trunkit 0.1.0__tar.gz

trunkit-0.1.0/.dockerignore

@@ -0,0 +1,13 @@
+.git
+.github
+__pycache__
+*.pyc
+*.pyo
+.pytest_cache
+.mypy_cache
+.venv
+venv
+dist
+build
+*.egg-info
+tests/fixtures/oeis/b*.txt

trunkit-0.1.0/.gitattributes

@@ -0,0 +1,6 @@
+* text=auto
+*.sql text eol=lf
+*.py  text eol=lf
+*.md  text eol=lf
+*.toml text eol=lf
+*.yml text eol=lf

trunkit-0.1.0/.github/workflows/python-package-conda.yml

@@ -0,0 +1,92 @@
+name: CI and Publish
+
+on:
+  push:
+    branches: [main]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: trunk
+          POSTGRES_PASSWORD: trunk
+          POSTGRES_DB: trunk
+        ports:
+          - 5434:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: Lint
+        run: ruff check src/
+
+      - name: Apply schema
+        env:
+          PGPASSWORD: trunk
+        run: |
+          for f in src/calx/sql/0[0-7]*.sql; do
+            psql -h localhost -p 5434 -U trunk -d trunk -f "$f" -q
+          done
+
+      - name: Test
+        env:
+          CALX_TEST_DSN: postgresql://trunk:trunk@localhost:5434/trunk
+        run: pytest -m "not slow and not primesieve"
+
+  build:
+    runs-on: ubuntu-latest
+    needs: ci
+    if: startsWith(github.ref, 'refs/tags/v')
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Build
+        run: |
+          pip install build
+          python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: build
+    if: startsWith(github.ref, 'refs/tags/v')
+    environment: pypi
+    permissions:
+      id-token: write
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

trunkit-0.1.0/.gitignore

@@ -0,0 +1,27 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+dist/
+build/
+.venv/
+venv/
+.env
+.envrc
+
+# OEIS validation fixtures are pulled on demand
+tests/fixtures/oeis/b*.txt
+
+# Local data dumps
+*.dump
+*.sql.gz
+
+# Claude IDE settings
+.claude/
+
+# Jules tooling
+.curry/

trunkit-0.1.0/Dockerfile

@@ -0,0 +1,18 @@
+FROM python:3.12-slim
+
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
+        primesieve \
+        libpq5 \
+ && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+COPY sql ./sql
+
+RUN pip install --no-cache-dir .
+
+ENTRYPOINT ["trunk"]
+CMD ["--help"]

trunkit-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Athena-Pro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

trunkit-0.1.0/Makefile

@@ -0,0 +1,40 @@
+DSN ?= postgresql://trunk:trunk@localhost:5434/trunk
+
+.PHONY: up down apply check reset install
+
+## Start PostgreSQL via Docker Compose
+up:
+	docker compose up -d db
+
+## Stop and remove containers
+down:
+	docker compose down
+
+## Apply all SQL schemas in order (idempotent)
+apply:
+	@for f in $$(ls src/calx/sql/*.sql | sort); do \
+		echo "  $$f"; \
+		psql $(DSN) -f "$$f" -q; \
+	done
+	@echo "Done. Run 'make check' to verify."
+
+## Populate integers and run reflexive closure + cert attestation
+check:
+	python tools/kan_in_kan.py
+
+## Attest formal-tier proof artifacts
+attest:
+	python tools/cert_formal.py
+
+## Full local bootstrap: up → apply → check
+install: up
+	@echo "Waiting for db to be ready..."
+	@sleep 3
+	$(MAKE) apply
+	$(MAKE) check
+
+## Drop all Trunkit schemas and start fresh (destructive)
+reset:
+	psql $(DSN) -c "DROP SCHEMA IF EXISTS cert, kan, curry, calx CASCADE;"
+	$(MAKE) apply
+	$(MAKE) check

trunkit-0.1.0/PKG-INFO

@@ -0,0 +1,195 @@
+Metadata-Version: 2.4
+Name: trunkit
+Version: 0.1.0
+Summary: Trunkit — low-cost proof-carrying code middleware on PostgreSQL
+Project-URL: Homepage, https://github.com/Athena-Pro/Trunkit
+Project-URL: Repository, https://github.com/Athena-Pro/Trunkit
+License: MIT
+License-File: LICENSE
+Keywords: category-theory,formal-verification,number-theory,postgresql,proof-carrying-code
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Science/Research
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: SQL
+Classifier: Topic :: Database
+Classifier: Topic :: Scientific/Engineering :: Mathematics
+Requires-Python: >=3.11
+Requires-Dist: psycopg[binary]<4,>=3.2
+Provides-Extra: dev
+Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: pytest-cov>=5; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Requires-Dist: twine>=5.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# Trunkit
+
+> The smallest elephant in the room that's not too Coq-y and doesn't Lean too heavily on your system.
+
+Proof-carrying code middleware on PostgreSQL. Trunkit is a self-contained schema stack
+that attaches verifiable claims to mathematical objects, chains proofs compositionally,
+and lets consumers re-verify results without trusting the producer — all inside a
+database you already operate, with no specialist toolchain required.
+
+No 3 GB compiler. No gigabytes of cached proof objects. No new runtime to learn.
+Just PostgreSQL, Python, and ~1 MB of schemas that describe, attest, and verify themselves.
+
+---
+
+## Schemas
+
+```
+┌──────────────────────────────────────────────────────────┐
+│  cert  — proof-carrying attestation                       │
+│    witness · derivation · verify() · export_bundle()      │
+├──────────────┬───────────────────────────────────────────┤
+│  kan         │  curry                                     │
+│  category    │  versioned provenance                      │
+│  theory      │  + immutable constants                     │
+├──────────────┴───────────────────────────────────────────┤
+│  calx  — integer arithmetic bedrock                       │
+│    primes · factorizations · dynamics · CRT · OEIS        │
+└──────────────────────────────────────────────────────────┘
+          PostgreSQL 16   ·   Python 3.11+
+```
+
+| Schema | Role |
+|--------|------|
+| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS sequence matching |
+| **curry** | Immutable versioned constants and functions; append-only computational provenance |
+| **kan** | Category-theory meta-layer: base categories → monoidal → NTs → Kan extensions → enrichment → profunctors → adjunctions; reflexively describes itself |
+| **cert** | Proof-carrying attestation: five method tiers, structured witness storage, proof composition DAG, portable bundle export, side-effect-free consumer re-verification |
+
+---
+
+## Quick start
+
+```bash
+# 1. Start PostgreSQL
+docker compose up -d db
+
+# 2. Apply schemas (idempotent — safe to re-run)
+make apply
+
+# 3. Populate integers and compute reflexive closure
+trunkit generate --limit 10000
+trunkit close --write
+
+# 4. Check all claims
+trunkit standing
+```
+
+```bash
+# Install
+pip install trunkit
+pip install -e ".[dev]"      # local development
+```
+
+Environment variable: `CALX_DSN=postgresql://trunk:trunk@localhost:5434/trunk`
+
+---
+
+## CLI
+
+Trunkit ships a dual-surface CLI. Consumer commands are read-only and safe for LLM use.
+Prover commands require `--write` to record; they dry-run without it.
+
+### Consumer — read-only
+
+```bash
+trunkit verify <claim_id>
+# Re-verifies a claim without inserting. Replays the stored witness or
+# re-runs the probe SQL in a subtransaction. Exits 0 if valid.
+
+trunkit standing [--method M] [--status S]
+# Lists all claims with their latest attestation status.
+# Filter by method (comp_sql, struct_kan, formal_external,
+# empirical_corpus, witness_carry) or status (valid, refuted, unverified).
+
+trunkit export <id> [<id> ...]
+# Emits a self-contained JSONB bundle to stdout:
+# claims + certificates + witnesses + derivations.
+# Portable — consumers can re-verify without a Trunkit install.
+```
+
+### Prover — require `--write`
+
+```bash
+trunkit check <claim_id> [--write]
+# Dry-run: shows what the claim would attest as (via cert.verify).
+# With --write: runs cert.check() and records a certificate.
+
+trunkit attest [--write]
+# Dry-run: reports formal-tier claims that would be attested.
+# With --write: runs cert_formal.py and records all formal-tier certificates.
+
+trunkit close [--write]
+# Dry-run: reports intent without side effects.
+# With --write: computes reflexive closure — curry fixed points
+# (primitive eigenforms) + kan Perron-Frobenius attractor — and
+# records eigenform claims.
+
+trunkit witness <claim_id> --kind KIND --body JSON [--write]
+# Attach a structured proof witness to a claim.
+# KIND: term | trace | counterexample | hash_chain | kan_diagram
+```
+
+### calx data
+
+```bash
+trunkit init                           # apply schema DDL
+trunkit generate --limit N             # populate integers 1..N
+trunkit validate [--limit N]           # compare ω/Ω against OEIS
+trunkit reset                          # drop all calx tables
+trunkit oeis-load [--family F]         # fetch curated OEIS b-files
+trunkit oeis-match [--orbit-id ID | --all]
+trunkit compose-match
+```
+
+---
+
+## cert method tiers
+
+| Method | Trust root | Use |
+|--------|-----------|-----|
+| `comp_sql` | In-DB probe | Computational facts about integers or categorical counts |
+| `struct_kan` | Existing kan invariant | Naturality, triangle identities, faithfulness checks |
+| `formal_external` | SHA256-pinned external artifact | Python/Lean/Agda proof scripts |
+| `empirical_corpus` | Provenance only | Corpus document assertions |
+| `witness_carry` | In-DB witness term | Structured proof terms stored alongside certificates; consumer-replayable |
+
+---
+
+## PCC properties
+
+| Property | Mechanism |
+|----------|-----------|
+| Proof travels with code | `cert.witness` stores structured proof terms alongside every certificate |
+| Proofs compose | `cert.derivation` encodes a DAG of premises → conclusion under named rules |
+| Consumer re-verifies | `cert.verify(claim_id)` replays without INSERTing — safe for untrusted callers |
+| Bundle is portable | `cert.export_bundle(ids[])` emits self-contained JSONB: claims + certs + witnesses + derivations |
+
+---
+
+## Bundle size
+
+| Component | Files | Size |
+|-----------|-------|------|
+| SQL (89 files, 00–88) | 89 | ~290 KB |
+| Python tools | 37 | ~323 KB |
+| Proof scripts | 24 | ~172 KB |
+| Src + tests + config | ~30 | ~130 KB |
+| **Total (no virtualenv)** | **~183** | **~1.1 MB** |
+
+Compare: Lean 4 toolchain ≈ 2.9 GB per version; Mathlib compiled ≈ 4–10 GB per project.
+
+---
+
+## License
+
+MIT

trunkit-0.1.0/README.md

@@ -0,0 +1,166 @@
+# Trunkit
+
+> The smallest elephant in the room that's not too Coq-y and doesn't Lean too heavily on your system.
+
+Proof-carrying code middleware on PostgreSQL. Trunkit is a self-contained schema stack
+that attaches verifiable claims to mathematical objects, chains proofs compositionally,
+and lets consumers re-verify results without trusting the producer — all inside a
+database you already operate, with no specialist toolchain required.
+
+No 3 GB compiler. No gigabytes of cached proof objects. No new runtime to learn.
+Just PostgreSQL, Python, and ~1 MB of schemas that describe, attest, and verify themselves.
+
+---
+
+## Schemas
+
+```
+┌──────────────────────────────────────────────────────────┐
+│  cert  — proof-carrying attestation                       │
+│    witness · derivation · verify() · export_bundle()      │
+├──────────────┬───────────────────────────────────────────┤
+│  kan         │  curry                                     │
+│  category    │  versioned provenance                      │
+│  theory      │  + immutable constants                     │
+├──────────────┴───────────────────────────────────────────┤
+│  calx  — integer arithmetic bedrock                       │
+│    primes · factorizations · dynamics · CRT · OEIS        │
+└──────────────────────────────────────────────────────────┘
+          PostgreSQL 16   ·   Python 3.11+
+```
+
+| Schema | Role |
+|--------|------|
+| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS sequence matching |
+| **curry** | Immutable versioned constants and functions; append-only computational provenance |
+| **kan** | Category-theory meta-layer: base categories → monoidal → NTs → Kan extensions → enrichment → profunctors → adjunctions; reflexively describes itself |
+| **cert** | Proof-carrying attestation: five method tiers, structured witness storage, proof composition DAG, portable bundle export, side-effect-free consumer re-verification |
+
+---
+
+## Quick start
+
+```bash
+# 1. Start PostgreSQL
+docker compose up -d db
+
+# 2. Apply schemas (idempotent — safe to re-run)
+make apply
+
+# 3. Populate integers and compute reflexive closure
+trunkit generate --limit 10000
+trunkit close --write
+
+# 4. Check all claims
+trunkit standing
+```
+
+```bash
+# Install
+pip install trunkit
+pip install -e ".[dev]"      # local development
+```
+
+Environment variable: `CALX_DSN=postgresql://trunk:trunk@localhost:5434/trunk`
+
+---
+
+## CLI
+
+Trunkit ships a dual-surface CLI. Consumer commands are read-only and safe for LLM use.
+Prover commands require `--write` to record; they dry-run without it.
+
+### Consumer — read-only
+
+```bash
+trunkit verify <claim_id>
+# Re-verifies a claim without inserting. Replays the stored witness or
+# re-runs the probe SQL in a subtransaction. Exits 0 if valid.
+
+trunkit standing [--method M] [--status S]
+# Lists all claims with their latest attestation status.
+# Filter by method (comp_sql, struct_kan, formal_external,
+# empirical_corpus, witness_carry) or status (valid, refuted, unverified).
+
+trunkit export <id> [<id> ...]
+# Emits a self-contained JSONB bundle to stdout:
+# claims + certificates + witnesses + derivations.
+# Portable — consumers can re-verify without a Trunkit install.
+```
+
+### Prover — require `--write`
+
+```bash
+trunkit check <claim_id> [--write]
+# Dry-run: shows what the claim would attest as (via cert.verify).
+# With --write: runs cert.check() and records a certificate.
+
+trunkit attest [--write]
+# Dry-run: reports formal-tier claims that would be attested.
+# With --write: runs cert_formal.py and records all formal-tier certificates.
+
+trunkit close [--write]
+# Dry-run: reports intent without side effects.
+# With --write: computes reflexive closure — curry fixed points
+# (primitive eigenforms) + kan Perron-Frobenius attractor — and
+# records eigenform claims.
+
+trunkit witness <claim_id> --kind KIND --body JSON [--write]
+# Attach a structured proof witness to a claim.
+# KIND: term | trace | counterexample | hash_chain | kan_diagram
+```
+
+### calx data
+
+```bash
+trunkit init                           # apply schema DDL
+trunkit generate --limit N             # populate integers 1..N
+trunkit validate [--limit N]           # compare ω/Ω against OEIS
+trunkit reset                          # drop all calx tables
+trunkit oeis-load [--family F]         # fetch curated OEIS b-files
+trunkit oeis-match [--orbit-id ID | --all]
+trunkit compose-match
+```
+
+---
+
+## cert method tiers
+
+| Method | Trust root | Use |
+|--------|-----------|-----|
+| `comp_sql` | In-DB probe | Computational facts about integers or categorical counts |
+| `struct_kan` | Existing kan invariant | Naturality, triangle identities, faithfulness checks |
+| `formal_external` | SHA256-pinned external artifact | Python/Lean/Agda proof scripts |
+| `empirical_corpus` | Provenance only | Corpus document assertions |
+| `witness_carry` | In-DB witness term | Structured proof terms stored alongside certificates; consumer-replayable |
+
+---
+
+## PCC properties
+
+| Property | Mechanism |
+|----------|-----------|
+| Proof travels with code | `cert.witness` stores structured proof terms alongside every certificate |
+| Proofs compose | `cert.derivation` encodes a DAG of premises → conclusion under named rules |
+| Consumer re-verifies | `cert.verify(claim_id)` replays without INSERTing — safe for untrusted callers |
+| Bundle is portable | `cert.export_bundle(ids[])` emits self-contained JSONB: claims + certs + witnesses + derivations |
+
+---
+
+## Bundle size
+
+| Component | Files | Size |
+|-----------|-------|------|
+| SQL (89 files, 00–88) | 89 | ~290 KB |
+| Python tools | 37 | ~323 KB |
+| Proof scripts | 24 | ~172 KB |
+| Src + tests + config | ~30 | ~130 KB |
+| **Total (no virtualenv)** | **~183** | **~1.1 MB** |
+
+Compare: Lean 4 toolchain ≈ 2.9 GB per version; Mathlib compiled ≈ 4–10 GB per project.
+
+---
+
+## License
+
+MIT