stratl 0.1.0__py3-none-any.whl

stratl/__init__.py

@@ -0,0 +1,9 @@
+"""Stratl SDK: record AI decisions as verifiable evidence."""
+
+from stratl import replay
+from stratl.client import Client
+from stratl.decision import decision
+from stratl.srf import Decision, canonical_sha256, canonicalize
+
+__all__ = ["Client", "Decision", "canonical_sha256", "canonicalize", "decision", "replay"]
+__version__ = "0.1.0"

stratl/client.py

@@ -0,0 +1,226 @@
+"""HTTP client for the Stratl API, with a local spool so recording never blocks the application.
+
+`submit` sends the record, then uploads any artifacts the custody store does not already hold.
+It never raises for network problems: it spools the record and its artifacts and returns "spooled".
+`flush_spool` resends spooled items and reports what happened instead of raising.
+"""
+
+from __future__ import annotations
+
+import base64
+import json
+import os
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any, ClassVar, Literal
+
+import httpx
+
+from stratl.decision import Artifact
+from stratl.srf import Decision
+
+Status = Literal["recorded", "spooled"]
+OutcomeStatus = Literal["recorded", "failed"]
+
+
+@dataclass(slots=True)
+class FlushResult:
+    sent: int
+    remaining: int
+    error: str | None = None
+
+
+class Client:
+    def __init__(
+        self,
+        base_url: str | None = None,
+        api_key: str | None = None,
+        *,
+        spool_dir: str | Path | None = None,
+        timeout: float = 5.0,
+        store_artifacts: bool = True,
+    ) -> None:
+        self.base_url = (
+            base_url or os.environ.get("STRATL_API_URL", "http://localhost:8000")
+        ).rstrip("/")
+        self.api_key = api_key or os.environ.get("STRATL_API_KEY")
+        self.spool_dir = Path(spool_dir or os.environ.get("STRATL_SPOOL_DIR", ".stratl-spool"))
+        self.store_artifacts = store_artifacts
+        self._http = httpx.Client(
+            timeout=timeout,
+            headers={"Authorization": f"Bearer {self.api_key}"} if self.api_key else {},
+        )
+        self.last_error: str | None = None
+        self._custody: dict[str, Any] | None = None
+
+    # ── custody labels ─────────────────────────────────────────────────────
+    DEFAULT_CUSTODY: ClassVar[dict[str, str]] = {"storage": "stratl", "key": "stratl"}
+
+    def custody_labels(self) -> dict[str, Any] | None:
+        """What records written to this workspace should say about their custody: who holds the
+        storage and the key, where, and the public-key URL. Asked once, then cached. None when
+        the API cannot be reached; the record then keeps the default labels."""
+        if self._custody is None:
+            try:
+                r = self._http.get(f"{self.base_url}/v1/custody/labels")
+                r.raise_for_status()
+                self._custody = dict(r.json())
+            except httpx.HTTPError:
+                return None
+        return self._custody
+
+    def _label(self, payload: dict[str, Any]) -> dict[str, Any]:
+        if payload.get("custody") == self.DEFAULT_CUSTODY:
+            labels = self.custody_labels()
+            if labels:
+                payload["custody"] = labels
+        return payload
+
+    # ── send ───────────────────────────────────────────────────────────────
+    def submit(self, decision: Decision, *, artifacts: dict[str, Artifact] | None = None) -> Status:
+        payload = self._label(decision.wire())
+        arts = artifacts if (artifacts and self.store_artifacts) else {}
+        try:
+            self._send(payload, arts)
+            self.last_error = None
+            return "recorded"
+        except httpx.HTTPError as exc:
+            self.last_error = f"{type(exc).__name__}: {exc}"
+            self._spool(payload, arts)
+            return "spooled"
+
+    def _send(self, payload: dict[str, Any], arts: dict[str, Artifact]) -> None:
+        r = self._http.post(f"{self.base_url}/v1/ingest/srf", json=payload)
+        r.raise_for_status()
+        if arts:
+            self._upload_artifacts(arts)
+
+    def _upload_artifacts(self, arts: dict[str, Artifact]) -> None:
+        """Ask which fingerprints are missing, then PUT only those.
+
+        Content-addressed and idempotent."""
+        r = self._http.post(f"{self.base_url}/v1/artifacts/check", json={"hashes": list(arts)})
+        r.raise_for_status()
+        for h in r.json().get("missing", []):
+            a = arts[h]
+            r = self._http.put(
+                f"{self.base_url}/v1/artifacts/{h.removeprefix('sha256:')}",
+                content=a.data,
+                headers={"Content-Type": a.content_type},
+            )
+            r.raise_for_status()
+
+    # ── after the decision ─────────────────────────────────────────────────
+    def outcome(
+        self,
+        decision_id: str,
+        *,
+        kind: Literal["result", "override", "dispute", "review"],
+        verdict: Literal["upheld", "reversed", "inconclusive"],
+        label: str,
+        note: str | None = None,
+        observed_at: str | None = None,
+        reported_by: str | None = None,
+    ) -> OutcomeStatus:
+        """Report what happened after a decision: a later result ("chargeback"), a human
+        override, a dispute from the subject, or a review. Stratl writes it as a signed record
+        linked to the decision. Returns "recorded", or "failed" with `last_error` set; outcomes
+        are not spooled."""
+        body: dict[str, Any] = {"kind": kind, "verdict": verdict, "label": label}
+        if note is not None:
+            body["note"] = note
+        if observed_at is not None:
+            body["observed_at"] = observed_at
+        if reported_by is not None:
+            body["reported_by"] = reported_by
+        try:
+            r = self._http.post(f"{self.base_url}/v1/decisions/{decision_id}/outcomes", json=body)
+            r.raise_for_status()
+            self.last_error = None
+            return "recorded"
+        except httpx.HTTPError as exc:
+            self.last_error = f"{type(exc).__name__}: {exc}"
+            return "failed"
+
+    def create_replay(
+        self,
+        name: str,
+        *,
+        agent_id: str,
+        limit: int = 500,
+        agent_version: str | None = None,
+        model: str | None = None,
+        since: str | None = None,
+        until: str | None = None,
+        adverse: bool | None = None,
+        order: Literal["latest", "random"] = "latest",
+        candidate: dict[str, Any] | None = None,
+    ) -> dict[str, Any]:
+        """Freeze a replay set: up to `limit` real decisions by `agent_id`, newest first or at
+        random. `candidate` names what is being tried (provider, model, version, config_hash,
+        note). Raises `httpx.HTTPError` on refusal; see `stratl.replay.run` to run it."""
+        selector: dict[str, Any] = {"agent_id": agent_id, "limit": limit, "order": order}
+        for k, v in (
+            ("agent_version", agent_version),
+            ("model", model),
+            ("since", since),
+            ("until", until),
+            ("adverse", adverse),
+        ):
+            if v is not None:
+                selector[k] = v
+        r = self._http.post(
+            f"{self.base_url}/v1/replays",
+            json={"name": name, "selector": selector, "candidate": candidate or {}},
+        )
+        r.raise_for_status()
+        return dict(r.json())
+
+    def fetch_artifact(self, fingerprint: str) -> bytes | None:
+        """The original bytes behind a fingerprint, when they are in custody; else None."""
+        sha = fingerprint.removeprefix("sha256:")
+        try:
+            r = self._http.get(f"{self.base_url}/v1/artifacts/{sha}")
+        except httpx.HTTPError:
+            return None
+        return r.content if r.status_code == 200 else None
+
+    # ── spool ──────────────────────────────────────────────────────────────
+    def _spool(self, payload: dict[str, Any], arts: dict[str, Artifact]) -> None:
+        self.spool_dir.mkdir(parents=True, exist_ok=True)
+        doc = {
+            "record": payload,
+            "artifacts": {
+                h: {"b64": base64.b64encode(a.data).decode(), "content_type": a.content_type}
+                for h, a in arts.items()
+            },
+        }
+        (self.spool_dir / f"{payload['decision_id']}.json").write_text(json.dumps(doc))
+
+    def spooled(self) -> int:
+        return len(list(self.spool_dir.glob("*.json"))) if self.spool_dir.exists() else 0
+
+    def flush_spool(self) -> FlushResult:
+        """Resend spooled records (and their artifacts) in order.
+
+        Stops at the first failure and reports it."""
+        files = sorted(self.spool_dir.glob("*.json")) if self.spool_dir.exists() else []
+        sent = 0
+        for p in files:
+            doc = json.loads(p.read_text())
+            payload, raw_arts = (
+                (doc["record"], doc.get("artifacts", {})) if "record" in doc else (doc, {})
+            )  # older spool files hold the bare record
+            arts = {
+                h: Artifact(base64.b64decode(v["b64"]), v["content_type"])
+                for h, v in raw_arts.items()
+            }
+            try:
+                self._send(payload, arts)
+            except httpx.HTTPError as exc:
+                return FlushResult(
+                    sent=sent, remaining=len(files) - sent, error=f"{type(exc).__name__}: {exc}"
+                )
+            p.unlink()
+            sent += 1
+        return FlushResult(sent=sent, remaining=0)

stratl/decision.py

@@ -0,0 +1,254 @@
+"""The `stratl.decision(...)` context manager: the ergonomic way to record one decision.
+
+Content (inputs, prompts, outputs, tool payloads, documents) is fingerprinted with SHA-256 and
+the exact bytes that were hashed are kept aside as *artifacts*. The record carries only the
+fingerprints; the client uploads the artifacts to the custody store so the fingerprint alone can
+fetch the original later.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+from collections.abc import Iterator
+from contextlib import contextmanager
+from dataclasses import dataclass
+from datetime import UTC, datetime
+from typing import Any
+
+from stratl.srf import (
+    Actor,
+    Agent,
+    Custody,
+    Decision,
+    Event,
+    Provenance,
+    Subject,
+    canonicalize,
+)
+
+try:
+    from ulid import ULID  # type: ignore[import-not-found]
+
+    def _new_id() -> str:
+        return f"DEC-{ULID()}"
+except ImportError:  # pragma: no cover
+    import secrets
+
+    def _new_id() -> str:
+        return f"DEC-{secrets.token_hex(13).upper()}"
+
+
+def _now() -> str:
+    return datetime.now(UTC).isoformat(timespec="milliseconds").replace("+00:00", "Z")
+
+
+@dataclass(slots=True)
+class Artifact:
+    data: bytes
+    content_type: str
+
+
+def fingerprint(value: Any) -> tuple[str, Artifact]:
+    """Return ("sha256:<hex>", artifact). Strings are hashed as UTF-8, bytes as they are, and
+    everything else as RFC 8785 canonical JSON, the same rules as the TypeScript SDK, so the same
+    content gets the same fingerprint in both. The artifact holds exactly the bytes that were
+    hashed. Values JSON cannot express (datetimes, Decimals, ...) are written with `str`."""
+    if isinstance(value, bytes):
+        data, ctype = value, "application/octet-stream"
+    elif isinstance(value, str):
+        data, ctype = value.encode(), "text/plain; charset=utf-8"
+    else:
+        plain = json.loads(json.dumps(value, default=str))
+        data, ctype = canonicalize(plain), "application/json"
+    return "sha256:" + hashlib.sha256(data).hexdigest(), Artifact(data, ctype)
+
+
+class DecisionBuilder:
+    last: Decision | None = None
+    status: str | None = None  # "recorded" | "spooled" after submit
+
+    def __init__(
+        self,
+        agent: str,
+        subject: tuple[str, str],
+        *,
+        agent_name: str | None = None,
+        agent_version: str | None = None,
+        agent_owner: str | None = None,
+        subject_display: str | None = None,
+        source: str = "sdk-python",
+    ) -> None:
+        self._agent = Agent(id=agent, name=agent_name, version=agent_version, owner=agent_owner)
+        self._subject = Subject(type=subject[0], id=subject[1], display=subject_display)
+        self._source = source
+        self._events: list[Event] = []
+        self._actors: list[Actor] = [Actor(kind="agent", id=agent)]
+        self.artifacts: dict[str, Artifact] = {}
+
+    # ── internals ──────────────────────────────────────────────────────────
+    def _h(self, value: Any) -> str:
+        h, art = fingerprint(value)
+        self.artifacts[h] = art
+        return h
+
+    def _add(self, type_: str, **fields: Any) -> None:
+        clean = {k: v for k, v in fields.items() if v is not None}
+        self._events.append(Event(seq=len(self._events) + 1, type=type_, at=_now(), **clean))  # type: ignore[arg-type]
+
+    def _human(
+        self, id_: str | None, *, role: str | None = None, identity_provider: str | None = None
+    ) -> None:
+        if id_ and not any(a.kind == "human" and a.id == id_ for a in self._actors):
+            self._actors.append(
+                Actor(kind="human", id=id_, role=role, identity_provider=identity_provider)
+            )
+
+    # ── events ─────────────────────────────────────────────────────────────
+    def input(self, content: Any) -> None:
+        self._add("input", hash=self._h(content))
+
+    def retrieval(self, source: str, docs: list[Any]) -> None:
+        self._add("retrieval", source=source, doc_refs=[self._h(d) for d in docs])
+
+    def model(
+        self,
+        provider: str,
+        model: str,
+        prompt: Any,
+        response: Any,
+        *,
+        version: str | None = None,
+        config: dict[str, Any] | None = None,
+    ) -> None:
+        self._add(
+            "model_call",
+            provider=provider,
+            model=model,
+            version=version,
+            config_hash=self._h(config or {}),
+            input_hash=self._h(prompt),
+            output_hash=self._h(response),
+        )
+
+    def tool(self, name: str, args: Any, result: Any, *, status: str = "ok") -> None:
+        self._add(
+            "tool_call",
+            name=name,
+            args_hash=self._h(args),
+            result_hash=self._h(result),
+            status=status,
+        )
+
+    def policy(
+        self, policy_id: str, *, version: int | str, result: str, rule: str | None = None
+    ) -> None:
+        self._add(
+            "policy_eval", policy_id=policy_id, version=str(version), result=result, rule=rule
+        )
+
+    def approval(
+        self,
+        *,
+        required: bool,
+        approver: str | None = None,
+        authority: str | None = None,
+        decision: str | None = None,
+        identity_provider: str | None = None,
+        comment: str | None = None,
+    ) -> None:
+        self._add(
+            "approval",
+            required=required,
+            approver=approver,
+            authority=authority,
+            decision=decision,
+            identity_provider=identity_provider,
+            comment_hash=self._h(comment) if comment else None,
+        )
+        self._human(approver, role=authority, identity_provider=identity_provider)
+
+    def actor(
+        self, kind: str, id_: str, *, role: str | None = None, identity_provider: str | None = None
+    ) -> None:
+        """Add a participant explicitly (a requester, a system, a second reviewer)."""
+        if kind == "human":
+            self._human(id_, role=role, identity_provider=identity_provider)
+        elif not any(a.kind == kind and a.id == id_ for a in self._actors):
+            self._actors.append(Actor(kind=kind, id=id_, role=role))  # type: ignore[arg-type]
+
+    def action(self, name: str, *, target: str, result: str, params: Any = None) -> None:
+        self._add(
+            "action",
+            name=name,
+            target=target,
+            params_hash=self._h(params) if params is not None else None,
+            result=result,
+            executed_at=_now(),
+        )
+
+    def outcome(
+        self,
+        *,
+        adverse: bool,
+        category: str | None = None,
+        status: str = "completed",
+        effect_on_subject: str | None = None,
+    ) -> None:
+        self._add(
+            "outcome",
+            adverse=adverse,
+            category=category,
+            status=status,
+            effect_on_subject=effect_on_subject,
+        )
+
+    # ── build ──────────────────────────────────────────────────────────────
+    def build(self, *, assurance: str = "observed", custody: Custody | None = None) -> Decision:
+        return Decision(
+            srf_version="0.1",
+            decision_id=_new_id(),
+            subject=self._subject,
+            agent=self._agent,
+            actors=list(self._actors),
+            events=self._events,
+            provenance=Provenance(
+                source=self._source,
+                source_type="sdk",
+                connector_version="0.1.0",
+                ingested_at=_now(),
+            ),
+            assurance=assurance,  # type: ignore[arg-type]
+            custody=custody or Custody(storage="stratl", key="stratl"),
+        )
+
+
+@contextmanager
+def decision(
+    agent: str,
+    subject: tuple[str, str],
+    *,
+    client: Any | None = None,
+    agent_name: str | None = None,
+    agent_version: str | None = None,
+    agent_owner: str | None = None,
+    subject_display: str | None = None,
+) -> Iterator[DecisionBuilder]:
+    """Record one decision.
+
+    On exit the record is built and, if a client is given, submitted with its artifacts."""
+    b = DecisionBuilder(
+        agent=agent,
+        subject=subject,
+        agent_name=agent_name,
+        agent_version=agent_version,
+        agent_owner=agent_owner,
+        subject_display=subject_display,
+    )
+    try:
+        yield b
+    finally:
+        rec = b.build()
+        b.last = rec  # always available to the caller, submitted or not
+        if client is not None:
+            b.status = client.submit(rec, artifacts=b.artifacts)

stratl/replay.py

@@ -0,0 +1,166 @@
+"""Upgrade replay from the customer's side.
+
+Stratl freezes a sample of real decisions and keeps the originals in custody; the model runs
+here. `run` walks the set, fetches each decision's original input, calls your function with it,
+and reports the conclusion back. When every item is done, `close` seals the comparison as a
+signed record. Nothing in this module calls a model: `fn` is yours.
+
+    client = stratl.Client()
+    rp = client.create_replay("gpt-5 1001", agent_id="support-bot", limit=500,
+                              candidate={"model": "gpt-5", "version": "1001"})
+    report = stratl.replay.run(client, rp["id"], decide)   # decide(item) -> Result
+    print(report.summary["flipped"], "of", report.summary["replayed"], "would flip")
+
+`decide` receives a `ReplayItem` (the subject, the original fingerprints and conclusion, and
+the original input bytes when they are in custody) and returns a `Result` with the candidate's
+conclusion. Return None to skip an item; it stays pending and the summary says so.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Callable, Iterator
+from dataclasses import dataclass, field
+from typing import Any
+
+import httpx
+
+
+@dataclass(slots=True)
+class ReplayItem:
+    decision_id: str
+    subject: dict[str, str]
+    original: dict[str, Any]
+    inputs: list[bytes] = field(default_factory=list)
+    """The original input bytes, in event order, when they are in custody."""
+
+    @property
+    def input_text(self) -> str | None:
+        return self.inputs[0].decode("utf-8", "replace") if self.inputs else None
+
+
+@dataclass(slots=True)
+class Result:
+    adverse: bool
+    status: str = "completed"
+    category: str | None = None
+    action: str | None = None
+    target: str | None = None
+    output_hash: str | None = None
+    note: str | None = None
+
+    def wire(self, decision_id: str) -> dict[str, Any]:
+        doc: dict[str, Any] = {
+            "decision_id": decision_id,
+            "outcome": {"status": self.status, "adverse": self.adverse},
+        }
+        if self.category is not None:
+            doc["outcome"]["category"] = self.category
+        if self.action is not None:
+            doc["action"] = {"name": self.action, "target": self.target}
+        if self.output_hash is not None:
+            doc["output_hash"] = self.output_hash
+        if self.note is not None:
+            doc["note"] = self.note
+        return doc
+
+
+@dataclass(slots=True)
+class Report:
+    replay_id: str
+    replayed: int
+    skipped: int
+    summary: dict[str, Any]
+    record_id: str | None
+
+
+class Replay:
+    """One replay set, by id. Pages through its items and batches results back."""
+
+    BATCH = 100
+
+    def __init__(self, client: Any, replay_id: str) -> None:
+        self._c = client
+        self.id = replay_id
+        self._pending: list[dict[str, Any]] = []
+
+    def items(
+        self, *, fetch_inputs: bool = True, change: str | None = None
+    ) -> Iterator[ReplayItem]:
+        offset = 0
+        while True:
+            params: dict[str, Any] = {"limit": 200, "offset": offset}
+            if change:
+                params["change"] = change
+            r = self._c._http.get(f"{self._c.base_url}/v1/replays/{self.id}/items", params=params)
+            r.raise_for_status()
+            page = r.json()["items"]
+            for it in page:
+                inputs = (
+                    [
+                        b
+                        for h in it["original"].get("input_hashes", [])
+                        if (b := self._c.fetch_artifact(h)) is not None
+                    ]
+                    if fetch_inputs
+                    else []
+                )
+                yield ReplayItem(it["decision_id"], it["subject"], it["original"], inputs)
+            if len(page) < 200:
+                return
+            offset += 200
+
+    def report(self, decision_id: str, result: Result) -> None:
+        self._pending.append(result.wire(decision_id))
+        if len(self._pending) >= self.BATCH:
+            self.flush()
+
+    def flush(self) -> dict[str, Any] | None:
+        if not self._pending:
+            return None
+        batch, self._pending = self._pending, []
+        r = self._c._http.post(
+            f"{self._c.base_url}/v1/replays/{self.id}/results", json={"items": batch}
+        )
+        r.raise_for_status()
+        return dict(r.json())
+
+    def close(self) -> dict[str, Any]:
+        self.flush()
+        r = self._c._http.post(f"{self._c.base_url}/v1/replays/{self.id}/close")
+        r.raise_for_status()
+        return dict(r.json())
+
+
+def run(
+    client: Any,
+    replay_id: str,
+    fn: Callable[[ReplayItem], Result | None],
+    *,
+    fetch_inputs: bool = True,
+    close: bool = True,
+) -> Report:
+    """Replay every pending item through `fn` and, by default, seal the comparison.
+
+    Raises `httpx.HTTPError` when the API cannot be reached or refuses: a replay is a deliberate
+    job, so it fails loudly rather than spooling."""
+    rp = Replay(client, replay_id)
+    replayed = skipped = 0
+    for item in rp.items(fetch_inputs=fetch_inputs, change="pending"):
+        result = fn(item)
+        if result is None:
+            skipped += 1
+            continue
+        rp.report(item.decision_id, result)
+        replayed += 1
+    rp.flush()
+    if close:
+        closed = rp.close()
+        return Report(
+            replay_id, replayed, skipped, closed.get("summary") or {}, closed.get("record_id")
+        )
+    r = client._http.get(f"{client.base_url}/v1/replays/{replay_id}")
+    r.raise_for_status()
+    return Report(replay_id, replayed, skipped, r.json().get("counts") or {}, None)
+
+
+__all__ = ["Replay", "ReplayItem", "Report", "Result", "httpx", "run"]

stratl/srf.py

@@ -0,0 +1,126 @@
+"""Stratl Record Format v0.1 — models, canonicalisation and hashing.
+
+This module is the single Python source of truth for SRF. It must stay byte-for-byte compatible
+with the Go verifier and the TypeScript SDK; spec/fixtures and the conformance tests enforce that.
+"""
+
+from __future__ import annotations
+
+import hashlib
+from typing import Any, Literal
+
+import jcs
+from pydantic import BaseModel, ConfigDict, Field
+
+Assurance = Literal["observed", "attested", "enforced"]
+Custodian = Literal["stratl", "customer"]
+
+
+class Subject(BaseModel):
+    type: str
+    id: str
+    display: str | None = None
+
+
+class Agent(BaseModel):
+    id: str
+    name: str | None = None
+    version: str | None = None
+    owner: str | None = None
+
+
+class Actor(BaseModel):
+    kind: Literal["human", "system", "agent"]
+    id: str
+    identity_provider: str | None = None
+    role: str | None = None
+
+
+class Event(BaseModel):
+    """One observable event. `type` selects which optional block is populated."""
+
+    model_config = ConfigDict(extra="allow")
+
+    seq: int
+    type: Literal[
+        "input",
+        "retrieval",
+        "model_call",
+        "tool_call",
+        "policy_eval",
+        "approval",
+        "action",
+        "outcome",
+    ]
+    at: str = Field(description="RFC 3339 UTC timestamp")
+
+
+class Provenance(BaseModel):
+    source: str
+    source_type: str
+    source_record_ids: list[str] | None = None
+    connector_version: str | None = None
+    ingested_at: str | None = None
+
+
+class Custody(BaseModel):
+    storage: Custodian
+    key: Custodian
+    region: str | None = None
+    key_id_url: str | None = None
+
+
+class Retention(BaseModel):
+    policy_id: str | None = None
+    hold_until: str | None = None
+    legal_hold: bool | None = None
+
+
+class Integrity(BaseModel):
+    model_config = ConfigDict(extra="allow")
+
+    canonicalization: Literal["RFC8785"] = "RFC8785"
+    hash_alg: Literal["sha256"] = "sha256"
+    record_hash: str | None = None
+    prev_hash: str | None = None
+    signature: str | None = None
+    key_id: str | None = None
+    checkpoint_id: str | None = None
+    inclusion_proof: list[str] | None = None
+
+
+class Decision(BaseModel):
+    """A Stratl decision record. Everything except `integrity` is covered by the hash."""
+
+    model_config = ConfigDict(extra="forbid")
+
+    srf_version: Literal["0.1"]
+    decision_id: str
+    subject: Subject
+    agent: Agent
+    actors: list[Actor] | None = None
+    events: list[Event]
+    provenance: Provenance
+    assurance: Assurance
+    custody: Custody
+    retention: Retention | None = None
+    integrity: Integrity | None = None
+
+    def wire(self) -> dict[str, Any]:
+        """The record as it travels: JSON-compatible, no null members, no injected defaults."""
+        return self.model_dump(mode="json", exclude_none=True)
+
+    def unsigned_payload(self) -> dict[str, Any]:
+        """The hashed form: `wire()` minus `integrity`. Identical in Python, TypeScript and Go."""
+        data = self.wire()
+        data.pop("integrity", None)
+        return data
+
+
+def canonicalize(value: Any) -> bytes:
+    """RFC 8785 canonical JSON bytes."""
+    return jcs.canonicalize(value)
+
+
+def canonical_sha256(value: Any) -> str:
+    return hashlib.sha256(canonicalize(value)).hexdigest()

stratl-0.1.0.dist-info/METADATA

@@ -0,0 +1,59 @@
+Metadata-Version: 2.5
+Name: stratl
+Version: 0.1.0
+Summary: Stratl SDK: record AI decisions as Stratl Record Format (SRF) evidence
+Project-URL: Homepage, https://stratl.ai
+Project-URL: Documentation, https://docs.stratl.ai/developers/build/python-sdk/
+Project-URL: Changelog, https://docs.stratl.ai/reference/changelog/
+Author-email: Stratl <hello@stratl.ai>
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: agents,ai,audit,decision-records,evidence,srf
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries
+Classifier: Typing :: Typed
+Requires-Python: >=3.12
+Requires-Dist: httpx>=0.27
+Requires-Dist: jcs>=0.2
+Requires-Dist: pydantic>=2.8
+Provides-Extra: dev
+Requires-Dist: mypy>=1.11; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
+Requires-Dist: pytest>=8.3; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# stratl (Python SDK)
+
+```bash
+uv add stratl        # or: pip install stratl
+```
+
+```python
+import stratl
+
+with stratl.decision(agent="claims-triage", subject=("claim", "8843")) as d:
+    d.model("anthropic", "claude-sonnet-5", prompt, response)
+    d.tool("providers.lookup", args, result)
+    d.approval(
+        required=True,
+        approver="dr.mensah@insurer.rw",
+        authority="medical_director",
+        decision="approved",
+    )
+    d.action("claim.deny", target="claim/8843", result="executed")
+    d.outcome(adverse=True, category="claim_denial")
+```
+
+`stratl.srf` holds the record models and canonicalisation used by the API and the conformance suite.
+
+Whatever you pass in is fingerprinted on your side: strings as UTF-8, `bytes` as they are,
+everything else as RFC 8785 canonical JSON. The record carries only the `sha256:` fingerprints;
+`Client.submit` uploads the exact bytes that were hashed to the custody store, only the ones it
+does not already hold. The TypeScript SDK uses the same rules, so both produce the same
+fingerprint for the same content. If Stratl cannot be reached, the record and its content are
+spooled to `.stratl-spool/` and `submit` returns `"spooled"`; call `client.flush_spool()` later.

stratl-0.1.0.dist-info/RECORD

@@ -0,0 +1,10 @@
+stratl/__init__.py,sha256=l4b3JRCrXbyeP6iEY9k9ZcECCCNMNsEi2qPQhz5Uu0Y,337
+stratl/client.py,sha256=1niyY2gML9JILNW99CqD45Bxb7e9t_ukjYhRVuQHitI,9428
+stratl/decision.py,sha256=cmNJwUS6WYsSpPGSxsZYMUOU19A173CBGq-qpuKp_JY,8837
+stratl/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+stratl/replay.py,sha256=Z136dgB9JXhSqig6jCjNRiRE5bNMzMbOvfh48Jo5ykY,5693
+stratl/srf.py,sha256=WmLRxu2-xyBcL-T8If4QKxoDEVAUcgOd7JelfuaNHG8,3255
+stratl-0.1.0.dist-info/METADATA,sha256=h2wP7uS6Ix6zHm2H6tcdGiCJJVo1MVc8r4R-4Sh6DZc,2364
+stratl-0.1.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+stratl-0.1.0.dist-info/licenses/LICENSE,sha256=z8d0m5b2O9McPEK1xHG_dWgUBT6EfBDz6wA0F7xSPTA,11358
+stratl-0.1.0.dist-info/RECORD,,

stratl-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.4
+Root-Is-Purelib: true
+Tag: py3-none-any

stratl-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.