trunkit 0.2.6__tar.gz → 0.4.0__tar.gz

{trunkit-0.2.6 → trunkit-0.4.0}/.dockerignore

@@ -1,18 +1,18 @@
-.git
-.github
-__pycache__
-*.pyc
-*.pyo
-*.py[cod]
-.pytest_cache
-.mypy_cache
-.ruff_cache
-.coverage
-htmlcov/
-.venv
-venv
-dist
-build
-*.egg-info
-tests/fixtures/oeis/b*.txt
-.claude/
+.git
+.github
+__pycache__
+*.pyc
+*.pyo
+*.py[cod]
+.pytest_cache
+.mypy_cache
+.ruff_cache
+.coverage
+htmlcov/
+.venv
+venv
+dist
+build
+*.egg-info
+tests/fixtures/oeis/b*.txt
+.claude/

{trunkit-0.2.6 → trunkit-0.4.0}/.gitattributes

@@ -4,3 +4,5 @@
 *.md  text eol=lf
 *.toml text eol=lf
 *.yml text eol=lf
+*.sh text eol=lf
+*.lean text eol=lf

{trunkit-0.2.6 → trunkit-0.4.0}/.github/workflows/python-package-conda.yml

@@ -58,7 +58,8 @@ jobs:
         env:
           PGPASSWORD: trunk
         run: |
-          for f in $(ls src/calx/sql/*.sql | sort); do
+          # LC_ALL=C sort -n: numeric prefix order (99_ < 100_), matching calx.db.schema_order
+          for f in $(ls src/calx/sql/*.sql | LC_ALL=C sort -n); do
             psql -h localhost -p 5434 -U trunk -d trunk -f "$f" -q
           done
 
@@ -79,6 +80,40 @@ jobs:
           NERODE_DSN: postgresql://nerode:nerode@localhost:5435/nerode
         run: pytest -m "not slow and not primesieve and not network"
 
+  windows-smoke:
+    # The CLIs ship Unicode marks (✓ ✗ →) that crash on legacy cp1252 consoles
+    # unless stdio is reconfigured; this leg pins that fix and basic CLI health
+    # on Windows, where no database is available.
+    runs-on: windows-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: CLI smoke under cp1252
+        shell: pwsh
+        env:
+          PYTHONIOENCODING: cp1252
+          PYTHONUTF8: "0"
+        run: |
+          trunkit --help
+          nerode --help
+          python -c "from calx.cli import _utf8_stdio; _utf8_stdio(); print('✓ ✗ →')"
+          trunkit quickstart --compose-only --dir $env:RUNNER_TEMP\qs
+
+      - name: Unit tests (no database — DB-backed tests self-skip)
+        shell: pwsh
+        env:
+          PYTHONIOENCODING: cp1252
+        run: pytest -m "not slow and not primesieve and not network" -q
+
   build:
     runs-on: ubuntu-latest
     needs: ci

{trunkit-0.2.6 → trunkit-0.4.0}/.gitignore

@@ -1,52 +1,69 @@
-__pycache__/
-*.py[cod]
-*.egg-info/
-.pytest_cache/
-.mypy_cache/
-.ruff_cache/
-.coverage
-htmlcov/
-dist/
-build/
-.venv/
-venv/
-.env
-.envrc
-*.whl
-*.tar.gz
-
-# OEIS validation fixtures are pulled on demand
-tests/fixtures/oeis/b*.txt
-
-# Local data dumps
-*.dump
-*.sql.bak
-*.sql.gz
-
-# Claude IDE settings
-.claude/
-
-# Jules tooling
-.curry/
-
-# Editor
-.vscode/
-.idea/
-
-# Local artifacts
-test_results.txt
-results.json
-tools/advanced_results.json
-tools/benchmark_advanced.py
-tools/benchmark_prime.py
-tools/_schema_check.py
-
-# Accidentally-named venv path fragments
-Users*/
-.curry/
-
-.pr_body.md
-
-# Local workspace extensions (not part of the public library)
-local/
-corpus/
+__pycache__/
+*.py[cod]
+*.egg-info/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+dist/
+build/
+.venv/
+venv/
+.env
+.envrc
+*.whl
+*.tar.gz
+
+# OEIS validation fixtures are pulled on demand
+tests/fixtures/oeis/b*.txt
+
+# Local data dumps
+*.dump
+*.sql.bak
+*.sql.gz
+
+# Claude IDE settings
+.claude/
+
+# Jules tooling
+.curry/
+
+# Editor
+.vscode/
+.idea/
+
+# Local artifacts
+test_results.txt
+results.json
+tools/advanced_results.json
+tools/benchmark_advanced.py
+tools/benchmark_prime.py
+tools/_schema_check.py
+
+# Accidentally-named venv path fragments
+Users*/
+.curry/
+
+.pr_body.md
+
+# p-adic tree (calx + lithon) -- local-only project, do not push
+padic_tree/
+
+# Local-only research scratch (kernels + specs/results, not part of the package)
+chess-carry/
+ladder-encoder/
+rhyme-discovery/
+
+# Loom layer (bespoke arithmetic of orthogonal F_1 axes) -- local, untracked
+docs/LOOM_ORTHOGONAL_F1.md
+local/sql/97_kan_loom.sql
+local/sql/98_cert_loom.sql
+local/sql/99_loom_lift.sql
+local/tools/build_loom.py
+local/tools/build_loom_lift.py
+local/tests/test_loom.py
+local/tests/test_loom_lift.py
+local/backups/
+proofs/loom.py
+proofs/loom_lift.py

{trunkit-0.2.6 → trunkit-0.4.0}/Dockerfile

@@ -1,18 +1,18 @@
-FROM python:3.12-slim
-
-RUN apt-get update \
- && apt-get install -y --no-install-recommends \
-        primesieve \
-        libpq5 \
- && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /app
-
-COPY pyproject.toml README.md ./
-COPY src ./src
-
-RUN pip install --no-cache-dir .
-
-# Default entrypoint for the nerode CLI; override to 'trunk' for Trunkit
-ENTRYPOINT ["nerode"]
-CMD ["--help"]
+FROM python:3.12-slim
+
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
+        primesieve \
+        libpq5 \
+ && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY pyproject.toml README.md ./
+COPY src ./src
+
+RUN pip install --no-cache-dir .
+
+# Default entrypoint for the nerode CLI; override to 'trunk' for Trunkit
+ENTRYPOINT ["nerode"]
+CMD ["--help"]

trunkit-0.4.0/METHODS.md

@@ -0,0 +1,25 @@
+# Trunkit verification methods
+
+Universal, proof-carrying verification methods for the Trunkit ledger. Each is **verify-easy /
+find-hard**: a tiny deterministic kernel re-checks a compact, portable witness and returns one of
+three honest verdicts — `valid` / `refuted` / `unverified` (never a guess).
+
+The kernels live in the package at [`src/calx/methods/`](src/calx/methods/) and are registered
+with `calx.kernel.verify_witness`, so every dispatch surface picks them up automatically:
+`trunkit verify --bundle`, the consumer bundle checker, and the trunkit-mcp `kernel_verify`
+tool. Their verdict batteries run in the test suite (`tests/test_methods.py`).
+
+| Method | Kernel schema | Verifies | Witness (kind) | Refutation certificate |
+|--------|---------------|----------|----------------|------------------------|
+| [arith_check](docs/methods/arith_check_spec.md) | `arith_check` | a numeric claim, by exact recomputation | typed expression AST (`term`) | exact mismatch / dimensional mismatch / interval separation |
+| [quote_carry](docs/methods/quote_carry_spec.md) | `quote_carry` | a citation, by span + content hash | doc hash + span + quote hash (`quote_span`) | quote absent or at a different offset; version mismatch |
+| [csp_carry](docs/methods/csp_carry_spec.md) | `csp_carry` | a solution to a constraint problem | the assignment map (`term`) | the specific violated constraint, named |
+| [puzzle_parity](docs/methods/parity_results.md) | `puzzle_parity` | sliding-puzzle solvability | move sequence, or none (`trace`) | the parity invariant I = −1 |
+
+`puzzle_parity` is the sequential special case of `csp_carry` (witness = move list). `quote_carry`
+generalizes `empirical_corpus` and carries the new `quote_span` witness kind (registered in the
+canonical vocabulary, `84_cert_witness.sql`). Together they cover the recompute / ground /
+satisfy / invariant corners of one verify-easy pattern.
+
+Every kernel is stdlib-only, keeping the `calx.kernel` charter: a consumer who receives an
+exported bundle re-verifies these witnesses with nothing but a Python interpreter.

{trunkit-0.2.6 → trunkit-0.4.0}/Makefile

@@ -1,82 +1,83 @@
-TRUNK_DSN  ?= postgresql://trunk:trunk@localhost:5434/trunk
-NERODE_DSN ?= postgresql://nerode:nerode@localhost:5435/nerode
-
-.PHONY: up down apply apply-trunkit apply-nerode check check-trunkit check-nerode \
-        install dev-install test test-network lint build reset-trunkit reset-nerode
-
-## Start both PostgreSQL instances via Docker Compose
-up:
-	docker compose up -d db-trunkit db-nerode
-
-## Stop and remove containers
-down:
-	docker compose down
-
-## Apply Trunkit (calx/kan/curry/cert) schemas — idempotent
-apply-trunkit:
-	@for f in $$(ls src/calx/sql/*.sql | sort); do \
-		echo "  $$f"; \
-		psql "$(TRUNK_DSN)" -f "$$f" -q; \
-	done
-	@echo "Trunkit schema applied."
-
-## Apply Nerode (automata/session/porter) schemas — idempotent
-apply-nerode:
-	@for f in $$(ls src/nerode/sql/*.sql | sort); do \
-		echo "  $$f"; \
-		psql "$(NERODE_DSN)" -f "$$f" -q; \
-	done
-	@echo "Nerode schema applied."
-
-## Apply all schemas for both databases
-apply: apply-trunkit apply-nerode
-
-## Trunkit smoke check: populate integers and run reflexive closure
-check-trunkit:
-	python tools/kan_in_kan.py
-
-## Nerode smoke check: build a minimal DFA from a*b+ and run it
-check-nerode:
-	nerode build --regex "a*b+" --dsn "$(NERODE_DSN)"
-	nerode run  --input "aaab"   --dsn "$(NERODE_DSN)" --id 1
-
-## Run all checks
-check: check-trunkit check-nerode
-
-## Full local bootstrap: up -> apply -> check
-install: up
-	@echo "Waiting for databases to be ready..."
-	@sleep 3
-	$(MAKE) apply
-	$(MAKE) check
-
-## Install Python packages in editable/dev mode
-dev-install:
-	pip install -e ".[dev]"
-
-## Run tests
-test:
-	pytest -v
-
-## Network tests (real HTTP — weather, tickers, HN)
-test-network:
-	pytest tests/test_sources.py -m network -v
-
-## Lint
-lint:
-	ruff check src tests
-
-## Build wheel
-build:
-	python -m build
-
-## Drop Trunkit schemas and start fresh (destructive)
-reset-trunkit:
-	psql "$(TRUNK_DSN)" -c "DROP SCHEMA IF EXISTS cert, kan, curry, calx CASCADE;"
-	$(MAKE) apply-trunkit
-	$(MAKE) check-trunkit
-
-## Drop Nerode schemas and start fresh (destructive)
-reset-nerode:
-	psql "$(NERODE_DSN)" -c "DROP SCHEMA IF EXISTS nerode CASCADE;"
-	$(MAKE) apply-nerode
+TRUNK_DSN  ?= postgresql://trunk:trunk@localhost:5434/trunk
+NERODE_DSN ?= postgresql://nerode:nerode@localhost:5435/nerode
+
+.PHONY: up down apply apply-trunkit apply-nerode check check-trunkit check-nerode \
+        install dev-install test test-network lint build reset-trunkit reset-nerode
+
+## Start both PostgreSQL instances via Docker Compose
+up:
+	docker compose up -d db-trunkit db-nerode
+
+## Stop and remove containers
+down:
+	docker compose down
+
+## Apply Trunkit (calx/kan/curry/cert) schemas — idempotent
+## LC_ALL=C sort -n: numeric prefix order (99_ < 100_), matching calx.db.schema_order
+apply-trunkit:
+	@for f in $$(ls src/calx/sql/*.sql | LC_ALL=C sort -n); do \
+		echo "  $$f"; \
+		psql "$(TRUNK_DSN)" -f "$$f" -q; \
+	done
+	@echo "Trunkit schema applied."
+
+## Apply Nerode (automata/session/porter) schemas — idempotent
+apply-nerode:
+	@for f in $$(ls src/nerode/sql/*.sql | sort); do \
+		echo "  $$f"; \
+		psql "$(NERODE_DSN)" -f "$$f" -q; \
+	done
+	@echo "Nerode schema applied."
+
+## Apply all schemas for both databases
+apply: apply-trunkit apply-nerode
+
+## Trunkit smoke check: populate integers and run reflexive closure
+check-trunkit:
+	python tools/kan_in_kan.py
+
+## Nerode smoke check: build a minimal DFA from a*b+ and run it
+check-nerode:
+	nerode build --regex "a*b+" --dsn "$(NERODE_DSN)"
+	nerode run  --input "aaab"   --dsn "$(NERODE_DSN)" --id 1
+
+## Run all checks
+check: check-trunkit check-nerode
+
+## Full local bootstrap: up -> apply -> check
+install: up
+	@echo "Waiting for databases to be ready..."
+	@sleep 3
+	$(MAKE) apply
+	$(MAKE) check
+
+## Install Python packages in editable/dev mode
+dev-install:
+	pip install -e ".[dev]"
+
+## Run tests
+test:
+	pytest -v
+
+## Network tests (real HTTP — weather, tickers, HN)
+test-network:
+	pytest tests/test_sources.py -m network -v
+
+## Lint
+lint:
+	ruff check src tests
+
+## Build wheel
+build:
+	python -m build
+
+## Drop Trunkit schemas and start fresh (destructive)
+reset-trunkit:
+	psql "$(TRUNK_DSN)" -c "DROP SCHEMA IF EXISTS cert, kan, curry, calx CASCADE;"
+	$(MAKE) apply-trunkit
+	$(MAKE) check-trunkit
+
+## Drop Nerode schemas and start fresh (destructive)
+reset-nerode:
+	psql "$(NERODE_DSN)" -c "DROP SCHEMA IF EXISTS nerode CASCADE;"
+	$(MAKE) apply-nerode

{trunkit-0.2.6 → trunkit-0.4.0}/PKG-INFO

@@ -1,9 +1,10 @@
 Metadata-Version: 2.4
 Name: trunkit
-Version: 0.2.6
+Version: 0.4.0
 Summary: Trunkit — proof-carrying code and deterministic automata middleware on PostgreSQL, with Porter agent context handoff
 Project-URL: Homepage, https://github.com/Athena-Pro/Trunkit
 Project-URL: Repository, https://github.com/Athena-Pro/Trunkit
+Author-email: Athena Kaminsky <thegiantsnail@gmail.com>
 License: MIT
 License-File: LICENSE
 Keywords: agent,automata,category-theory,dfa,formal-verification,handoff,integer-sequences,llm,minimization,nerode-equivalence,postgresql,proof-carrying-code
@@ -23,11 +24,16 @@ Provides-Extra: binary
 Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'binary'
 Provides-Extra: dev
 Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: mcp>=1.0.0; extra == 'dev'
 Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'dev'
 Requires-Dist: pytest-cov>=5; extra == 'dev'
 Requires-Dist: pytest>=8; extra == 'dev'
 Requires-Dist: ruff>=0.6; extra == 'dev'
 Requires-Dist: twine>=5.0; extra == 'dev'
+Provides-Extra: image
+Requires-Dist: pillow>=10; extra == 'image'
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.0.0; extra == 'mcp'
 Description-Content-Type: text/markdown
 
 <p align="center">
@@ -74,10 +80,10 @@ Just PostgreSQL, Python, and ~1.5 MB of schemas.
 
 | Layer | Role |
 |-------|------|
-| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS sequence matching |
+| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS exact + **cosine-candidate** matching; **C-finite/P-finite recurrence certificates** |
 | **curry** | Immutable versioned constants and functions; append-only computational provenance |
 | **kan** | Category-*structured* meta-layer: reflects Postgres FK graphs into objects/morphisms and checks **structural invariants** (triangle commutativity, product universal property, naturality, epi classification) as re-runnable probes — see the caveat below |
-| **cert** | Proof-carrying attestation: five method tiers, structured witness storage, proof composition DAG, portable bundle export, consumer re-verification |
+| **cert** | Proof-carrying attestation: six method tiers, structured witness storage, proof composition DAG, portable bundle export, consumer re-verification; **exact-domain shield**, **recurrence/morphism certificates**, **holographic (Merkle) commitments**, **image anchoring**, **crypto-succinct (arithmetised) claims** |
 | **Nerode** | DFA/automata engine on PostgreSQL: construction, minimization, product, session DFAs, sequence cache, certified handoff envelopes |
 | **Porter** | Agent context handoff: pre-pack external data, certify session boundaries, hand verified context to a new model with zero tool calls |
 
@@ -113,6 +119,21 @@ compromised or wiped Nerode cannot corrupt or rewrite proof history.
 
 ## Quick start
 
+From pip (requires Docker for the bundled databases):
+
+```bash
+pip install trunkit   # installs both the trunkit and nerode CLIs
+trunkit quickstart      # writes docker-compose.yml, starts both DBs, applies both schemas
+trunkit generate --limit 10000
+trunkit standing
+```
+
+`trunkit quickstart --compose-only` just writes the compose file if you'd
+rather start the databases yourself; already-running instances are picked up
+via `$CALX_DSN` / `$NERODE_DSN`.
+
+From a repo checkout:
+
 ```bash
 # 1. Start both PostgreSQL instances
 docker compose up -d db-trunkit db-nerode
@@ -128,11 +149,6 @@ trunkit close --write
 python scripts/morning_brief_demo.py
 ```
 
-```bash
-# Install
-pip install trunkit   # installs both the trunkit and nerode CLIs
-```
-
 Environment variable: `CALX_DSN=postgresql://trunk:trunk@localhost:5434/trunk`
 
 ---
@@ -158,6 +174,13 @@ trunkit export <id> [<id> ...]
 # Emits a self-contained JSONB bundle to stdout:
 # claims + certificates + witnesses + derivations.
 # Portable — consumers can re-verify without a Trunkit install.
+
+trunkit verify --bundle FILE [--offline]
+# Consumer side of export: re-verifies a received bundle.
+# Replays each embedded probe against YOUR database (rolled back after),
+# checks witness presence, and verifies artifact sha256 hashes against
+# local files. --offline skips probe replay (structural checks only).
+# Three-valued per claim: VALID / REFUTED / UNVERIFIED. Exits 0 iff all valid.
 ```
 
 ```
@@ -199,7 +222,11 @@ trunkit close [--write]
 
 trunkit witness <claim_id> --kind KIND --body JSON [--write]
 # Attach a structured proof witness to a claim.
-# KIND: term | trace | counterexample | hash_chain | kan_diagram
+# KIND: term | trace | counterexample | hash_chain | kan_diagram | quote_span
+
+trunkit register-lean <claim_id> --root DIR --decl Module.thm [--write]
+# Register a Lean (Lake) project + declaration as a formal_external artifact.
+# Re-checked by tools/lean_check.sh: lake build + axiom / `sorry` audit.
 ```
 
 ### calx data
@@ -212,6 +239,7 @@ trunkit reset                          # drop all calx tables
 trunkit oeis-load [--family F]         # fetch curated OEIS b-files
 trunkit oeis-match [--orbit-id ID | --all]
 trunkit compose-match
+trunkit oeis-cosine --seq-id A000045    # scale-invariant growth-shape candidates, confirmed by exact prefix
 ```
 
 ---
@@ -276,6 +304,25 @@ conn.execute(
 | `formal_external` | SHA256-pinned external artifact | Python/Lean/Agda proof scripts |
 | `empirical_corpus` | Provenance only | Corpus document assertions |
 | `witness_carry` | In-DB witness term | Structured proof terms stored alongside certificates; consumer-replayable |
+| `crypto_succinct` | Pinned verifying key + external verifier | Succinct (optionally zero-knowledge) proofs over arithmetised first-order claims (`calx.arith`); the prover stays outside the package |
+
+> **Exactness shield.** Every claim also carries a `domain` tag (`exact_int` /
+> `rational` / `algebraic` / `interval` / `float_heuristic`). A ledger trigger
+> guarantees a `float_heuristic` claim can **never** record a `valid`
+> certificate — only `unverified`. Heuristics (e.g. cosine similarity)
+> *propose*; exact probes *decide*.
+
+---
+
+## Attestable structures (calx / cert)
+
+Beyond integer-fact and categorical claims, cert ships re-checkable, **exact** certificate families:
+
+- **Recurrence certificates** — a C-finite/P-finite recurrence (coefficients + initial terms) regenerates a sequence; `cert.recurrence_*` verifies it exactly and refuses non-exact division.
+- **Sequence morphisms** — `cert.morphism_*` proves an exact map (scale / affine / index-shift) between two sequences — the structural relation a cosine candidate only hints at.
+- **OEIS cosine candidates** — `calx.oeis_cosine_candidates` surfaces scale-invariant growth-shape neighbours, each confirmed by exact prefix agreement.
+- **Image anchoring + similarity** — `cert.image_*` anchors a figure by sha256 and scores perceptual cosine similarity (pure-SQL; the `[image]` extra is only for decoding).
+- **Holographic commitments** — `cert.merkle_root` / `cert.claim_commitment` commit an arbitrarily long trace to a 32-byte root (core `sha256`).
 
 ---
 
@@ -294,17 +341,19 @@ conn.execute(
 
 | Component | Files | Size |
 |-----------|-------|------|
-| SQL (00–96) | 99 | ~603 KB |
-| Python tools | 47 | ~393 KB |
-| Proof scripts | 4 | ~23 KB |
-| Src + tests + config | ~69 | ~558 KB |
-| **Total (no virtualenv)** | **~219** | **~1.5 MB** |
+| SQL (calx 00–98 + nerode 00–C0) | ~117 | ~711 KB |
+| Python packages (`src/`: calx + nerode + trunkit_mcp) | ~25 | ~183 KB |
+| Python tools | ~17 | ~188 KB |
+| Proof scripts | 6 | ~42 KB |
+| Tests | ~45 | ~296 KB |
+| **Total (no virtualenv)** | **~210** | **~1.4 MB** |
 
 For scale only (not a capability comparison): a Lean 4 toolchain is ≈ 2.9 GB
 per version and a compiled Mathlib ≈ 4–10 GB per project. **Trunkit is not a
 substitute for a proof assistant** — Lean/Mathlib verify arbitrary
 human-authored theorems, whereas Trunkit re-checks a fixed, small set of
-certificate schemas (factorization, CRT, Egyptian fractions, matrix words) plus
+certificate schemas (factorization, CRT, Egyptian fractions, matrix words,
+recurrence & morphism certificates, image / OEIS cosine candidates) plus
 re-runnable in-DB probes. The size figures say only that Trunkit fits in a
 database you already run; they do **not** imply equivalent verification power.
 
@@ -315,12 +364,16 @@ database you already run; they do **not** imply equivalent verification power.
 ```
 src/
   calx/       — Trunkit Python package (calx + kan + curry + cert)
+              + leanbridge.py · imagefeatures.py · recurrence.py
   nerode/     — Nerode/Porter Python package
-    sql/      — 23 idempotent SQL schema files (00_bootstrap → 97_composite_dfa)
+    sql/      — 38 idempotent SQL schema files (00_bootstrap → C0_verify),
+                incl. quantitative EHA/WFFA (A0–A6) + Porter policy gate (B0–B4, C0)
     precache.py   — Precacher context manager (Porter API)
     sources.py    — WeatherSource, TickerSource, HNSource, TickerHistorySource
     adapters.py   — HttpSource, CallableSource, resolve(), with_retry()
     db.py         — connection utilities + SCHEMA_FILES list
+  trunkit_mcp/ — MCP server (`trunkit-mcp`): consumer verify/export tools always
+                on; prover tools gated behind TRUNKIT_ALLOW_WRITE=1
 scripts/
   morning_brief_demo.py   — end-to-end Porter demo
 tests/
@@ -332,7 +385,10 @@ tests/
 proofs/
   *.py    — Trunkit proof scripts
 tools/
-  kan_in_kan.py   — Trunkit reflexive closure tool
+  cert_formal.py                        — formal-tier harness (python + lean checkers)
+  lean_check.sh, AxiomAudit.lean        — Lean bridge driver + axiom/`sorry` auditor
+  image_features.py, figure_extract.py  — vision tools ([image] extra)
+  oeis_loader.py, oeis_match.py, compose_match.py — OEIS workflows
 ```
 
 ---