trojaino 0.1.6__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. trojaino-0.1.6/CHANGELOG.md +39 -0
  2. trojaino-0.1.6/LICENSE +661 -0
  3. trojaino-0.1.6/MANIFEST.in +4 -0
  4. trojaino-0.1.6/PKG-INFO +149 -0
  5. trojaino-0.1.6/README.md +136 -0
  6. trojaino-0.1.6/docs/calibration-benchmark.md +30 -0
  7. trojaino-0.1.6/docs/machine-contract-v1.md +39 -0
  8. trojaino-0.1.6/docs/pypi-trusted-publishing.md +52 -0
  9. trojaino-0.1.6/docs/windows-installation.md +109 -0
  10. trojaino-0.1.6/pyproject.toml +25 -0
  11. trojaino-0.1.6/requirements/test.txt +1 -0
  12. trojaino-0.1.6/requirements/windows-build.txt +3 -0
  13. trojaino-0.1.6/schemas/trojaino-report-v1.schema.json +64 -0
  14. trojaino-0.1.6/setup.cfg +4 -0
  15. trojaino-0.1.6/tests/test_calibration_benchmark.py +37 -0
  16. trojaino-0.1.6/tests/test_contributions.py +134 -0
  17. trojaino-0.1.6/tests/test_distribution_verification.py +71 -0
  18. trojaino-0.1.6/tests/test_false_positive_precision.py +189 -0
  19. trojaino-0.1.6/tests/test_gui.py +74 -0
  20. trojaino-0.1.6/tests/test_hostile_inputs.py +493 -0
  21. trojaino-0.1.6/tests/test_machine_contract.py +98 -0
  22. trojaino-0.1.6/tests/test_release_profile.py +57 -0
  23. trojaino-0.1.6/tests/test_scanner.py +671 -0
  24. trojaino-0.1.6/tests/test_windows_executable_build.py +63 -0
  25. trojaino-0.1.6/trojaino/__init__.py +29 -0
  26. trojaino-0.1.6/trojaino/__main__.py +5 -0
  27. trojaino-0.1.6/trojaino/cli.py +437 -0
  28. trojaino-0.1.6/trojaino/contract.py +7 -0
  29. trojaino-0.1.6/trojaino/contributions.py +270 -0
  30. trojaino-0.1.6/trojaino/file_utils.py +399 -0
  31. trojaino-0.1.6/trojaino/gui.py +387 -0
  32. trojaino-0.1.6/trojaino/models.py +262 -0
  33. trojaino-0.1.6/trojaino/report.py +281 -0
  34. trojaino-0.1.6/trojaino/rules/__init__.py +21 -0
  35. trojaino-0.1.6/trojaino/rules/agent_files.py +57 -0
  36. trojaino-0.1.6/trojaino/rules/budget.py +48 -0
  37. trojaino-0.1.6/trojaino/rules/ci.py +58 -0
  38. trojaino-0.1.6/trojaino/rules/docker.py +50 -0
  39. trojaino-0.1.6/trojaino/rules/mcp.py +176 -0
  40. trojaino-0.1.6/trojaino/rules/node_routes.py +126 -0
  41. trojaino-0.1.6/trojaino/rules/package_json.py +122 -0
  42. trojaino-0.1.6/trojaino/rules/python_app.py +281 -0
  43. trojaino-0.1.6/trojaino/rules/python_packaging.py +213 -0
  44. trojaino-0.1.6/trojaino/rules/registry.py +93 -0
  45. trojaino-0.1.6/trojaino/rules/secrets.py +106 -0
  46. trojaino-0.1.6/trojaino/scanner.py +472 -0
  47. trojaino-0.1.6/trojaino.egg-info/PKG-INFO +149 -0
  48. trojaino-0.1.6/trojaino.egg-info/SOURCES.txt +49 -0
  49. trojaino-0.1.6/trojaino.egg-info/dependency_links.txt +1 -0
  50. trojaino-0.1.6/trojaino.egg-info/entry_points.txt +2 -0
  51. trojaino-0.1.6/trojaino.egg-info/top_level.txt +1 -0
trojaino-0.1.6/CHANGELOG.md ADDED
@@ -0,0 +1,39 @@
1
+ # Changelog
2
+
3
+ All notable changes to Trojaino are documented here.
4
+
5
+ ## 0.1.6 - 2026-09-07
6
+
7
+ ### Machine contract
8
+
9
+ - Introduced Machine Contract v1 for JSON scan reports (`schema_version: "1.0.0"`).
10
+ - Added immutable `trojaino-core` rule-pack identity and deterministic finding fingerprints.
11
+ - Published the checked-in JSON Schema at `schemas/trojaino-report-v1.schema.json`.
12
+ - Existing JSON fields and meanings remain compatible; compatible changes are additive within schema v1.
13
+
14
+ ### Rule lifecycle
15
+
16
+ - Rule IDs are public, unique, and never reused. Retired rules remain documented as retired.
17
+ - A material security-meaning change receives a new rule ID and rule-pack version.
18
+
19
+ ### Python packaging
20
+
21
+ - Added bounded, non-executing checks for malformed `pyproject.toml`, direct build/runtime dependency sources, extra package indexes, and module-level network access in `setup.py`.
22
+ - Advanced the `trojaino-core` rule-pack version to `1.1.0`; no verdict threshold changed.
23
+
24
+ ### Verdicts
25
+
26
+ - No verdict threshold changes in this release.
27
+
28
+ ### Calibration and usability
29
+
30
+ - Added a reproducible, synthetic 20-target calibration benchmark with versioned summaries and sanitized example reports.
31
+ - The Windows GUI now saves reports to a stable `Documents/TrojainoReports` folder instead of changing the default with each scan target.
32
+
33
+ ### Distribution
34
+
35
+ - Added the tag-only PyPI Trusted Publishing workflow, which builds, validates, and smoke-tests the wheel and source distribution before a separately configured PyPI publish approval.
36
+
37
+ ## 0.1.4.1
38
+
39
+ - Windows installer and scanner improvements.