents to perform automated reconnaissance, vulnerability scanning, static code analysis (SAST), proof-of-concept verification, and executive reporting—or operates as a general-purpose AI coding and system administration assistant.
+
+---
+
+## 🚀 Installation & Quickstart
+
+### 1. Install via pip / pipx / uv
+
+```bash
+# Recommended: Install using pipx (isolated environment)
+pipx install scopeforge
+
+# Or standard pip
+pip install scopeforge
+
+# Or run instantly without installation via uv
+uvx scopeforge
+```
+
+### 2. Launch the Interactive TUI
+
+Simply type `scopeforge` or the shorthand `sf` in your terminal:
+
+```bash
+scopeforge
+# Or:
+sf
+```
+
+ScopeForge will launch directly into the dark-themed reactive terminal UI.
+
+---
+
+## ⌨️ Modern Terminal Shortcuts
+
+ScopeForge uses standard modern terminal `Ctrl+[key]` bindings:
+
+| Shortcut | Secondary | Action | Description |
+|:---:|:---:|:---|:---|
+| <kbd>Ctrl+M</kbd> | <kbd>F1</kbd> | **Model Switcher** | Open live model picker, filter presets, or configure custom endpoints |
+| <kbd>Ctrl+H</kbd> | <kbd>F2</kbd> | **Help Cheatsheet** | Show all slash commands, shortcuts, and agent roles |
+| <kbd>Ctrl+O</kbd> | <kbd>F3</kbd> | **Toggle SecOps Mode** | Cycle policy gates (`plan` ↔ `live` ↔ `artifacts`) |
+| <kbd>Ctrl+B</kbd> | <kbd>F4</kbd> | **Toggle Sidebar** | Expand or collapse agent telemetry and finding ledger |
+| <kbd>Ctrl+W</kbd> | <kbd>F5</kbd> | **SecOps Wiki** | Open persistent knowledge base and user preferences |
+| <kbd>Ctrl+Y</kbd> | <kbd>F6</kbd> | **Copy Last Response** | Copy the latest AI response to system clipboard |
+| <kbd>Ctrl+T</kbd> | <kbd>F7</kbd> | **Toggle Native Mouse** | Switch between TUI clicks and terminal text selection |
+| <kbd>Ctrl+L</kbd> | — | **Clear Screen** | Clear conversation stream and reset buffer |
+| <kbd>Ctrl+Q</kbd> | — | **Quit** | Safely exit ScopeForge |
+
+---
+
+## 🤖 Multi-Agent Team (LangGraph)
+
+ScopeForge routes tasks dynamically to specialized autonomous agents:
+
+- 🧠 **Supervisor**: General architecture, system management, code discussion, and high-level strategy.
+- 💻 **DevAgent**: Local code workspace operations, terminal sandbox commands, skill installation, and live web research.
+- 🛰️ **ReconAgent**: Passive & active reconnaissance, port discovery telemetry, and attack surface enumeration.
+- 🔬 **AuditAgent**: Static code auditing (SAST), CVE advisory correlation, and OWASP vulnerability identification.
+- ⚡ **ExploitAgent**: Controlled proof-of-concept (PoC) validation within strict authorized bounds.
+- 📋 **ReportAgent**: Executive SecOps summary, CVSS scoring, and remediation action plans.
+
+Agents communicate asynchronously using the cryptographically verified **Agent-to-Agent (A2A) Protocol Bus**.
+
+---
+
+## 🛠️ LangChain Autonomous Tool-Calling Harness
+
+ScopeForge provides real autonomous tool execution through LangChain:
+- **Autonomous Tool Binding**: Models (`OpenRouter`, `Groq`, `DeepSeek`, `Claude`, `OpenAI`) are automatically bound to the complete toolsuite and active MCP tools via `chat_model.bind_tools()`.
+- **Iterative Tool Execution**: The harness detects `tool_calls`, executes tools safely via the ScopeGate middleware pipeline, feeds `ToolMessage` outputs back into context, and synthesizes answers iteratively.
+- **Built-in Tools**:
+  - `bash_cli`: Sandboxed shell execution with dangerous-pattern blocking.
+  - `google_web_search`: Live web search for fast technical lookups.
+  - `view_file` / `write_file` / `edit_file`: Surgical code workspace inspection and editing.
+  - `glob_files` / `grep_search`: Fast repository pattern discovery.
+  - `git_status_tool` / `git_diff_tool` / `git_commit_tool`: Git version control operations.
+  - `recon_port_scan` / `web_surface_probe`: Perimeter discovery tools.
+  - `sast_code_audit` / `cve_advisory_search`: Vulnerability triage tools.
+
+---
+
+## 🌐 Model Support & Custom API Configuration
+
+ScopeForge supports any OpenAI-compatible, Anthropic, or Ollama provider:
+
+### Quick Presets (Zero Setup):
+- `openrouter-free`: Meta-router for high-availability free frontier models (`openrouter/free`).
+- `openrouter-free-nemotron`: NVIDIA Nemotron 550B Free.
+- `groq-llama3`: Llama 3.3 70B on Groq Ultra-Fast inference.
+- `ollama-llama3`: Offline local models via Ollama.
+
+### Custom Endpoints & Third-Party Proxies:
+Open the Model Switcher (<kbd>Ctrl+M</kbd>) or use slash commands:
+
+```text
+/model
+/config set key <API_KEY>
+/config set model <MODEL_ID>
+/config set base <CUSTOM_URL>
+```
+
+ScopeForge features native paste de-duplication and custom endpoint normalization (no forced path appending).
+
+---
+
+## 🔌 Model Context Protocol (MCP) & Skills
+
+### MCP Integration:
+```text
+/mcp                                    # List all configured MCP servers
+/mcp tools                              # View all registered MCP tools
+/mcp add <name> <command>               # Add and enable an MCP server
+/mcp enable <name>                      # Enable a server
+/mcp disable <name>                     # Disable a server
+```
+
+### Extensible Skills (`SKILL.md`):
+Install custom skills from any Git repository:
+```text
+/skill install https://github.com/example/sec-skills
+/skill list
+```
+
+---
+
+## 🛡️ ScopeGate Rules of Engagement (RoE)
+
+ScopeForge operates under 3 strict enforcement modes:
+1. **PLAN (`plan`)**: Zero network egress. Generates falsifiable hypotheses, models attack surface, and plans audits.
+2. **ARTIFACTS (`artifacts`)**: Inspects locally supplied source code, HAR files, and logs without external traffic.
+3. **LIVE (`live`)**: Network tools enabled strictly against authorized scope domains and IPs.
+
+---
+
+## 📜 License
+
+Licensed under the **Apache License, Version 2.0**.

scopeforge-0.1.0/README.md

@@ -0,0 +1,155 @@
+# ScopeForge
+
+> **Commercial-Grade Cybersecurity Multi-Agent Harness & Claude Code Style TUI**  
+> Autonomous SecOps Orchestrator, LangGraph Multi-Agent Team, LangChain Tool Harness, MCP Bridge & Interactive Terminal UI.
+
+[![PyPI version](https://img.shields.io/pypi/v/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![Python Versions](https://img.shields.io/pypi/pyversions/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![Built with Textual](https://img.shields.io/badge/UI-Textual-darkviolet.svg)](https://textual.textualize.io/)
+[![Orchestration LangGraph](https://img.shields.io/badge/Orchestrator-LangGraph-orange.svg)](https://langchain-ai.github.io/langgraph/)
+
+---
+
+## ⚡ What is ScopeForge?
+
+**ScopeForge** is a standalone, commercial-grade autonomous cybersecurity agent harness and terminal interface designed to work like **Claude Code** and **Open Code**, but specifically engineered with **ScopeGate Rules of Engagement (RoE)** safety guarantees.
+
+Powered by **LangChain**, **LangGraph**, **Textual**, and the **Model Context Protocol (MCP)**, ScopeForge coordinates specialized cybersecurity agents to perform automated reconnaissance, vulnerability scanning, static code analysis (SAST), proof-of-concept verification, and executive reporting—or operates as a general-purpose AI coding and system administration assistant.
+
+---
+
+## 🚀 Installation & Quickstart
+
+### 1. Install via pip / pipx / uv
+
+```bash
+# Recommended: Install using pipx (isolated environment)
+pipx install scopeforge
+
+# Or standard pip
+pip install scopeforge
+
+# Or run instantly without installation via uv
+uvx scopeforge
+```
+
+### 2. Launch the Interactive TUI
+
+Simply type `scopeforge` or the shorthand `sf` in your terminal:
+
+```bash
+scopeforge
+# Or:
+sf
+```
+
+ScopeForge will launch directly into the dark-themed reactive terminal UI.
+
+---
+
+## ⌨️ Modern Terminal Shortcuts
+
+ScopeForge uses standard modern terminal `Ctrl+[key]` bindings:
+
+| Shortcut | Secondary | Action | Description |
+|:---:|:---:|:---|:---|
+| <kbd>Ctrl+M</kbd> | <kbd>F1</kbd> | **Model Switcher** | Open live model picker, filter presets, or configure custom endpoints |
+| <kbd>Ctrl+H</kbd> | <kbd>F2</kbd> | **Help Cheatsheet** | Show all slash commands, shortcuts, and agent roles |
+| <kbd>Ctrl+O</kbd> | <kbd>F3</kbd> | **Toggle SecOps Mode** | Cycle policy gates (`plan` ↔ `live` ↔ `artifacts`) |
+| <kbd>Ctrl+B</kbd> | <kbd>F4</kbd> | **Toggle Sidebar** | Expand or collapse agent telemetry and finding ledger |
+| <kbd>Ctrl+W</kbd> | <kbd>F5</kbd> | **SecOps Wiki** | Open persistent knowledge base and user preferences |
+| <kbd>Ctrl+Y</kbd> | <kbd>F6</kbd> | **Copy Last Response** | Copy the latest AI response to system clipboard |
+| <kbd>Ctrl+T</kbd> | <kbd>F7</kbd> | **Toggle Native Mouse** | Switch between TUI clicks and terminal text selection |
+| <kbd>Ctrl+L</kbd> | — | **Clear Screen** | Clear conversation stream and reset buffer |
+| <kbd>Ctrl+Q</kbd> | — | **Quit** | Safely exit ScopeForge |
+
+---
+
+## 🤖 Multi-Agent Team (LangGraph)
+
+ScopeForge routes tasks dynamically to specialized autonomous agents:
+
+- 🧠 **Supervisor**: General architecture, system management, code discussion, and high-level strategy.
+- 💻 **DevAgent**: Local code workspace operations, terminal sandbox commands, skill installation, and live web research.
+- 🛰️ **ReconAgent**: Passive & active reconnaissance, port discovery telemetry, and attack surface enumeration.
+- 🔬 **AuditAgent**: Static code auditing (SAST), CVE advisory correlation, and OWASP vulnerability identification.
+- ⚡ **ExploitAgent**: Controlled proof-of-concept (PoC) validation within strict authorized bounds.
+- 📋 **ReportAgent**: Executive SecOps summary, CVSS scoring, and remediation action plans.
+
+Agents communicate asynchronously using the cryptographically verified **Agent-to-Agent (A2A) Protocol Bus**.
+
+---
+
+## 🛠️ LangChain Autonomous Tool-Calling Harness
+
+ScopeForge provides real autonomous tool execution through LangChain:
+- **Autonomous Tool Binding**: Models (`OpenRouter`, `Groq`, `DeepSeek`, `Claude`, `OpenAI`) are automatically bound to the complete toolsuite and active MCP tools via `chat_model.bind_tools()`.
+- **Iterative Tool Execution**: The harness detects `tool_calls`, executes tools safely via the ScopeGate middleware pipeline, feeds `ToolMessage` outputs back into context, and synthesizes answers iteratively.
+- **Built-in Tools**:
+  - `bash_cli`: Sandboxed shell execution with dangerous-pattern blocking.
+  - `google_web_search`: Live web search for fast technical lookups.
+  - `view_file` / `write_file` / `edit_file`: Surgical code workspace inspection and editing.
+  - `glob_files` / `grep_search`: Fast repository pattern discovery.
+  - `git_status_tool` / `git_diff_tool` / `git_commit_tool`: Git version control operations.
+  - `recon_port_scan` / `web_surface_probe`: Perimeter discovery tools.
+  - `sast_code_audit` / `cve_advisory_search`: Vulnerability triage tools.
+
+---
+
+## 🌐 Model Support & Custom API Configuration
+
+ScopeForge supports any OpenAI-compatible, Anthropic, or Ollama provider:
+
+### Quick Presets (Zero Setup):
+- `openrouter-free`: Meta-router for high-availability free frontier models (`openrouter/free`).
+- `openrouter-free-nemotron`: NVIDIA Nemotron 550B Free.
+- `groq-llama3`: Llama 3.3 70B on Groq Ultra-Fast inference.
+- `ollama-llama3`: Offline local models via Ollama.
+
+### Custom Endpoints & Third-Party Proxies:
+Open the Model Switcher (<kbd>Ctrl+M</kbd>) or use slash commands:
+
+```text
+/model
+/config set key <API_KEY>
+/config set model <MODEL_ID>
+/config set base <CUSTOM_URL>
+```
+
+ScopeForge features native paste de-duplication and custom endpoint normalization (no forced path appending).
+
+---
+
+## 🔌 Model Context Protocol (MCP) & Skills
+
+### MCP Integration:
+```text
+/mcp                                    # List all configured MCP servers
+/mcp tools                              # View all registered MCP tools
+/mcp add <name> <command>               # Add and enable an MCP server
+/mcp enable <name>                      # Enable a server
+/mcp disable <name>                     # Disable a server
+```
+
+### Extensible Skills (`SKILL.md`):
+Install custom skills from any Git repository:
+```text
+/skill install https://github.com/example/sec-skills
+/skill list
+```
+
+---
+
+## 🛡️ ScopeGate Rules of Engagement (RoE)
+
+ScopeForge operates under 3 strict enforcement modes:
+1. **PLAN (`plan`)**: Zero network egress. Generates falsifiable hypotheses, models attack surface, and plans audits.
+2. **ARTIFACTS (`artifacts`)**: Inspects locally supplied source code, HAR files, and logs without external traffic.
+3. **LIVE (`live`)**: Network tools enabled strictly against authorized scope domains and IPs.
+
+---
+
+## 📜 License
+
+Licensed under the **Apache License, Version 2.0**.

scopeforge-0.1.0/pyproject.toml

@@ -0,0 +1,65 @@
+[project]
+name = "scopeforge"
+version = "0.1.0"
+description = "ScopeForge — Commercial-Grade Cybersecurity Multi-Agent Harness & Interactive TUI"
+readme = "README.md"
+requires-python = ">=3.12"
+license = { text = "Apache-2.0" }
+authors = [
+    { name = "Boopathi Raj", email = "boopathi@neuronestai.in" },
+]
+keywords = [
+    "cybersecurity",
+    "agent-harness",
+    "claude-code",
+    "tui",
+    "textual",
+    "langchain",
+    "langgraph",
+    "mcp",
+    "security-automation",
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Information Technology",
+    "License :: OSI Approved :: Apache Software License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Security",
+    "Topic :: Terminals",
+]
+dependencies = [
+    "pydantic>=2.7",
+    "anyio>=4.4",
+    "httpx>=0.27",
+    "textual>=8.0.0",
+    "langchain>=1.0.0",
+    "langgraph>=1.0.0",
+    "llama-index-core>=0.14.0",
+    "pyyaml>=6.0",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8", "pytest-asyncio>=0.23", "respx>=0.22", "hypothesis>=6"]
+
+[project.scripts]
+scopeforge = "scopeforge_engine.tui.app:main"
+sourceforge = "scopeforge_engine.tui.app:main"
+sf = "scopeforge_engine.tui.app:main"
+agi = "scopeforge_engine.tui.app:main"
+scopeforge-tui = "scopeforge_engine.tui.app:main"
+scopeforge-engine = "scopeforge_engine.server:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/scopeforge_engine"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]

scopeforge-0.1.0/src/scopeforge_engine/__init__.py

@@ -0,0 +1 @@
+"""ScopeForge engine package (Phase 1 spine)."""

scopeforge-0.1.0/src/scopeforge_engine/a2a/__init__.py

@@ -0,0 +1,5 @@
+"""Agent-to-Agent (A2A) protocol package."""
+from .protocol import A2AMessage, A2AIntent
+from .bus import A2ABus
+
+__all__ = ["A2AMessage", "A2AIntent", "A2ABus"]

scopeforge-0.1.0/src/scopeforge_engine/a2a/bus.py

@@ -0,0 +1,65 @@
+"""Agent-to-Agent (A2A) Message Bus."""
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Callable, Dict, List, Optional
+
+from .protocol import A2AMessage, A2AIntent
+
+
+class A2ABus:
+    """Central bus for inter-agent communication, telemetry, and collaboration."""
+
+    def __init__(self, log_path: Optional[Path] = None):
+        self.log_path = log_path or Path(".scopeforge/a2a_log.jsonl")
+        self.log_path.parent.mkdir(parents=True, exist_ok=True)
+        self.messages: List[A2AMessage] = []
+        self.subscribers: List[Callable[[A2AMessage], None]] = []
+
+    def subscribe(self, callback: Callable[[A2AMessage], None]):
+        """Subscribe to incoming A2A messages."""
+        self.subscribers.append(callback)
+
+    def publish(self, message: A2AMessage) -> A2AMessage:
+        """Sign and broadcast a message to subscribers and audit log."""
+        if not message.signature:
+            message.sign()
+
+        self.messages.append(message)
+
+        # Append to disk log
+        try:
+            with open(self.log_path, "a", encoding="utf-8") as f:
+                f.write(message.model_dump_json() + "\n")
+        except Exception:
+            pass
+
+        # Notify subscribers
+        for sub in self.subscribers:
+            try:
+                sub(message)
+            except Exception:
+                pass
+
+        return message
+
+    def send(
+        self,
+        sender: str,
+        recipient: str,
+        intent: A2AIntent,
+        payload: Dict,
+    ) -> A2AMessage:
+        """Convenience method to construct and publish an A2A message."""
+        msg = A2AMessage(
+            sender=sender,
+            recipient=recipient,
+            intent=intent,
+            payload=payload,
+        )
+        return self.publish(msg)
+
+    def get_history(self, limit: int = 50) -> List[A2AMessage]:
+        """Get recent A2A messages."""
+        return self.messages[-limit:]

scopeforge-0.1.0/src/scopeforge_engine/a2a/protocol.py

@@ -0,0 +1,44 @@
+"""A2A (Agent-to-Agent) Protocol: Standardized inter-agent messaging and delegation format."""
+from __future__ import annotations
+
+import datetime
+import hashlib
+import json
+import uuid
+from enum import Enum
+from typing import Any, Dict, Optional
+from pydantic import BaseModel, Field
+
+
+class A2AIntent(str, Enum):
+    TASK_DELEGATION = "TASK_DELEGATION"
+    TASK_RESULT = "TASK_RESULT"
+    EVIDENCE_SHARING = "EVIDENCE_SHARING"
+    CONSENSUS_REQUEST = "CONSENSUS_REQUEST"
+    CONSENSUS_RESPONSE = "CONSENSUS_RESPONSE"
+    HANDOVER = "HANDOVER"
+    ALERT = "ALERT"
+
+
+class A2AMessage(BaseModel):
+    """Standardized A2A Protocol Envelope."""
+    message_id: str = Field(default_factory=lambda: f"a2a_{uuid.uuid4().hex[:10]}")
+    timestamp: str = Field(default_factory=lambda: datetime.datetime.now(datetime.timezone.utc).isoformat())
+    protocol_version: str = "1.0.0"
+    sender: str
+    recipient: str
+    intent: A2AIntent
+    payload: Dict[str, Any]
+    signature: str = ""
+
+    def sign(self) -> str:
+        """Compute cryptographic hash of the message payload for integrity."""
+        raw = f"{self.sender}:{self.recipient}:{self.intent}:{json.dumps(self.payload, sort_keys=True)}"
+        self.signature = hashlib.sha256(raw.encode("utf-8")).hexdigest()
+        return self.signature
+
+    def verify(self) -> bool:
+        """Verify the integrity hash of the message."""
+        raw = f"{self.sender}:{self.recipient}:{self.intent}:{json.dumps(self.payload, sort_keys=True)}"
+        expected = hashlib.sha256(raw.encode("utf-8")).hexdigest()
+        return self.signature == expected