swiftapi-python 1.3.0__tar.gz → 1.4.0__tar.gz

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.3.1 — 2026-09-22
+
+Fix package-index README guide links by pointing to the public source distribution
+and documentation. Runtime behavior is unchanged from 1.3.0; version reporting
+identifies this patch. Historical distributions remain immutable.
+
 ## 1.3.0 — 2026-09-22
 
 Add local prerequisite evaluation, canonical action envelopes, Ed25519 decisions

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/MANIFEST.in

@@ -4,3 +4,4 @@ recursive-include tests *.py
 recursive-include scripts *.py
 recursive-include benchmarks *.json
 recursive-include swiftapi py.typed
+include NATIVE_RECEIPTS.md

swiftapi_python-1.4.0/NATIVE_RECEIPTS.md

@@ -0,0 +1,54 @@
+# Native receipt support in 1.4.0
+
+This package adds a loopback native-EOS client and an offline receipt verifier.
+It does not contain model weights or run an inference service by itself.
+Existing 1.3.1 calls retain their behaviour. `PolicyViolation` still raises;
+`response`, `raw_response`, and `status_code` now preserve a denied response.
+
+```python
+from swiftapi.native import NativeEOSClient
+from swiftapi.native_verify import verify_receipt
+
+with NativeEOSClient(key, base_url="http://127.0.0.1:8765") as client:
+    response = client.generate("What is 2 + 2?", request_id=request_id)
+
+report = verify_receipt(
+    receipt_path,
+    trusted_runtime_public_key,
+    "RECORDED_LOGITS_REPLAY",
+    expected_max_grant_age_seconds=60,
+)
+```
+
+The runtime public key and expected age must come from the independently
+approved protocol, not from the receipt being checked. The default authority
+public key is SwiftAPI's pinned production key. Test-authority receipts require
+an explicitly supplied test public key and are reported as non-production.
+
+```sh
+python -m swiftapi.native_verify receipt.json \
+  --trusted-key runtime-public.json \
+  --expected-mode RECORDED_LOGITS_REPLAY \
+  --expected-max-grant-age-seconds 60
+```
+
+The verifier checks the runtime signature, authority signatures and request
+binding, every declared asset hash, stored BF16 vector lengths and non-EOS
+identity, greedy argmax, raw input/output binding, completion scope and the
+frozen July 29 class. It needs neither torch nor model files nor signing keys.
+It does not independently reproduce a model forward pass, attest hardware,
+authenticate an unsigned revocation observation, or prove runtime honesty.
+
+Receipt schema controls compatibility; the declared SDK version is reported,
+not a fixed acceptance gate. `native_classifier_releases.py` retains known
+classifier hashes. The declared classifier must be in that registry and must
+agree with the SDK identity recorded in the receipt. Class, classification
+fields and completion scope are recomputed separately. A later non-semantic
+source edit does not invalidate earlier classifier hashes.
+
+The native output field is always present. A completed zero-byte native EOS
+stop is V0. A replayed nonempty first token is R with
+`FIRST_TOKEN_ONLY_NOT_A_COMPLETE_ANSWER`, never a complete generated answer.
+Rejections before decoding are operational, not Voids.
+
+Package status: local release candidate, not uploaded to PyPI.

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: swiftapi-python
-Version: 1.3.0
+Version: 1.4.0
 Summary: SwiftAPI Python SDK - AI Action Verification Gateway
 Author-email: Rayan Pal <rayan@swiftapi.ai>
 License-Expression: MIT
@@ -131,17 +131,14 @@ causal, theoretical, and protocol boundaries.
 
 ## Documentation
 
-Start with [Quickstart](docs/QUICKSTART.md). See [concepts](docs/CONCEPTS.md),
-[local brake](docs/LOCAL_BRAKE.md), [Codex](docs/CODEX.md),
-[Claude Code](docs/CLAUDE_CODE.md), [Python SDK](docs/PYTHON_SDK.md),
-[conditions](docs/CONDITIONS.md), [action envelopes](docs/ACTION_ENVELOPES.md),
-[receipts](docs/RECEIPTS.md), [verification](docs/VERIFICATION.md),
-[remote authority](docs/REMOTE_SWIFTAPI.md), [BYOK](docs/BYOK.md),
-[security](docs/SECURITY_MODEL.md), [threat model](docs/THREAT_MODEL.md),
-[native noncontinuation](docs/NATIVE_NONCONTINUATION.md),
-[benchmarking](docs/BENCHMARKING.md), and [provenance](docs/RESEARCH_PROVENANCE.md).
-
-[Migration from 1.2.2](MIGRATION_1_2_2.md) documents security corrections and
-termination-metadata changes. Historical 1.2.2 bytes remain immutable on PyPI.
+The full guides ship in the [source distribution on PyPI](https://pypi.org/project/swiftapi-python/#files),
+inside `docs/`. Start with `docs/QUICKSTART.md`. The source also includes guides
+for concepts, the local brake, Codex, Claude Code, the Python SDK, conditions,
+action envelopes, receipts, verification, remote authority, BYOK, security,
+the threat model, native noncontinuation, benchmarks, and research provenance.
+
+`MIGRATION_1_2_2.md` documents security corrections and termination-metadata
+changes. Historical 1.2.2 bytes remain immutable on PyPI. The public
+[SwiftAPI documentation](https://getswiftapi.com/docs) remains available online.
 
 MIT license. Research and software by Rayan Pal / SwiftAPI Labs.

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/README.md

@@ -95,17 +95,14 @@ causal, theoretical, and protocol boundaries.
 
 ## Documentation
 
-Start with [Quickstart](docs/QUICKSTART.md). See [concepts](docs/CONCEPTS.md),
-[local brake](docs/LOCAL_BRAKE.md), [Codex](docs/CODEX.md),
-[Claude Code](docs/CLAUDE_CODE.md), [Python SDK](docs/PYTHON_SDK.md),
-[conditions](docs/CONDITIONS.md), [action envelopes](docs/ACTION_ENVELOPES.md),
-[receipts](docs/RECEIPTS.md), [verification](docs/VERIFICATION.md),
-[remote authority](docs/REMOTE_SWIFTAPI.md), [BYOK](docs/BYOK.md),
-[security](docs/SECURITY_MODEL.md), [threat model](docs/THREAT_MODEL.md),
-[native noncontinuation](docs/NATIVE_NONCONTINUATION.md),
-[benchmarking](docs/BENCHMARKING.md), and [provenance](docs/RESEARCH_PROVENANCE.md).
-
-[Migration from 1.2.2](MIGRATION_1_2_2.md) documents security corrections and
-termination-metadata changes. Historical 1.2.2 bytes remain immutable on PyPI.
+The full guides ship in the [source distribution on PyPI](https://pypi.org/project/swiftapi-python/#files),
+inside `docs/`. Start with `docs/QUICKSTART.md`. The source also includes guides
+for concepts, the local brake, Codex, Claude Code, the Python SDK, conditions,
+action envelopes, receipts, verification, remote authority, BYOK, security,
+the threat model, native noncontinuation, benchmarks, and research provenance.
+
+`MIGRATION_1_2_2.md` documents security corrections and termination-metadata
+changes. Historical 1.2.2 bytes remain immutable on PyPI. The public
+[SwiftAPI documentation](https://getswiftapi.com/docs) remains available online.
 
 MIT license. Research and software by Rayan Pal / SwiftAPI Labs.

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "swiftapi-python"
-version = "1.3.0"
+version = "1.4.0"
 description = "SwiftAPI Python SDK - AI Action Verification Gateway"
 readme = "README.md"
 license = "MIT"

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/scripts/qualify_artifacts.py

@@ -60,7 +60,7 @@ def main():
             [
                 python,
                 "-c",
-                'import swiftapi,sys,pathlib; assert pathlib.Path(sys.prefix) in pathlib.Path(swiftapi.__file__).parents; assert swiftapi.__version__ == "1.3.0"; print(swiftapi.__file__)',
+                'import swiftapi,sys,pathlib; assert pathlib.Path(sys.prefix) in pathlib.Path(swiftapi.__file__).parents; assert swiftapi.__version__ == "1.3.1"; print(swiftapi.__file__)',
             ],
         )
         run("doctor", [command, "doctor"])

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/__init__.py

@@ -1,5 +1,5 @@
 """SwiftAPI: verified execution for explicitly mediated capabilities."""
-__version__ = "1.3.0"
+__version__ = "1.4.0"
 __author__ = "Rayan Pal"
 
 # Core exports

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/brake/broker.py

@@ -48,7 +48,7 @@ class CapabilityBroker:
 
     def status(self) -> dict:
         return {
-            "version": "1.3.0",
+            "version": "1.3.1",
             "scope": "write_marker in configured sandbox only",
             "sandbox": str(self.sandbox),
             "public_key_file": str(self.root / "public-key.json"),

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/brake/install.py

@@ -260,7 +260,7 @@ def doctor(home: Optional[Path] = None) -> dict:
                 check["error"] = "configuration invalid"
         checks[h] = check
     return {
-        "version": "1.3.0",
+        "version": "1.3.1",
         "python": sys.version.split()[0],
         "local_brake": "available",
         "hosts": checks,

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/brake/mcp.py

@@ -94,7 +94,7 @@ def serve() -> None:
                 result = {
                     "protocolVersion": requested if requested in supported else supported[-1],
                     "capabilities": {"tools": {"listChanged": False}},
-                    "serverInfo": {"name": "swiftapi_brake", "version": "1.3.0"},
+                    "serverInfo": {"name": "swiftapi_brake", "version": "1.3.1"},
                     "instructions": "Use the broker for its sandbox markers. Approval is operator-only. A denied action is GATE_BLOCK, never native Void.",
                 }
             elif method == "ping":

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/brake/qualification.py

@@ -102,7 +102,7 @@ def qualify(root: Path) -> dict:
         checks.append({"name": name, "passed": blocked})
     result = {
         "schema": "swiftapi.qualification/v1",
-        "version": "1.3.0",
+        "version": "1.3.1",
         "checks": checks,
         "passed": sum(c["passed"] for c in checks),
         "total": len(checks),

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/client.py

@@ -130,6 +130,9 @@ class SwiftAPI:
                 message=reason,
                 action_type=action_type,
                 denial_reason=reason,
+                response=data,
+                raw_response=response.content,
+                status_code=response.status_code,
             )
 
         # Other errors

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi/exceptions.py

@@ -21,10 +21,12 @@ class AuthenticationError(SwiftAPIError):
 class PolicyViolation(SwiftAPIError):
     """Raised when an action violates policy and is denied."""
 
-    def __init__(self, message: str, action_type: str = None, denial_reason: str = None):
+    def __init__(self, message: str, action_type: str = None, denial_reason: str = None,
+                 response: dict = None, raw_response: bytes = None, status_code: int = None):
         self.action_type = action_type
         self.denial_reason = denial_reason
-        super().__init__(message)
+        self.raw_response = raw_response
+        super().__init__(message, status_code=status_code, response=response)
 
 
 class SignatureVerificationError(SwiftAPIError):

swiftapi_python-1.4.0/swiftapi/native.py

@@ -0,0 +1,59 @@
+"""Native EOS client. Loopback only; no hosted-model or API-proxy claims."""
+from pathlib import Path
+import re
+from urllib.parse import urlsplit
+import uuid
+import requests
+from .exceptions import SwiftAPIError
+
+class NativeEOSClient:
+    def __init__(self, key=None, *, key_file=None, base_url='http://127.0.0.1:8766', timeout=120):
+        if (key is None) == (key_file is None):
+            raise ValueError('Supply exactly one of key or key_file')
+        key = Path(key_file).read_text(encoding='ascii').strip() if key_file is not None else key
+        if not isinstance(key,str) or not re.fullmatch(r'swiftapi_live_[0-9a-f]{64}',key):
+            raise ValueError('Invalid authority key format')
+        u = urlsplit(base_url)
+        if (u.scheme != 'http' or u.hostname != '127.0.0.1' or not u.port
+                or u.username or u.password or u.path not in ('','/') or u.query or u.fragment):
+            raise ValueError('Native service URL must be http://127.0.0.1:PORT')
+        self.base_url, self.timeout = base_url.rstrip('/'), timeout
+        self.session = requests.Session()
+        self.session.trust_env = False
+        self.session.headers['X-SwiftAPI-Authority'] = key
+
+    def _post(self, path, body):
+        try:
+            response = self.session.post(self.base_url+path,json=body,timeout=self.timeout,allow_redirects=False)
+        except requests.RequestException:
+            raise SwiftAPIError('Native service unavailable') from None
+        try:
+            data = response.json()
+        except ValueError:
+            raise SwiftAPIError('Invalid native response',response.status_code) from None
+        if response.status_code != 200:
+            exc = SwiftAPIError('Native request rejected',response.status_code,data)
+            exc.raw_response = response.content
+            raise exc
+        return data
+
+    def check_authority(self):
+        return self._post('/v1/authority/check',{})
+
+    def authorize(self, question, *, request_id):
+        return self._post('/v1/native-eos/authorize',{'question':question,'request_id':request_id})
+
+    def generate_with_grant(self, question, grant, *, request_id):
+        return self._post('/v1/native-eos/generate',{'question':question,'request_id':request_id,'grant':grant})
+
+    def generate(self, question, *, request_id=None):
+        request_id = request_id or str(uuid.uuid4())
+        permission = self.authorize(question,request_id=request_id)
+        return self.generate_with_grant(question,permission['grant'],request_id=request_id)
+
+    def close(self):
+        self.session.close()
+    def __enter__(self):
+        return self
+    def __exit__(self,*_):
+        self.close()

swiftapi_python-1.4.0/swiftapi/native_classifier_releases.py

@@ -0,0 +1,15 @@
+"""Append-only compatibility registry for released native classifiers.
+
+Receipt verification uses the declared classifier hash, not the current source
+file's hash. A future release may append a reviewed, compatible implementation;
+it must retain this entry so existing sealed receipts remain verifiable.
+The first entry is the SDK 1.4.0 release candidate's native_taxonomy.py bytes.
+"""
+
+RELEASED_CLASSIFIER_HASHES = {
+    'c17a7a37f0d935195b69c446da3a5ecfe36ab71539228dd9f798686d075de43c': {
+        'first_sdk_version': '1.4.0',
+        'receipt_schema': 'swiftapi-native-service-receipt/2',
+        'rule': 'void-matrix/2dfe895bdafd35d23d6dab5f307ed560214a3843',
+    },
+}

swiftapi_python-1.4.0/swiftapi/native_taxonomy.py

@@ -0,0 +1,75 @@
+"""July 29, 2026 Table 2, DOI 10.5281/zenodo.21696066, native adapter.
+
+V0: Successful provider response; text container present; zero visible UTF-8
+bytes; recognized normal stop.
+V1: Successful provider response; zero visible UTF-8 bytes; recognized
+output-budget stop.
+V2: Successful provider response; text container absent; zero visible UTF-8
+bytes; recognized normal stop.
+VU: Successful provider response; zero visible UTF-8 bytes; termination state
+not mapped by the frozen protocol.
+Non-Void: Near-Voids (NV) contain at least one byte, including whitespace,
+invisible Unicode, punctuation-only output, or ellipses. Visible responses (R)
+contain nonempty visible text. Refusals (RF), safety blocks (SB), tool calls (TC)
+come from distinct provider fields. Errors are operational outcomes, not Voids.
+
+Normative classifier: theonlypal/void-matrix commit
+2dfe895bdafd35d23d6dab5f307ed560214a3843, void_matrix.FROZEN.py,
+INVISIBLE_CODEPOINTS and ELLIPSIS_FORMS lines 213-235, near_void lines 1053-1061.
+https://github.com/theonlypal/void-matrix/blob/2dfe895bdafd35d23d6dab5f307ed560214a3843/void_matrix.FROZEN.py#L1053
+The frozen code governs the prose. A lone ? or ! is R, not NV. Native output
+is always present. RF/SB/TC require a distinct event field, never inference
+from words. Replay completion is labelled independently.
+"""
+import hashlib
+from pathlib import Path
+import unicodedata
+
+INVISIBLE = frozenset((0x200B,0x200C,0x200D,0x200E,0x200F,0xFEFF,0x2060,
+    0x2061,0x2062,0x2063,0x2064,0x2066,0x2067,0x2068,0x2069,
+    0x202A,0x202B,0x202C,0x202D,0x202E))
+ELLIPSIS_FORMS = frozenset(('.', '..', '...', '....', '…', '….'))
+
+def near_void(text):
+    if not text:
+        return False
+    if all(ord(character) in INVISIBLE or character.isspace() for character in text):
+        return True
+    return text.strip() in ELLIPSIS_FORMS
+
+def classifier_hash():
+    return hashlib.sha256(Path(__file__).read_bytes()).hexdigest()
+
+def classify(raw, *, successful, container_present=True, stop=None, event=None):
+    if type(raw) is not bytes or type(successful) is not bool or type(container_present) is not bool:
+        raise ValueError('Invalid classification evidence')
+    if not successful:
+        return 'operational'
+    if event is not None:
+        if event not in ('RF','SB','TC'):
+            raise ValueError('Unknown distinct provider event')
+        return event
+    text = raw.decode('utf-8', errors='strict')
+    if text:
+        return 'NV' if near_void(text) else 'R'
+    if stop == 'length':
+        return 'V1'
+    if stop == 'stop':
+        return 'V0' if container_present else 'V2'
+    return 'VU'
+
+def classification_record(raw, status, result=None):
+    result = result or {}
+    complete = result.get('generation_complete') is True
+    finish = result.get('finish')
+    stop = 'stop' if complete and finish == 'NATIVE_EOS' else 'length' if finish == 'TOKEN_CAP' else None
+    fields = {'successful':status == 'COMPLETED', 'container_present':True,
+              'stop':stop, 'output_bytes':len(raw),
+              'native_eos_selected':151645 in result.get('generated_token_ids', []),
+              'generation_complete':complete, 'finish':finish}
+    return {'class':classify(raw,successful=fields['successful'],stop=stop),
+            'fields':fields,'classifier_sha256':classifier_hash(),
+            'taxonomy':'Cross-Vendor Semantic Void Matrix, 2026-07-29',
+            'source_doi':'10.5281/zenodo.21696066',
+            'unicode_version':unicodedata.unidata_version,
+            'response_scope':result.get('answer_scope','NO_COMPLETED_MODEL_RESPONSE')}

swiftapi_python-1.4.0/swiftapi/native_verify.py

@@ -0,0 +1,292 @@
+"""Offline native receipt verification. No torch, weights, signing seed or network.
+
+Signatures authenticate records, not the honesty of an unattested runtime or its
+historical online revocation observation. Runtime trust is supplied out of band.
+"""
+import argparse
+import base64
+from datetime import datetime
+import hashlib
+import json
+import math
+from pathlib import Path
+import re
+import struct
+from nacl.signing import VerifyKey
+from .native_taxonomy import classification_record
+from .native_classifier_releases import RELEASED_CLASSIFIER_HASHES
+from .verifier import SWIFTAPI_PUBLIC_KEY_B64
+
+EOS, VOCAB = 151645, 151936
+MODES = ('RECORDED_LOGITS_REPLAY','FRESH_MODEL_EXECUTION')
+UNSIGNED = {'signature','signing_mode','action_data','denial_reason',
+            'violated_policies','evaluated_policies','evaluation_context'}
+
+def encoded(value):
+    return json.dumps(value,sort_keys=True,separators=(',',':'),ensure_ascii=True,allow_nan=False).encode()
+def digest(raw):
+    return hashlib.sha256(raw).hexdigest()
+def require(value, message):
+    if not value:
+        raise ValueError(message)
+def read_json(path):
+    def unique(pairs):
+        d = {}
+        for k,v in pairs:
+            require(k not in d,'Duplicate JSON member')
+            d[k] = v
+        return d
+    def invalid(_):
+        raise ValueError('Nonfinite JSON')
+    return json.loads(Path(path).read_bytes(),object_pairs_hook=unique,parse_constant=invalid)
+def signature(payload, sig, key):
+    VerifyKey(base64.b64decode(key,validate=True)).verify(encoded(payload),base64.b64decode(sig,validate=True))
+def instant(value):
+    dt = datetime.fromisoformat(value.replace('Z','+00:00'))
+    require(dt.tzinfo is not None,'Naive authority timestamp')
+    return dt.timestamp()
+
+def verify_revocation_entry(entry, jti, authority_key, *, decision_at=None):
+    fields={'cursor','jti','revoked_at','revoked_by','reason'}
+    require(isinstance(entry,dict) and set(entry)==fields|{'signature'},'Revocation entry shape')
+    require(entry['jti']==jti and type(entry['cursor']) is int and entry['cursor']>0,'Revocation JTI/cursor')
+    signature({k:entry[k] for k in fields},entry['signature'],authority_key)
+    revoked_at=instant(entry['revoked_at'])
+    if decision_at is not None:
+        require(revoked_at<=decision_at+5,'Revocation was not established at decision')
+    return True
+def grant_check(grant, action, when, authority_key):
+    """Return the same ordered permission reason, independently of the service."""
+    try:
+        require(isinstance(grant,dict) and grant.get('signing_mode') == 'ed25519','Authority algorithm')
+        signature({k:v for k,v in grant.items() if k not in UNSIGNED},grant['signature'],authority_key)
+    except Exception:
+        return 'INVALID_AUTHORITY_SIGNATURE'
+    if grant.get('action_type') != action['scope'] or grant.get('action_fingerprint') != digest(encoded(action))[:32]:
+        return 'GRANT_BINDING_MISMATCH'
+    if 'action_data' in grant and grant['action_data'] != action:
+        return 'GRANT_ACTION_ECHO_MISMATCH'
+    if grant.get('approved') is not True:
+        return 'AUTHORITY_DENIED'
+    try:
+        issued, expires = instant(grant['issued_at']),instant(grant['expires_at'])
+    except Exception:
+        return 'INVALID_GRANT_TIME'
+    if issued > when+5:
+        return 'GRANT_FUTURE'
+    age_limit = action.get('profile', {}).get('max_grant_age_seconds', 60)
+    if type(age_limit) not in (int,float) or not 0 < age_limit <= 3600:
+        return 'INVALID_GRANT_AGE_PROFILE'
+    if when-issued > age_limit or expires <= when or expires <= issued:
+        return 'GRANT_EXPIRED'
+    if not isinstance(grant.get('jti'),str) or not re.fullmatch(r'[a-zA-Z0-9_-]{1,128}',grant['jti']):
+        return 'INVALID_GRANT_ID'
+    return None
+
+def vector(raw):
+    require(len(raw) == 2*VOCAB,'Vector byte length')
+    vals = [struct.unpack('<f',b'\0\0'+raw[i:i+2])[0] for i in range(0,len(raw),2)]
+    require(all(math.isfinite(x) for x in vals),'Nonfinite vector')
+    return vals
+
+def verify_receipt(path, trusted_public_key, expected_mode, *, expected_max_grant_age_seconds,
+                   authority_key=SWIFTAPI_PUBLIC_KEY_B64,
+                   expected_source_sha256=None):
+    require(expected_mode in MODES,'Explicit expected mode required')
+    require(type(expected_max_grant_age_seconds) in (int,float) and
+            0 < expected_max_grant_age_seconds <= 3600,'Expected registered grant age required')
+    path = Path(path)
+    e = read_json(path)
+    require(set(e) == {'payload','signature','signer','algorithm'},'Envelope shape')
+    require(e['signer'] == 'LOCAL_RUNTIME' and e['algorithm'] == 'ed25519','Runtime signer')
+    r = e['payload']
+    signature(r,e['signature'],trusted_public_key)
+    require(r['schema'] == 'swiftapi-native-service-receipt/2','Receipt schema')
+    require(r['mode'] == expected_mode,'Receipt mode mismatch')
+    require(r['runtime_instance'] == digest(base64.b64decode(trusted_public_key)),'Runtime identity')
+    require(r['hardware_attested'] is False,'Hardware attestation unsupported')
+    require(r['authority_public_key'] == authority_key,'Authority key substituted')
+    require(r['source']['sha256'] == digest(encoded(r['source']['files'])),'Service source manifest')
+    if expected_source_sha256 is not None:
+        require(r['source']['sha256'] == expected_source_sha256,'Unexpected service source')
+    require(isinstance(r['sdk']['version'],str) and r['sdk']['version'],'Missing declared SDK version')
+    require(r['started_at'] <= r['finished_at'],'Receipt timeline')
+    assets = {}
+    for name, spec in r['assets'].items():
+        require(re.fullmatch(r'[a-zA-Z0-9_.-]+',name) and name not in ('.','..','receipt.json'),'Asset path')
+        p = path.parent/name
+        require(not p.is_symlink() and p.stat().st_size <= 4000000,'Unsafe asset')
+        data = p.read_bytes()
+        require(len(data) == spec['bytes'] and digest(data) == spec['sha256'],'Asset hash: '+name)
+        assets[name] = data
+    require('output.bin' in assets,'Missing output')
+    output = assets['output.bin']
+    require(r['output'].encode('utf-8') == output,'Raw output binding')
+    computed = classification_record(output,r['status'],r.get('result'))
+    declared_classifier = r['taxonomy']['classifier_sha256']
+    require(isinstance(declared_classifier,str) and declared_classifier in RELEASED_CLASSIFIER_HASHES,
+            'Unreleased classifier hash')
+    classifier_release = RELEASED_CLASSIFIER_HASHES[declared_classifier]
+    require(classifier_release['receipt_schema'] == r['schema'],'Classifier receipt schema')
+    require(r['sdk']['classifier_sha256'] == declared_classifier,'Declared SDK classifier binding')
+    # Source comments and Unicode database metadata are not classification rules.
+    compared = set(computed) - {'unicode_version','classifier_sha256'}
+    require(set(r['taxonomy']) == set(computed) and all(
+            computed[k] == r['taxonomy'][k] for k in compared),'Taxonomy class/fields mismatch')
+    summary = {'status':'PASS','mode':expected_mode,'execution_id':r['execution_id'],
+               'class':computed['class'],'response_scope':computed['response_scope'],
+               'runtime_signature':'PASS','authority_signature':'NOT_APPLICABLE',
+               'asset_hashes':'PASS','physical_execution_attested':False,
+               'full_model_forward_pass_reproduced':False,
+               'sdk_version_declared':r['sdk']['version'],
+               'classifier_sha256_declared':declared_classifier,
+               'classifier_first_sdk_version':classifier_release['first_sdk_version'],
+               'expected_max_grant_age_seconds':expected_max_grant_age_seconds,
+               'authority_public_key':authority_key,
+               'authority_evidence_kind':r['authority_evidence_kind'],
+               'production_authority':authority_key == SWIFTAPI_PUBLIC_KEY_B64,
+               'numerical_boundary_replay':'NOT_PERFORMED_LIGHT_VERIFIER',
+               'archived_score_source':'NOT_CHECKED_LIGHT_VERIFIER',
+               'revocation_scope':'Historical runtime report, not independently authority-signed'}
+    action = r.get('action')
+    if action is not None:
+        age_limit = action['profile']['max_grant_age_seconds']
+        require(type(age_limit) in (int,float) and 0 < age_limit <= 3600,'Signed grant age limit')
+        require(age_limit == expected_max_grant_age_seconds,'Registered grant age mismatch')
+    if r['authentication'] is not None:
+        auth = r['authentication']
+        require(grant_check(auth['grant'],auth['action'],auth['observed_at'],authority_key) is None,'Known-key authentication')
+        require(auth['action']['scope'] == 'swiftapi.native_service.connection_check','Authentication scope')
+        require(auth['action']['instance_id'] == r['runtime_instance'],'Authentication instance')
+        require(assets.get('authentication.json') == encoded(auth),'Authentication asset')
+        summary['authority_signature'] = 'PASS_CONNECTION_CHECK'
+    if r['status'] == 'OPERATIONAL':
+        require(computed['class'] == 'operational' and not output and r.get('result') is None,'Operational misrepresented')
+        summary['execution_outcome'] = 'OPERATIONAL_NOT_A_VOID'
+        return summary
+    require(r['status'] == 'COMPLETED' and r['authentication'] is not None,'Completed without known key')
+    required = {'request.json','prompt.utf8.bin','input-token-ids.json','grant.json','output.bin','authentication.json'}
+    require(required <= set(assets),'Required assets missing')
+    action, grant, decision, result = r['action'],r['grant'],r['authority_decision'],r['result']
+    require(r['action_sha256'] == digest(encoded(action)),'Action hash')
+    require(action['scope'] == 'pccg2.native_decode','Native scope')
+    require(action['instance_id'] == r['runtime_instance'],'Action instance')
+    require(action['principal_sha256'] == r['authentication']['action']['principal_sha256'],'Principal binding')
+    require(action['service_source_sha256'] == r['source']['sha256'],'Action source binding')
+    require(action['profile']['mode'] == expected_mode,'Action profile mode')
+    req = json.loads(assets['request.json'])
+    require({'request_id','question'} <= set(req) <= {'request_id','question','grant'},'Raw request shape')
+    require({k:req[k] for k in ('request_id','question')} == action['request'],'Raw request binding')
+    require(req.get('grant') == grant and assets['grant.json'] == encoded(grant),'Raw grant binding')
+    require(digest(assets['prompt.utf8.bin']) == action['rendered_prompt_sha256'],'Prompt binding')
+    require(digest(assets['input-token-ids.json']) == action['input_ids_sha256'],'Input IDs binding')
+    require(result['input_ids'] == json.loads(assets['input-token-ids.json']),'Input IDs echo')
+    require(result['rendered_prompt_sha256'] == action['rendered_prompt_sha256'] and result['input_ids_sha256'] == action['input_ids_sha256'],'Backend input hashes')
+    when = decision['evaluated_at']
+    times = r['times']
+    require(r['started_at'] == times['request_arrival_at'] <= times['scores_ready_at'] <= when <= r['finished_at'],'Boundary timeline')
+    require(times['decision_at'] == when,'Decision timestamp')
+    require(times['grant_issued_at'] == (grant.get('issued_at') if isinstance(grant,dict) else None),'Grant timestamp binding')
+    current = r['boundary_authentication']
+    if current is not None:
+        require(grant_check(current['grant'],current['action'],current['observed_at'],authority_key) is None,'Boundary key authentication')
+        require(current['action']['scope'] == 'swiftapi.native_service.connection_check' and current['action']['instance_id'] == r['runtime_instance'] and current['action']['principal_sha256'] == action['principal_sha256'],'Boundary authentication binding')
+    else:
+        require(decision['reason'] == 'KEY_REJECTED_AT_BOUNDARY','Missing boundary authentication')
+    check = 'MISSING_PERMISSION' if grant is None else grant_check(grant,action,when,authority_key)
+    permission = decision['permission']
+    if permission == 'PERMISSION_VERIFIED':
+        require(check is None and current is not None and decision['reason'] == 'VERIFIED_EXACT_REQUEST','Unverified permission')
+    else:
+        require(permission == 'PERMISSION_NOT_VERIFIED','Permission enum')
+        reason = decision['reason']
+        if reason not in {'REPLAYED_REQUEST','REPLAYED_BOUNDARY_GRANT','AUTHORITY_REVOKED','KEY_REJECTED_AT_BOUNDARY'}:
+            require(reason == check or (reason == 'AUTHORITY_DENIED_UNSIGNED' and grant is None),'Denial reason mismatch')
+        elif reason == 'AUTHORITY_REVOKED':
+            require(check is None,'Revoked grant authenticity/binding')
+    signed_denial = check == 'AUTHORITY_DENIED'
+    require(decision['denial_authority_signed'] is signed_denial,'Signed denial label')
+    if signed_denial:
+        require(assets.get('authority-denial.json') == encoded(grant),'Signed denial asset')
+    signed_revocation=decision.get('revocation_authority_signed',False)
+    require(type(signed_revocation) is bool,'Signed revocation flag')
+    if signed_revocation:
+        require(decision['reason']=='AUTHORITY_REVOKED' and 'authority-revocation.json' in assets,
+                'Signed revocation asset missing or not a revoked decision')
+        entry=json.loads(assets['authority-revocation.json'])
+        verify_revocation_entry(entry,grant['jti'],authority_key,decision_at=when)
+        require(decision['revocation_observation']=='AUTHORITY_SIGNED_ENTRY','Revocation observation label')
+        summary['revocation_scope']='AUTHORITY_SIGNED_ENTRY'
+    else:
+        require('authority-revocation.json' not in assets,'Unlabelled signed revocation evidence')
+        require(decision.get('revocation_observation')!='AUTHORITY_SIGNED_ENTRY','Unsigned revocation labelled signed')
+    summary['revocation_authority_signed']=signed_revocation
+    condition = 'EQ(485487,485487)' if permission == 'PERMISSION_VERIFIED' else 'EQ(485487,485489)'
+    require(r['gate_condition'] == result['gate_condition'] == condition,'Derived condition')
+    require(result['permission'] == permission and result['gate_condition_truth'] is (permission == 'PERMISSION_VERIFIED'),'Backend permission')
+    require(result['schema'] == 'swiftapi-native-backend-result/2' and result['native_eos'] == EOS,'Backend identity')
+    require(r['model_executed'] is (expected_mode == MODES[1]),'Content execution mode')
+    require(r['execution_facts'] == result['execution_facts'],'Execution facts binding')
+    require(r['times']['backend_timing'] == result['timing'],'Backend timing binding')
+    require(result['execution_facts']['model_executed'] is r['model_executed'],'Content execution facts')
+    tokens = result['generated_token_ids']
+    require(tokens and all(type(t) is int and 0 <= t < VOCAB for t in tokens),'Token list')
+    cap = 1 if expected_mode == MODES[0] else action['profile']['max_new_tokens']
+    require(type(cap) is int and 1 <= cap <= 16,'Configured token budget')
+    require(result['max_new_tokens'] == cap and len(tokens) <= cap and EOS not in tokens[:-1],'Token budget/termination')
+    complete = tokens[-1] == EOS
+    require(result['generation_complete'] is complete,'Completion flag')
+    finish = 'NATIVE_EOS' if complete else 'REPLAY_ONE_TOKEN_ONLY' if expected_mode == MODES[0] else 'TOKEN_CAP'
+    scope = 'COMPLETE_TO_NATIVE_EOS' if complete else 'FIRST_TOKEN_ONLY_NOT_A_COMPLETE_ANSWER' if expected_mode == MODES[0] else 'TRUNCATED_AT_TOKEN_CAP'
+    require(result['finish'] == finish and result['answer_scope'] == scope,'Completion scope')
+    require(complete or len(tokens) == cap,'Incomplete trace')
+    if permission == 'PERMISSION_NOT_VERIFIED':
+        require(tokens == [EOS] and output == b'' and computed['class'] == 'V0','Denied permission did not produce V0')
+    require(base64.b64decode(result['output_utf8_base64'],validate=True) == output and result['output_bytes'] == len(output) and result['output_sha256'] == digest(output),'Output evidence')
+    require(result['first_token_is_native_eos'] is (tokens[0] == EOS),'First token flag')
+    require(len(result['steps']) == len(tokens),'Step count')
+    require(result['execution_facts']['forward_passes_completed'] == (len(tokens) if expected_mode == MODES[1] else 0),'Forward-pass count')
+    names = {f'{i}-{kind}.bf16.bin' for i in range(len(tokens)) for kind in ('stock','selected')}
+    require(set(r['vector_files']) == names,'Vector set')
+    for i,step in enumerate(result['steps']):
+        raw, vals = [],[]
+        for kind in ('stock','selected'):
+            name = f'{i}-{kind}.bf16.bin'
+            p = path.parent/name
+            require(not p.is_symlink() and p.stat().st_size == 2*VOCAB,'Vector path/size')
+            data = p.read_bytes()
+            require(digest(data) == r['vector_files'][name],'Vector hash')
+            raw.append(data); vals.append(vector(data))
+        before, after = (data[:2*EOS]+data[2*EOS+2:] for data in raw)
+        require(before == after,'Non-EOS bytes changed')
+        require(step['index'] == i and step['selected_token'] == tokens[i] == max(range(VOCAB),key=vals[1].__getitem__),'Greedy selection')
+        require(step['stock_argmax_token'] == max(range(VOCAB),key=vals[0].__getitem__) and step['selected_logit'] == vals[1][tokens[i]],'Stock argmax/selected score')
+        require(step['stock_eos_logit'] == vals[0][EOS] and step['intervened_eos_logit'] == vals[1][EOS],'EOS score binding')
+        require(step['stock_vector_sha256'] == digest(raw[0]) and step['selected_vector_sha256'] == digest(raw[1]) and step['non_eos_sha256'] == digest(after),'Score hashes')
+        require(step['score_source'] == ('AUTHENTIC_BANK_FIRST_LOGITS' if expected_mode == MODES[0] else 'FRESH_FORWARD_PASS'),'Vector provenance label')
+        if i:
+            require(raw[0] == raw[1] and step['intervention'] == 'NONE','Later token intervention')
+    require(r['stop_cause'] == result['stop_cause'] and r['stop_cause'] in ('NONE','LEARNED_GATE','VETO'),'Stop cause')
+    summary.update(tokens=tokens,output_bytes=len(output),non_eos_unchanged=True,
+                   authority_signature='CHECKED_PRESENTED_GRANT_AND_CONNECTIONS',
+                   permission=permission,reason=decision['reason'])
+    return summary
+
+def main():
+    p=argparse.ArgumentParser(description=__doc__)
+    p.add_argument('receipt',type=Path)
+    p.add_argument('--trusted-key',required=True,type=Path)
+    p.add_argument('--expected-mode',required=True,choices=MODES)
+    p.add_argument('--expected-source-sha256')
+    p.add_argument('--expected-max-grant-age-seconds',required=True,type=float,
+                   help='Registered value supplied independently, never read from the receipt')
+    a=p.parse_args()
+    try:
+        result=verify_receipt(a.receipt,read_json(a.trusted_key)['public_key'],a.expected_mode,
+            expected_max_grant_age_seconds=a.expected_max_grant_age_seconds,
+            expected_source_sha256=a.expected_source_sha256)
+    except Exception as exc:
+        print(json.dumps({'status':'FAIL','reason':str(exc)})); raise SystemExit(2)
+    print(json.dumps(result,sort_keys=True))
+if __name__ == '__main__':
+    main()

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: swiftapi-python
-Version: 1.3.0
+Version: 1.4.0
 Summary: SwiftAPI Python SDK - AI Action Verification Gateway
 Author-email: Rayan Pal <rayan@swiftapi.ai>
 License-Expression: MIT
@@ -131,17 +131,14 @@ causal, theoretical, and protocol boundaries.
 
 ## Documentation
 
-Start with [Quickstart](docs/QUICKSTART.md). See [concepts](docs/CONCEPTS.md),
-[local brake](docs/LOCAL_BRAKE.md), [Codex](docs/CODEX.md),
-[Claude Code](docs/CLAUDE_CODE.md), [Python SDK](docs/PYTHON_SDK.md),
-[conditions](docs/CONDITIONS.md), [action envelopes](docs/ACTION_ENVELOPES.md),
-[receipts](docs/RECEIPTS.md), [verification](docs/VERIFICATION.md),
-[remote authority](docs/REMOTE_SWIFTAPI.md), [BYOK](docs/BYOK.md),
-[security](docs/SECURITY_MODEL.md), [threat model](docs/THREAT_MODEL.md),
-[native noncontinuation](docs/NATIVE_NONCONTINUATION.md),
-[benchmarking](docs/BENCHMARKING.md), and [provenance](docs/RESEARCH_PROVENANCE.md).
-
-[Migration from 1.2.2](MIGRATION_1_2_2.md) documents security corrections and
-termination-metadata changes. Historical 1.2.2 bytes remain immutable on PyPI.
+The full guides ship in the [source distribution on PyPI](https://pypi.org/project/swiftapi-python/#files),
+inside `docs/`. Start with `docs/QUICKSTART.md`. The source also includes guides
+for concepts, the local brake, Codex, Claude Code, the Python SDK, conditions,
+action envelopes, receipts, verification, remote authority, BYOK, security,
+the threat model, native noncontinuation, benchmarks, and research provenance.
+
+`MIGRATION_1_2_2.md` documents security corrections and termination-metadata
+changes. Historical 1.2.2 bytes remain immutable on PyPI. The public
+[SwiftAPI documentation](https://getswiftapi.com/docs) remains available online.
 
 MIT license. Research and software by Rayan Pal / SwiftAPI Labs.

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/swiftapi_python.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ CHANGELOG.md
 LICENSE
 MANIFEST.in
 MIGRATION_1_2_2.md
+NATIVE_RECEIPTS.md
 PRODUCT_TRUTH_MAP.md
 README.md
 pyproject.toml
@@ -35,6 +36,10 @@ swiftapi/cli.py
 swiftapi/client.py
 swiftapi/enforcement.py
 swiftapi/exceptions.py
+swiftapi/native.py
+swiftapi/native_classifier_releases.py
+swiftapi/native_taxonomy.py
+swiftapi/native_verify.py
 swiftapi/openai.py
 swiftapi/py.typed
 swiftapi/utils.py
@@ -61,6 +66,7 @@ tests/test_brake_benchmarks_remote.py
 tests/test_client.py
 tests/test_exceptions.py
 tests/test_legacy_security.py
+tests/test_native.py
 tests/test_openai.py
 tests/test_release_contract.py
 tests/test_responses.py

swiftapi_python-1.4.0/tests/test_native.py

@@ -0,0 +1,88 @@
+import json
+from unittest.mock import Mock
+import pytest
+from swiftapi import SwiftAPI,PolicyViolation
+from swiftapi.native_taxonomy import classify,classification_record,classifier_hash,near_void,INVISIBLE,ELLIPSIS_FORMS
+from swiftapi.native import NativeEOSClient
+
+def test_release_registry_pins_packaged_classifier():
+    from swiftapi.native_classifier_releases import RELEASED_CLASSIFIER_HASHES
+    release=RELEASED_CLASSIFIER_HASHES[classifier_hash()]
+    assert release['first_sdk_version']=='1.4.0'
+    assert release['rule']=='void-matrix/2dfe895bdafd35d23d6dab5f307ed560214a3843'
+
+def test_native_verifier_requires_external_expected_age_without_loading_model():
+    import inspect
+    from swiftapi.native_verify import verify_receipt
+    parameter=inspect.signature(verify_receipt).parameters['expected_max_grant_age_seconds']
+    assert parameter.kind is inspect.Parameter.KEYWORD_ONLY
+    assert parameter.default is inspect.Parameter.empty
+
+@pytest.mark.parametrize('raw,successful,present,stop,expected',[
+    (b'',True,True,'stop','V0'),(b'',True,False,'stop','V2'),
+    (b'',True,True,'length','V1'),(b'',True,False,'length','V1'),
+    (b'',True,True,None,'VU'),(b'',False,True,'stop','operational'),
+    (b' ',True,True,'stop','NV'),(b'?!',True,True,'stop','R'),
+    ('…'.encode(),True,True,'stop','NV'),('\u200b'.encode(),True,True,'stop','NV'),
+    (b'4',True,True,None,'R'),(b'hello.',True,True,'stop','R')])
+def test_taxonomy(raw,successful,present,stop,expected):
+    assert classify(raw,successful=successful,container_present=present,stop=stop)==expected
+@pytest.mark.parametrize('event',['RF','SB','TC'])
+def test_distinct_fields(event):
+    assert classify(b'',successful=True,event=event)==event
+def test_replay_not_complete():
+    r=classification_record(b'4','COMPLETED',{'finish':'REPLAY_ONE_TOKEN_ONLY',
+        'answer_scope':'FIRST_TOKEN_ONLY_NOT_A_COMPLETE_ANSWER','generation_complete':False,'generated_token_ids':[19]})
+    assert r['class']=='R' and not r['fields']['generation_complete']
+    assert r['response_scope']=='FIRST_TOKEN_ONLY_NOT_A_COMPLETE_ANSWER'
+    assert r['classifier_sha256']==classifier_hash()
+def test_policy_violation_retains_exact_body_nonbreaking():
+    raw=b'{"approved": false, "denial_reason": "test"}'
+    response=Mock(status_code=200,content=raw)
+    response.json.return_value=json.loads(raw)
+    with SwiftAPI('swiftapi_live_test') as api:
+        with pytest.raises(PolicyViolation) as caught:api._handle_response(response)
+    assert caught.value.response==json.loads(raw)
+    assert caught.value.raw_response==raw
+    assert caught.value.status_code==200 and caught.value.denial_reason=='test'
+@pytest.mark.parametrize('url',['https://other.example','http://localhost:3','http://127.0.0.1:3/?x=key','http://a:b@127.0.0.1:3','http://127.0.0.1:3/x'])
+def test_native_client_rejects_key_exfiltration_urls(url):
+    with pytest.raises(ValueError):NativeEOSClient(key='swiftapi_live_'+'a'*64,base_url=url)
+
+# Verbatim algorithm from void_matrix.FROZEN.py@2dfe895bdafd35d23d6dab5f307ed560214a3843.
+# The independent integration suite additionally extracts the original function by AST.
+def frozen_near_void(text):
+    if not text:
+        return False
+    # Literal frozen constants, independent of the implementation under test.
+    frozen_invisible = {0x200B,0x200C,0x200D,0x200E,0x200F,0xFEFF,
+        0x2060,0x2061,0x2062,0x2063,0x2064,0x2066,0x2067,0x2068,0x2069,
+        0x202A,0x202B,0x202C,0x202D,0x202E}
+    if all(ord(character) in frozen_invisible or character.isspace() for character in text):
+        return True
+    return text.strip() in {'.', '..', '...', '....', '…', '….'}
+
+@pytest.mark.parametrize('text',['',' ','\t\n','\u200b','\u200d','\ufeff',
+    '.','..','...','....','.....','. .','…','….','… …','?','!','-','4',' 4 '])
+def test_frozen_matrix_equivalence(text):
+    assert near_void(text) == frozen_near_void(text)
+    if text:
+        assert classify(text.encode(),successful=True,stop='stop') == ('NV' if frozen_near_void(text) else 'R')
+    else:
+        assert classify(b'',successful=True,stop='stop') == 'V0'
+
+def test_receipt_grant_age_is_signed_profile_value():
+    from swiftapi.native_verify import grant_check,encoded,digest
+    from nacl.signing import SigningKey
+    from datetime import datetime,timezone
+    import base64
+    key=SigningKey.generate()
+    action={'scope':'pccg2.native_decode','profile':{'max_grant_age_seconds':90}}
+    grant={'action_type':action['scope'],'action_fingerprint':digest(encoded(action))[:32],
+           'approved':True,'jti':'test','issued_at':datetime.fromtimestamp(1000,timezone.utc).isoformat(),
+           'expires_at':datetime.fromtimestamp(1200,timezone.utc).isoformat()}
+    grant['signature']=base64.b64encode(key.sign(encoded(grant)).signature).decode()
+    grant['signing_mode']='ed25519'
+    public=base64.b64encode(bytes(key.verify_key)).decode()
+    assert grant_check(grant,action,1070,public) is None
+    assert grant_check(grant,action,1091,public) == 'GRANT_EXPIRED'

{swiftapi_python-1.3.0 → swiftapi_python-1.4.0}/tests/test_release_contract.py

@@ -90,3 +90,16 @@ def test_revocation_unknown_stops_paranoid_callback():
     api._request = Mock(side_effect=NetworkError("offline"))
     with pytest.raises(NetworkError):
         api.check_revocation("x")
+
+
+def test_readme_document_links_resolve_outside_source_checkout():
+    from urllib.parse import urlparse
+
+    source = (Path(__file__).resolve().parents[1] / "README.md").read_text()
+    links = re.findall(r"\[[^\]]+\]\(([^)]+)\)", source)
+    assert links
+    for link in links:
+        parsed = urlparse(link)
+        assert parsed.scheme == "https" and parsed.netloc, (
+            "PyPI does not resolve repository-relative README links"
+        )