verdifax 0.2.0__tar.gz

verdifax-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Verdifax
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

verdifax-0.2.0/MANIFEST.in

@@ -0,0 +1,10 @@
+include README.md
+include LICENSE
+include pyproject.toml
+include requirements.txt
+include requirements-dev.txt
+include verdifax/py.typed
+recursive-include tests *.py
+global-exclude __pycache__
+global-exclude *.py[cod]
+global-exclude *.so

verdifax-0.2.0/PKG-INFO

@@ -0,0 +1,137 @@
+Metadata-Version: 2.4
+Name: verdifax
+Version: 0.2.0
+Summary: Python SDK for the Verdifax cryptographic attestation pipeline
+Home-page: https://verdifax.com
+Author: Verdifax
+Author-email: Verdifax <team@verdifax.com>
+License-Expression: MIT
+Project-URL: Homepage, https://verdifax.com
+Project-URL: Documentation, https://docs.verdifax.com
+Project-URL: Repository, https://github.com/verdifax/verdifax-sdk-python
+Project-URL: Issues, https://github.com/verdifax/verdifax-sdk-python/issues
+Keywords: verdifax,attestation,ai,audit,compliance,manifest,hash,provenance
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: Security :: Cryptography
+Classifier: Typing :: Typed
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: httpx>=0.25.0
+Requires-Dist: pydantic<3.0,>=2.0
+Requires-Dist: typing-extensions>=4.0
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.21; extra == "dev"
+Requires-Dist: respx>=0.20; extra == "dev"
+Requires-Dist: black>=23.0; extra == "dev"
+Requires-Dist: mypy>=1.5; extra == "dev"
+Requires-Dist: build>=1.0; extra == "dev"
+Dynamic: license-file
+
+# Verdifax Python SDK
+
+Cryptographic attestation for AI inference. Three lines: send a payload, get a signed manifest hash you can give to an auditor.
+
+## Install
+
+```bash
+pip install verdifax
+```
+
+## Quickstart
+
+```python
+import verdifax
+
+receipt = verdifax.attest(
+    payload="hello verdifax",
+    program_id="a" * 64,
+    route_id="route-test",
+    registry_record_hash="b" * 64,
+)
+print(receipt.manifest_hash)
+```
+
+That's it. The receipt's `manifest_hash` is a 64-char SHA-256 that seals every input, every kernel execution ID, the hardware attestation, the ZK transcript, the formal verifier status, and the final VFA. Anyone with the same inputs can re-derive the same hash.
+
+## Configuration
+
+By default the SDK talks to a Verdifax API at `http://localhost:9090` (the orchestrator's REST server). Override with environment variables:
+
+```bash
+export VERDIFAX_API_URL=https://api.verdifax.example.com
+export VERDIFAX_API_KEY=your-api-key
+```
+
+Or construct a client explicitly:
+
+```python
+from verdifax import VerdifaxClient
+
+client = VerdifaxClient(base_url="https://api.verdifax.example.com", api_key="...")
+receipt = client.attest(payload="...", program_id="...", route_id="...", registry_record_hash="...")
+```
+
+## Async
+
+```python
+import asyncio
+from verdifax import AsyncVerdifaxClient
+
+async def main():
+    async with AsyncVerdifaxClient() as client:
+        receipt = await client.attest(
+            payload="hello verdifax",
+            program_id="a" * 64,
+            route_id="route-test",
+            registry_record_hash="b" * 64,
+        )
+        print(receipt.manifest_hash)
+
+asyncio.run(main())
+```
+
+## Verification
+
+Re-derive the manifest hash from the same inputs and confirm it matches a previously issued receipt:
+
+```python
+ok = client.verify(
+    manifest_hash=receipt.manifest_hash,
+    payload="hello verdifax",
+    program_id="a" * 64,
+    route_id="route-test",
+    registry_record_hash="b" * 64,
+)
+```
+
+## Helpers for popular providers
+
+```python
+import verdifax
+
+receipt = verdifax.attest_claude_response(
+    prompt="What is the boiling point of water?",
+    response="100 °C at sea level.",
+    program_id="a" * 64,
+    route_id="claude-route",
+    registry_record_hash="b" * 64,
+)
+```
+
+There is also `verdifax.attest_openai_response(...)` with the same signature.
+
+## License
+
+MIT

verdifax-0.2.0/README.md

@@ -0,0 +1,96 @@
+# Verdifax Python SDK
+
+Cryptographic attestation for AI inference. Three lines: send a payload, get a signed manifest hash you can give to an auditor.
+
+## Install
+
+```bash
+pip install verdifax
+```
+
+## Quickstart
+
+```python
+import verdifax
+
+receipt = verdifax.attest(
+    payload="hello verdifax",
+    program_id="a" * 64,
+    route_id="route-test",
+    registry_record_hash="b" * 64,
+)
+print(receipt.manifest_hash)
+```
+
+That's it. The receipt's `manifest_hash` is a 64-char SHA-256 that seals every input, every kernel execution ID, the hardware attestation, the ZK transcript, the formal verifier status, and the final VFA. Anyone with the same inputs can re-derive the same hash.
+
+## Configuration
+
+By default the SDK talks to a Verdifax API at `http://localhost:9090` (the orchestrator's REST server). Override with environment variables:
+
+```bash
+export VERDIFAX_API_URL=https://api.verdifax.example.com
+export VERDIFAX_API_KEY=your-api-key
+```
+
+Or construct a client explicitly:
+
+```python
+from verdifax import VerdifaxClient
+
+client = VerdifaxClient(base_url="https://api.verdifax.example.com", api_key="...")
+receipt = client.attest(payload="...", program_id="...", route_id="...", registry_record_hash="...")
+```
+
+## Async
+
+```python
+import asyncio
+from verdifax import AsyncVerdifaxClient
+
+async def main():
+    async with AsyncVerdifaxClient() as client:
+        receipt = await client.attest(
+            payload="hello verdifax",
+            program_id="a" * 64,
+            route_id="route-test",
+            registry_record_hash="b" * 64,
+        )
+        print(receipt.manifest_hash)
+
+asyncio.run(main())
+```
+
+## Verification
+
+Re-derive the manifest hash from the same inputs and confirm it matches a previously issued receipt:
+
+```python
+ok = client.verify(
+    manifest_hash=receipt.manifest_hash,
+    payload="hello verdifax",
+    program_id="a" * 64,
+    route_id="route-test",
+    registry_record_hash="b" * 64,
+)
+```
+
+## Helpers for popular providers
+
+```python
+import verdifax
+
+receipt = verdifax.attest_claude_response(
+    prompt="What is the boiling point of water?",
+    response="100 °C at sea level.",
+    program_id="a" * 64,
+    route_id="claude-route",
+    registry_record_hash="b" * 64,
+)
+```
+
+There is also `verdifax.attest_openai_response(...)` with the same signature.
+
+## License
+
+MIT

verdifax-0.2.0/pyproject.toml

@@ -0,0 +1,94 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "verdifax"
+version = "0.2.0"
+description = "Python SDK for the Verdifax cryptographic attestation pipeline"
+readme = "README.md"
+requires-python = ">=3.9"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [
+    { name = "Verdifax", email = "team@verdifax.com" },
+]
+keywords = [
+    "verdifax",
+    "attestation",
+    "ai",
+    "audit",
+    "compliance",
+    "manifest",
+    "hash",
+    "provenance",
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Information Technology",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3 :: Only",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: Security :: Cryptography",
+    "Typing :: Typed",
+]
+dependencies = [
+    "httpx>=0.25.0",
+    "pydantic>=2.0,<3.0",
+    "typing-extensions>=4.0",
+]
+
+[project.optional-dependencies]
+dev = [
+    "pytest>=7.0",
+    "pytest-asyncio>=0.21",
+    "respx>=0.20",
+    "black>=23.0",
+    "mypy>=1.5",
+    "build>=1.0",
+]
+
+[project.urls]
+Homepage = "https://verdifax.com"
+Documentation = "https://docs.verdifax.com"
+Repository = "https://github.com/verdifax/verdifax-sdk-python"
+Issues = "https://github.com/verdifax/verdifax-sdk-python/issues"
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["verdifax*"]
+exclude = ["tests*"]
+
+[tool.setuptools.package-data]
+verdifax = ["py.typed"]
+
+[tool.black]
+line-length = 100
+target-version = ["py39"]
+
+[tool.mypy]
+strict = true
+python_version = "3.9"
+warn_unused_ignores = true
+warn_redundant_casts = true
+warn_return_any = true
+disallow_untyped_defs = true
+disallow_incomplete_defs = true
+
+[[tool.mypy.overrides]]
+module = "tests.*"
+disallow_untyped_defs = false
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+asyncio_mode = "auto"
+filterwarnings = [
+    "error",
+    "ignore::DeprecationWarning:pydantic.*",
+]

verdifax-0.2.0/requirements-dev.txt

@@ -0,0 +1,8 @@
+-r requirements.txt
+pytest>=7.0
+pytest-asyncio>=0.21
+respx>=0.20
+black>=23.0
+mypy>=1.5
+build>=1.0
+twine>=4.0

verdifax-0.2.0/requirements.txt

@@ -0,0 +1,3 @@
+httpx>=0.25.0
+pydantic>=2.0,<3.0
+typing-extensions>=4.0

verdifax-0.2.0/setup.cfg

@@ -0,0 +1,37 @@
+[metadata]
+name = verdifax
+version = 0.1.0
+description = Python SDK for the Verdifax cryptographic attestation pipeline
+long_description = file: README.md
+long_description_content_type = text/markdown
+url = https://verdifax.com
+author = Verdifax
+author_email = team@verdifax.com
+license_files = LICENSE
+classifiers = 
+	Development Status :: 4 - Beta
+	Intended Audience :: Developers
+	Intended Audience :: Information Technology
+	Operating System :: OS Independent
+	Programming Language :: Python :: 3
+	Programming Language :: Python :: 3.9
+	Programming Language :: Python :: 3.10
+	Programming Language :: Python :: 3.11
+	Programming Language :: Python :: 3.12
+	Programming Language :: Python :: 3 :: Only
+	Topic :: Software Development :: Libraries :: Python Modules
+	Topic :: Security :: Cryptography
+	Typing :: Typed
+
+[options]
+python_requires = >=3.9
+include_package_data = True
+zip_safe = False
+
+[options.package_data]
+verdifax = py.typed
+
+[egg_info]
+tag_build = 
+tag_date = 0
+

verdifax-0.2.0/tests/conftest.py

@@ -0,0 +1,85 @@
+"""Shared pytest fixtures and helpers.
+
+The fixtures here build canonical valid inputs (a 64-char program_id,
+a route_id, a registry record hash) and a representative API response
+body so tests do not need to rebuild them inline.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+import pytest
+
+
+PROGRAM_ID = "a" * 64
+ROUTE_ID = "route-test"
+REGISTRY_RECORD_HASH = "b" * 64
+MANIFEST_HASH = "9" * 64
+
+
+def _hash_field(seed: str) -> str:
+    """Build a deterministic 64-char hex string for fixtures."""
+    return (seed * 64)[:64]
+
+
+def make_manifest_dict(manifest_hash: str = MANIFEST_HASH) -> dict[str, Any]:
+    """A manifest body shaped exactly the way the Go API serializes it."""
+    return {
+        "EnvelopeID": "env-0001",
+        "EnvelopeHash": _hash_field("1"),
+        "SequenceID": "seq-0001",
+        "TransportHash": _hash_field("2"),
+        "EpaHash": _hash_field("3"),
+        "EfaHash": _hash_field("4"),
+        "ExecutionIDs": [
+            "dse-id",
+            "tok-id",
+            "dsc-id",
+            "nrep-id",
+            "aivp-id",
+            "dcae-id",
+        ],
+        "AerHash": _hash_field("5"),
+        "TranscriptHash": _hash_field("6"),
+        "HardwareAttestationHash": _hash_field("7"),
+        "LeakageBundleHash": _hash_field("8"),
+        "FormalVerifierStatus": "VERIFIED_SOUND_COMPLETE_ZK",
+        "ZkspBindingHash": _hash_field("a"),
+        "MigrationTokenHash": _hash_field("b"),
+        "ReplayFingerprint": _hash_field("c"),
+        "PoteProofHash": _hash_field("d"),
+        "LogEntryID": "log-0001",
+        "RegistryArtifactCount": 18,
+        "FinalVfaHash": _hash_field("e"),
+        "IndependentVerified": True,
+        "ManifestHash": manifest_hash,
+    }
+
+
+def make_execute_response(manifest_hash: str = MANIFEST_HASH) -> dict[str, Any]:
+    """A full POST /execute success response body."""
+    return {
+        "ok": True,
+        "duration_ms": 42,
+        "manifest": make_manifest_dict(manifest_hash=manifest_hash),
+    }
+
+
+@pytest.fixture
+def manifest_dict() -> dict[str, Any]:
+    return make_manifest_dict()
+
+
+@pytest.fixture
+def execute_response() -> dict[str, Any]:
+    return make_execute_response()
+
+
+@pytest.fixture
+def valid_inputs() -> dict[str, str]:
+    return {
+        "program_id": PROGRAM_ID,
+        "route_id": ROUTE_ID,
+        "registry_record_hash": REGISTRY_RECORD_HASH,
+    }