veridict-standard 0.3.1__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (75) hide show
  1. veridict_standard-0.3.1/LICENSE +202 -0
  2. veridict_standard-0.3.1/PKG-INFO +413 -0
  3. veridict_standard-0.3.1/README.md +188 -0
  4. veridict_standard-0.3.1/pyproject.toml +40 -0
  5. veridict_standard-0.3.1/setup.cfg +4 -0
  6. veridict_standard-0.3.1/tests/test_audit.py +126 -0
  7. veridict_standard-0.3.1/tests/test_audit_watchers.py +76 -0
  8. veridict_standard-0.3.1/tests/test_badge.py +116 -0
  9. veridict_standard-0.3.1/tests/test_calibration.py +106 -0
  10. veridict_standard-0.3.1/tests/test_canary.py +74 -0
  11. veridict_standard-0.3.1/tests/test_cert_mutation_parity.py +133 -0
  12. veridict_standard-0.3.1/tests/test_certificate.py +135 -0
  13. veridict_standard-0.3.1/tests/test_claim_extractor.py +59 -0
  14. veridict_standard-0.3.1/tests/test_cli.py +82 -0
  15. veridict_standard-0.3.1/tests/test_cli_e2e.py +77 -0
  16. veridict_standard-0.3.1/tests/test_cli_watchers.py +105 -0
  17. veridict_standard-0.3.1/tests/test_conformance.py +68 -0
  18. veridict_standard-0.3.1/tests/test_contract_vectors.py +95 -0
  19. veridict_standard-0.3.1/tests/test_deliberation.py +248 -0
  20. veridict_standard-0.3.1/tests/test_divergence.py +29 -0
  21. veridict_standard-0.3.1/tests/test_dogfood.py +102 -0
  22. veridict_standard-0.3.1/tests/test_dossier.py +243 -0
  23. veridict_standard-0.3.1/tests/test_example_watchers.py +94 -0
  24. veridict_standard-0.3.1/tests/test_federation.py +108 -0
  25. veridict_standard-0.3.1/tests/test_fuzz_e2e.py +114 -0
  26. veridict_standard-0.3.1/tests/test_fuzz_ledger.py +104 -0
  27. veridict_standard-0.3.1/tests/test_json_schemas.py +107 -0
  28. veridict_standard-0.3.1/tests/test_jury.py +74 -0
  29. veridict_standard-0.3.1/tests/test_keys.py +44 -0
  30. veridict_standard-0.3.1/tests/test_ladder.py +49 -0
  31. veridict_standard-0.3.1/tests/test_ledger.py +85 -0
  32. veridict_standard-0.3.1/tests/test_new_example_watchers.py +252 -0
  33. veridict_standard-0.3.1/tests/test_policy.py +73 -0
  34. veridict_standard-0.3.1/tests/test_pugio_bridge.py +131 -0
  35. veridict_standard-0.3.1/tests/test_real_jury_provider.py +155 -0
  36. veridict_standard-0.3.1/tests/test_registry_cli.py +133 -0
  37. veridict_standard-0.3.1/tests/test_registry_index.py +137 -0
  38. veridict_standard-0.3.1/tests/test_resolution.py +130 -0
  39. veridict_standard-0.3.1/tests/test_schemas.py +63 -0
  40. veridict_standard-0.3.1/tests/test_signature_interop.py +98 -0
  41. veridict_standard-0.3.1/tests/test_standard_vectors.py +79 -0
  42. veridict_standard-0.3.1/tests/test_utils.py +17 -0
  43. veridict_standard-0.3.1/tests/test_verifiers.py +89 -0
  44. veridict_standard-0.3.1/tests/test_watch_cli.py +176 -0
  45. veridict_standard-0.3.1/tests/test_watcher_isolation.py +48 -0
  46. veridict_standard-0.3.1/tests/test_watcher_revocation.py +168 -0
  47. veridict_standard-0.3.1/tests/test_watcher_stream.py +235 -0
  48. veridict_standard-0.3.1/tests/test_watchers.py +245 -0
  49. veridict_standard-0.3.1/veridict/__init__.py +1 -0
  50. veridict_standard-0.3.1/veridict/audit.py +217 -0
  51. veridict_standard-0.3.1/veridict/calibration.py +82 -0
  52. veridict_standard-0.3.1/veridict/canary.py +75 -0
  53. veridict_standard-0.3.1/veridict/certificate.py +194 -0
  54. veridict_standard-0.3.1/veridict/claim_extractor.py +70 -0
  55. veridict_standard-0.3.1/veridict/cli.py +385 -0
  56. veridict_standard-0.3.1/veridict/conformance.py +182 -0
  57. veridict_standard-0.3.1/veridict/divergence.py +21 -0
  58. veridict_standard-0.3.1/veridict/dossier.py +163 -0
  59. veridict_standard-0.3.1/veridict/jury.py +170 -0
  60. veridict_standard-0.3.1/veridict/keys.py +82 -0
  61. veridict_standard-0.3.1/veridict/ladder.py +127 -0
  62. veridict_standard-0.3.1/veridict/ledger.py +105 -0
  63. veridict_standard-0.3.1/veridict/policy.py +136 -0
  64. veridict_standard-0.3.1/veridict/registry_index.py +84 -0
  65. veridict_standard-0.3.1/veridict/schemas.py +89 -0
  66. veridict_standard-0.3.1/veridict/utils.py +45 -0
  67. veridict_standard-0.3.1/veridict/verifiers.py +92 -0
  68. veridict_standard-0.3.1/veridict/watcher_stream.py +178 -0
  69. veridict_standard-0.3.1/veridict/watchers.py +240 -0
  70. veridict_standard-0.3.1/veridict_standard.egg-info/PKG-INFO +413 -0
  71. veridict_standard-0.3.1/veridict_standard.egg-info/SOURCES.txt +73 -0
  72. veridict_standard-0.3.1/veridict_standard.egg-info/dependency_links.txt +1 -0
  73. veridict_standard-0.3.1/veridict_standard.egg-info/entry_points.txt +2 -0
  74. veridict_standard-0.3.1/veridict_standard.egg-info/requires.txt +5 -0
  75. veridict_standard-0.3.1/veridict_standard.egg-info/top_level.txt +1 -0
@@ -0,0 +1,202 @@
1
+
2
+ Apache License
3
+ Version 2.0, January 2004
4
+ http://www.apache.org/licenses/
5
+
6
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
7
+
8
+ 1. Definitions.
9
+
10
+ "License" shall mean the terms and conditions for use, reproduction,
11
+ and distribution as defined by Sections 1 through 9 of this document.
12
+
13
+ "Licensor" shall mean the copyright owner or entity authorized by
14
+ the copyright owner that is granting the License.
15
+
16
+ "Legal Entity" shall mean the union of the acting entity and all
17
+ other entities that control, are controlled by, or are under common
18
+ control with that entity. For the purposes of this definition,
19
+ "control" means (i) the power, direct or indirect, to cause the
20
+ direction or management of such entity, whether by contract or
21
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
22
+ outstanding shares, or (iii) beneficial ownership of such entity.
23
+
24
+ "You" (or "Your") shall mean an individual or Legal Entity
25
+ exercising permissions granted by this License.
26
+
27
+ "Source" form shall mean the preferred form for making modifications,
28
+ including but not limited to software source code, documentation
29
+ source, and configuration files.
30
+
31
+ "Object" form shall mean any form resulting from mechanical
32
+ transformation or translation of a Source form, including but
33
+ not limited to compiled object code, generated documentation,
34
+ and conversions to other media types.
35
+
36
+ "Work" shall mean the work of authorship, whether in Source or
37
+ Object form, made available under the License, as indicated by a
38
+ copyright notice that is included in or attached to the work
39
+ (an example is provided in the Appendix below).
40
+
41
+ "Derivative Works" shall mean any work, whether in Source or Object
42
+ form, that is based on (or derived from) the Work and for which the
43
+ editorial revisions, annotations, elaborations, or other modifications
44
+ represent, as a whole, an original work of authorship. For the purposes
45
+ of this License, Derivative Works shall not include works that remain
46
+ separable from, or merely link (or bind by name) to the interfaces of,
47
+ the Work and Derivative Works thereof.
48
+
49
+ "Contribution" shall mean any work of authorship, including
50
+ the original version of the Work and any modifications or additions
51
+ to that Work or Derivative Works thereof, that is intentionally
52
+ submitted to Licensor for inclusion in the Work by the copyright owner
53
+ or by an individual or Legal Entity authorized to submit on behalf of
54
+ the copyright owner. For the purposes of this definition, "submitted"
55
+ means any form of electronic, verbal, or written communication sent
56
+ to the Licensor or its representatives, including but not limited to
57
+ communication on electronic mailing lists, source code control systems,
58
+ and issue tracking systems that are managed by, or on behalf of, the
59
+ Licensor for the purpose of discussing and improving the Work, but
60
+ excluding communication that is conspicuously marked or otherwise
61
+ designated in writing by the copyright owner as "Not a Contribution."
62
+
63
+ "Contributor" shall mean Licensor and any individual or Legal Entity
64
+ on behalf of whom a Contribution has been received by Licensor and
65
+ subsequently incorporated within the Work.
66
+
67
+ 2. Grant of Copyright License. Subject to the terms and conditions of
68
+ this License, each Contributor hereby grants to You a perpetual,
69
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
70
+ copyright license to reproduce, prepare Derivative Works of,
71
+ publicly display, publicly perform, sublicense, and distribute the
72
+ Work and such Derivative Works in Source or Object form.
73
+
74
+ 3. Grant of Patent License. Subject to the terms and conditions of
75
+ this License, each Contributor hereby grants to You a perpetual,
76
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
77
+ (except as stated in this section) patent license to make, have made,
78
+ use, offer to sell, sell, import, and otherwise transfer the Work,
79
+ where such license applies only to those patent claims licensable
80
+ by such Contributor that are necessarily infringed by their
81
+ Contribution(s) alone or by combination of their Contribution(s)
82
+ with the Work to which such Contribution(s) was submitted. If You
83
+ institute patent litigation against any entity (including a
84
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
85
+ or a Contribution incorporated within the Work constitutes direct
86
+ or contributory patent infringement, then any patent licenses
87
+ granted to You under this License for that Work shall terminate
88
+ as of the date such litigation is filed.
89
+
90
+ 4. Redistribution. You may reproduce and distribute copies of the
91
+ Work or Derivative Works thereof in any medium, with or without
92
+ modifications, and in Source or Object form, provided that You
93
+ meet the following conditions:
94
+
95
+ (a) You must give any other recipients of the Work or
96
+ Derivative Works a copy of this License; and
97
+
98
+ (b) You must cause any modified files to carry prominent notices
99
+ stating that You changed the files; and
100
+
101
+ (c) You must retain, in the Source form of any Derivative Works
102
+ that You distribute, all copyright, patent, trademark, and
103
+ attribution notices from the Source form of the Work,
104
+ excluding those notices that do not pertain to any part of
105
+ the Derivative Works; and
106
+
107
+ (d) If the Work includes a "NOTICE" text file as part of its
108
+ distribution, then any Derivative Works that You distribute must
109
+ include a readable copy of the attribution notices contained
110
+ within such NOTICE file, excluding those notices that do not
111
+ pertain to any part of the Derivative Works, in at least one
112
+ of the following places: within a NOTICE text file distributed
113
+ as part of the Derivative Works; within the Source form or
114
+ documentation, if provided along with the Derivative Works; or,
115
+ within a display generated by the Derivative Works, if and
116
+ wherever such third-party notices normally appear. The contents
117
+ of the NOTICE file are for informational purposes only and
118
+ do not modify the License. You may add Your own attribution
119
+ notices within Derivative Works that You distribute, alongside
120
+ or as an addendum to the NOTICE text from the Work, provided
121
+ that such additional attribution notices cannot be construed
122
+ as modifying the License.
123
+
124
+ You may add Your own copyright statement to Your modifications and
125
+ may provide additional or different license terms and conditions
126
+ for use, reproduction, or distribution of Your modifications, or
127
+ for any such Derivative Works as a whole, provided Your use,
128
+ reproduction, and distribution of the Work otherwise complies with
129
+ the conditions stated in this License.
130
+
131
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
132
+ any Contribution intentionally submitted for inclusion in the Work
133
+ by You to the Licensor shall be under the terms and conditions of
134
+ this License, without any additional terms or conditions.
135
+ Notwithstanding the above, nothing herein shall supersede or modify
136
+ the terms of any separate license agreement you may have executed
137
+ with Licensor regarding such Contributions.
138
+
139
+ 6. Trademarks. This License does not grant permission to use the trade
140
+ names, trademarks, service marks, or product names of the Licensor,
141
+ except as required for reasonable and customary use in describing the
142
+ origin of the Work and reproducing the content of the NOTICE file.
143
+
144
+ 7. Disclaimer of Warranty. Unless required by applicable law or
145
+ agreed to in writing, Licensor provides the Work (and each
146
+ Contributor provides its Contributions) on an "AS IS" BASIS,
147
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
148
+ implied, including, without limitation, any warranties or conditions
149
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
150
+ PARTICULAR PURPOSE. You are solely responsible for determining the
151
+ appropriateness of using or redistributing the Work and assume any
152
+ risks associated with Your exercise of permissions under this License.
153
+
154
+ 8. Limitation of Liability. In no event and under no legal theory,
155
+ whether in tort (including negligence), contract, or otherwise,
156
+ unless required by applicable law (such as deliberate and grossly
157
+ negligent acts) or agreed to in writing, shall any Contributor be
158
+ liable to You for damages, including any direct, indirect, special,
159
+ incidental, or consequential damages of any character arising as a
160
+ result of this License or out of the use or inability to use the
161
+ Work (including but not limited to damages for loss of goodwill,
162
+ work stoppage, computer failure or malfunction, or any and all
163
+ other commercial damages or losses), even if such Contributor
164
+ has been advised of the possibility of such damages.
165
+
166
+ 9. Accepting Warranty or Additional Liability. While redistributing
167
+ the Work or Derivative Works thereof, You may choose to offer,
168
+ and charge a fee for, acceptance of support, warranty, indemnity,
169
+ or other liability obligations and/or rights consistent with this
170
+ License. However, in accepting such obligations, You may act only
171
+ on Your own behalf and on Your sole responsibility, not on behalf
172
+ of any other Contributor, and only if You agree to indemnify,
173
+ defend, and hold each Contributor harmless for any liability
174
+ incurred by, or claims asserted against, such Contributor by reason
175
+ of your accepting any such warranty or additional liability.
176
+
177
+ END OF TERMS AND CONDITIONS
178
+
179
+ APPENDIX: How to apply the Apache License to your work.
180
+
181
+ To apply the Apache License to your work, attach the following
182
+ boilerplate notice, with the fields enclosed by brackets "[]"
183
+ replaced with your own identifying information. (Don't include
184
+ the brackets!) The text should be enclosed in the appropriate
185
+ comment syntax for the file format. We also recommend that a
186
+ file or class name and description of purpose be included on the
187
+ same "printed page" as the copyright notice for easier
188
+ identification within third-party archives.
189
+
190
+ Copyright [yyyy] [name of copyright owner]
191
+
192
+ Licensed under the Apache License, Version 2.0 (the "License");
193
+ you may not use this file except in compliance with the License.
194
+ You may obtain a copy of the License at
195
+
196
+ http://www.apache.org/licenses/LICENSE-2.0
197
+
198
+ Unless required by applicable law or agreed to in writing, software
199
+ distributed under the License is distributed on an "AS IS" BASIS,
200
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
201
+ See the License for the specific language governing permissions and
202
+ limitations under the License.
@@ -0,0 +1,413 @@
1
+ Metadata-Version: 2.4
2
+ Name: veridict-standard
3
+ Version: 0.3.1
4
+ Summary: The verdict that survived verification — audit AI with AI
5
+ Author: goun7
6
+ License:
7
+ Apache License
8
+ Version 2.0, January 2004
9
+ http://www.apache.org/licenses/
10
+
11
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
12
+
13
+ 1. Definitions.
14
+
15
+ "License" shall mean the terms and conditions for use, reproduction,
16
+ and distribution as defined by Sections 1 through 9 of this document.
17
+
18
+ "Licensor" shall mean the copyright owner or entity authorized by
19
+ the copyright owner that is granting the License.
20
+
21
+ "Legal Entity" shall mean the union of the acting entity and all
22
+ other entities that control, are controlled by, or are under common
23
+ control with that entity. For the purposes of this definition,
24
+ "control" means (i) the power, direct or indirect, to cause the
25
+ direction or management of such entity, whether by contract or
26
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
27
+ outstanding shares, or (iii) beneficial ownership of such entity.
28
+
29
+ "You" (or "Your") shall mean an individual or Legal Entity
30
+ exercising permissions granted by this License.
31
+
32
+ "Source" form shall mean the preferred form for making modifications,
33
+ including but not limited to software source code, documentation
34
+ source, and configuration files.
35
+
36
+ "Object" form shall mean any form resulting from mechanical
37
+ transformation or translation of a Source form, including but
38
+ not limited to compiled object code, generated documentation,
39
+ and conversions to other media types.
40
+
41
+ "Work" shall mean the work of authorship, whether in Source or
42
+ Object form, made available under the License, as indicated by a
43
+ copyright notice that is included in or attached to the work
44
+ (an example is provided in the Appendix below).
45
+
46
+ "Derivative Works" shall mean any work, whether in Source or Object
47
+ form, that is based on (or derived from) the Work and for which the
48
+ editorial revisions, annotations, elaborations, or other modifications
49
+ represent, as a whole, an original work of authorship. For the purposes
50
+ of this License, Derivative Works shall not include works that remain
51
+ separable from, or merely link (or bind by name) to the interfaces of,
52
+ the Work and Derivative Works thereof.
53
+
54
+ "Contribution" shall mean any work of authorship, including
55
+ the original version of the Work and any modifications or additions
56
+ to that Work or Derivative Works thereof, that is intentionally
57
+ submitted to Licensor for inclusion in the Work by the copyright owner
58
+ or by an individual or Legal Entity authorized to submit on behalf of
59
+ the copyright owner. For the purposes of this definition, "submitted"
60
+ means any form of electronic, verbal, or written communication sent
61
+ to the Licensor or its representatives, including but not limited to
62
+ communication on electronic mailing lists, source code control systems,
63
+ and issue tracking systems that are managed by, or on behalf of, the
64
+ Licensor for the purpose of discussing and improving the Work, but
65
+ excluding communication that is conspicuously marked or otherwise
66
+ designated in writing by the copyright owner as "Not a Contribution."
67
+
68
+ "Contributor" shall mean Licensor and any individual or Legal Entity
69
+ on behalf of whom a Contribution has been received by Licensor and
70
+ subsequently incorporated within the Work.
71
+
72
+ 2. Grant of Copyright License. Subject to the terms and conditions of
73
+ this License, each Contributor hereby grants to You a perpetual,
74
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
75
+ copyright license to reproduce, prepare Derivative Works of,
76
+ publicly display, publicly perform, sublicense, and distribute the
77
+ Work and such Derivative Works in Source or Object form.
78
+
79
+ 3. Grant of Patent License. Subject to the terms and conditions of
80
+ this License, each Contributor hereby grants to You a perpetual,
81
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
82
+ (except as stated in this section) patent license to make, have made,
83
+ use, offer to sell, sell, import, and otherwise transfer the Work,
84
+ where such license applies only to those patent claims licensable
85
+ by such Contributor that are necessarily infringed by their
86
+ Contribution(s) alone or by combination of their Contribution(s)
87
+ with the Work to which such Contribution(s) was submitted. If You
88
+ institute patent litigation against any entity (including a
89
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
90
+ or a Contribution incorporated within the Work constitutes direct
91
+ or contributory patent infringement, then any patent licenses
92
+ granted to You under this License for that Work shall terminate
93
+ as of the date such litigation is filed.
94
+
95
+ 4. Redistribution. You may reproduce and distribute copies of the
96
+ Work or Derivative Works thereof in any medium, with or without
97
+ modifications, and in Source or Object form, provided that You
98
+ meet the following conditions:
99
+
100
+ (a) You must give any other recipients of the Work or
101
+ Derivative Works a copy of this License; and
102
+
103
+ (b) You must cause any modified files to carry prominent notices
104
+ stating that You changed the files; and
105
+
106
+ (c) You must retain, in the Source form of any Derivative Works
107
+ that You distribute, all copyright, patent, trademark, and
108
+ attribution notices from the Source form of the Work,
109
+ excluding those notices that do not pertain to any part of
110
+ the Derivative Works; and
111
+
112
+ (d) If the Work includes a "NOTICE" text file as part of its
113
+ distribution, then any Derivative Works that You distribute must
114
+ include a readable copy of the attribution notices contained
115
+ within such NOTICE file, excluding those notices that do not
116
+ pertain to any part of the Derivative Works, in at least one
117
+ of the following places: within a NOTICE text file distributed
118
+ as part of the Derivative Works; within the Source form or
119
+ documentation, if provided along with the Derivative Works; or,
120
+ within a display generated by the Derivative Works, if and
121
+ wherever such third-party notices normally appear. The contents
122
+ of the NOTICE file are for informational purposes only and
123
+ do not modify the License. You may add Your own attribution
124
+ notices within Derivative Works that You distribute, alongside
125
+ or as an addendum to the NOTICE text from the Work, provided
126
+ that such additional attribution notices cannot be construed
127
+ as modifying the License.
128
+
129
+ You may add Your own copyright statement to Your modifications and
130
+ may provide additional or different license terms and conditions
131
+ for use, reproduction, or distribution of Your modifications, or
132
+ for any such Derivative Works as a whole, provided Your use,
133
+ reproduction, and distribution of the Work otherwise complies with
134
+ the conditions stated in this License.
135
+
136
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
137
+ any Contribution intentionally submitted for inclusion in the Work
138
+ by You to the Licensor shall be under the terms and conditions of
139
+ this License, without any additional terms or conditions.
140
+ Notwithstanding the above, nothing herein shall supersede or modify
141
+ the terms of any separate license agreement you may have executed
142
+ with Licensor regarding such Contributions.
143
+
144
+ 6. Trademarks. This License does not grant permission to use the trade
145
+ names, trademarks, service marks, or product names of the Licensor,
146
+ except as required for reasonable and customary use in describing the
147
+ origin of the Work and reproducing the content of the NOTICE file.
148
+
149
+ 7. Disclaimer of Warranty. Unless required by applicable law or
150
+ agreed to in writing, Licensor provides the Work (and each
151
+ Contributor provides its Contributions) on an "AS IS" BASIS,
152
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
153
+ implied, including, without limitation, any warranties or conditions
154
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
155
+ PARTICULAR PURPOSE. You are solely responsible for determining the
156
+ appropriateness of using or redistributing the Work and assume any
157
+ risks associated with Your exercise of permissions under this License.
158
+
159
+ 8. Limitation of Liability. In no event and under no legal theory,
160
+ whether in tort (including negligence), contract, or otherwise,
161
+ unless required by applicable law (such as deliberate and grossly
162
+ negligent acts) or agreed to in writing, shall any Contributor be
163
+ liable to You for damages, including any direct, indirect, special,
164
+ incidental, or consequential damages of any character arising as a
165
+ result of this License or out of the use or inability to use the
166
+ Work (including but not limited to damages for loss of goodwill,
167
+ work stoppage, computer failure or malfunction, or any and all
168
+ other commercial damages or losses), even if such Contributor
169
+ has been advised of the possibility of such damages.
170
+
171
+ 9. Accepting Warranty or Additional Liability. While redistributing
172
+ the Work or Derivative Works thereof, You may choose to offer,
173
+ and charge a fee for, acceptance of support, warranty, indemnity,
174
+ or other liability obligations and/or rights consistent with this
175
+ License. However, in accepting such obligations, You may act only
176
+ on Your own behalf and on Your sole responsibility, not on behalf
177
+ of any other Contributor, and only if You agree to indemnify,
178
+ defend, and hold each Contributor harmless for any liability
179
+ incurred by, or claims asserted against, such Contributor by reason
180
+ of your accepting any such warranty or additional liability.
181
+
182
+ END OF TERMS AND CONDITIONS
183
+
184
+ APPENDIX: How to apply the Apache License to your work.
185
+
186
+ To apply the Apache License to your work, attach the following
187
+ boilerplate notice, with the fields enclosed by brackets "[]"
188
+ replaced with your own identifying information. (Don't include
189
+ the brackets!) The text should be enclosed in the appropriate
190
+ comment syntax for the file format. We also recommend that a
191
+ file or class name and description of purpose be included on the
192
+ same "printed page" as the copyright notice for easier
193
+ identification within third-party archives.
194
+
195
+ Copyright [yyyy] [name of copyright owner]
196
+
197
+ Licensed under the Apache License, Version 2.0 (the "License");
198
+ you may not use this file except in compliance with the License.
199
+ You may obtain a copy of the License at
200
+
201
+ http://www.apache.org/licenses/LICENSE-2.0
202
+
203
+ Unless required by applicable law or agreed to in writing, software
204
+ distributed under the License is distributed on an "AS IS" BASIS,
205
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
206
+ See the License for the specific language governing permissions and
207
+ limitations under the License.
208
+
209
+ Keywords: ai,audit,ledger,verification,standards,evidence
210
+ Classifier: Development Status :: 4 - Beta
211
+ Classifier: Intended Audience :: Developers
212
+ Classifier: License :: OSI Approved :: Apache Software License
213
+ Classifier: Programming Language :: Python :: 3.12
214
+ Classifier: Programming Language :: Python :: 3.13
215
+ Classifier: Programming Language :: Python :: 3.14
216
+ Classifier: Topic :: Software Development :: Quality Assurance
217
+ Requires-Python: >=3.12
218
+ Description-Content-Type: text/markdown
219
+ License-File: LICENSE
220
+ Requires-Dist: cryptography>=42.0
221
+ Requires-Dist: httpx>=0.27
222
+ Provides-Extra: dev
223
+ Requires-Dist: pytest>=8.0; extra == "dev"
224
+ Dynamic: license-file
225
+
226
+ <table><tr><td valign="middle" width="66"><img src="docs/assets/logo.svg" alt="Veridict mark" width="52" height="43"></td><td valign="middle"><h1>Veridict</h1></td></tr></table>
227
+
228
+ [![CI](https://github.com/goun7/veridict/actions/workflows/ci.yml/badge.svg)](https://github.com/goun7/veridict/actions/workflows/ci.yml)
229
+ [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)
230
+ [![Python](https://img.shields.io/badge/python-3.12%2B-blue.svg)](pyproject.toml)
231
+ [![Standard](https://img.shields.io/badge/standard-v1.0.0--draft-8A2BE2.svg)](docs/specs/2026-09-10-veridict-standard-v1.0.md)
232
+ [![Veridict self-audit](docs/assets/veridict-badge.svg)](https://github.com/goun7/veridict/releases/download/v0.3.1/dogfood_cert.json)
233
+
234
+ *The verdict that survived verification.* | **[Türkçe](README.tr.md)**
235
+
236
+ Veridict is a protocol and reference implementation for **auditing AI with AI
237
+ when humans no longer can**. An append-only, hash-chained evidence ledger
238
+ records every step of an audit: falsifiable claims, machine verifiers, a
239
+ blind heterogeneous jury, third-party watchers, and a signed certificate that
240
+ **anyone can verify offline** — no trust in the auditor required.
241
+
242
+ The founding premise: as AI output outgrows human review capacity, the human
243
+ role is not *code reviewer* but **risk owner**. Veridict is built around that
244
+ transformation — the machine owns the verdict of intelligence, the human owns
245
+ the verdict of responsibility.
246
+
247
+ ## Why an audit ledger
248
+
249
+ - **No silent passes.** No evidence → INCONCLUSIVE, flagged — never a clean bill.
250
+ - **Tiers, not vibes.** Evidence has a fixed rank order: what a machine can
251
+ check directly (W1a) beats what can be reproduced statistically (W1b),
252
+ and both beat what a jury of models believes (W2/W3) — the ladder never
253
+ lets doctrine overturn machine evidence, and W3 alone never verifies.
254
+ - **Identity is binding.** Every entry's hash binds its author; watcher manifests are signed, W1a is structurally impossible for them; a calibration ledger discounts producers whose claims were contradicted.
255
+ - **Verify, don't trust.** Certificates replay offline against the ledger. `examples/spec_verifier.py` is a verifier written **from the standard alone** (zero imports of this codebase) that reaches the same verdicts from the published test vectors.
256
+
257
+ ## Quickstart
258
+
259
+ ```bash
260
+ pip install -e . && pip install pytest
261
+ # PyPI name: `veridict-standard` (the bare `veridict` on PyPI is a
262
+ # DIFFERENT project — not ours; from this repo or `pip install
263
+ # veridict-standard` once published)
264
+
265
+ # audit a task end-to-end (GATE mode) — see examples/ for runnable scenarios
266
+ veridict --help
267
+
268
+ # the system audits itself: ledger → claims → jury → certificate → offline verify
269
+ python scripts/dogfood.py
270
+
271
+ # verify a certificate offline (the property third parties care about)
272
+ # (ledger + cert are release assets: gh release download v0.3.1
273
+ # or https://github.com/goun7/veridict/releases)
274
+ veridict verify --ledger dogfood_ledger.jsonl --cert dogfood_cert.json
275
+
276
+ # regenerate the standard's conformance test vectors (deterministic)
277
+ python scripts/build_test_vectors.py
278
+
279
+ # measure GATE latency against the design budget (§6.5: p95 < 30 min)
280
+ python scripts/measure_latency.py
281
+ ```
282
+
283
+ ## Receipts (evidence over claims)
284
+
285
+ The self-audit badge above is regenerated by CI on every push from the
286
+ actual dogfood certificate (never hand-drawn) — and it links to that
287
+ certificate, which you can verify offline yourself: fetch the ledger and
288
+ certificate from the [latest release](https://github.com/goun7/veridict/releases)
289
+ (`gh release download` or the assets list), then run
290
+ `veridict verify --ledger dogfood_ledger.jsonl --cert dogfood_cert.json`.
291
+ A failing audit turns it amber or red — worst-verdict-wins.
292
+
293
+ | Check | Result |
294
+ |---|---|
295
+ | Test suite | 260 passed (both invocation styles, Python 3.12–3.14 in CI) |
296
+ | Self-audit | valid certificate, risk `low`, GATE not blocked |
297
+ | Offline replay | `veridict verify` rc 0 on the dogfood certificate |
298
+ | Canary protocol | 10 catches / 3 honest misses / 0 false positives across 12 defect classes |
299
+ | Tamper soak | 1500 mutated ledgers, 5 seeds → 100% detected, 0 silent passes |
300
+ | Spec parity | reference verifier ≡ spec-only verifier on 8 failure modes |
301
+
302
+ CI runs the suite, the dogfood self-audit, and the offline replay on every
303
+ push — the receipts are regenerated, not narrated. The 1500-ledger tamper
304
+ soak runs nightly (the push run exercises a 150-ledger slice).
305
+
306
+ ## Register a watcher in 3 commands
307
+
308
+ ```bash
309
+ veridict registry init --registry r.jsonl --key-out r.key.json
310
+ veridict registry register --registry r.jsonl --manifest examples/manifests/example-security.json --key-file r.key.json
311
+ veridict registry index --registry r.jsonl --out index.json
312
+ ```
313
+
314
+ Then audit with the external registry as authority:
315
+ `veridict audit ... --registry r.jsonl` — revoked watchers are refused
316
+ (§6.6). See CONTRIBUTING.md for writing your own.
317
+
318
+ ## Audit your own repo in 3 commands
319
+
320
+ The fastest way to see Veridict work on *your* code: write a one-file task
321
+ manifest naming your checkout and the claims you want evidence about, run
322
+ the audit, verify the certificate offline — then link the pair from your
323
+ README. A runnable demo lives in [`examples/run_audit.py`](examples/run_audit.py).
324
+
325
+ ```bash
326
+ # 1) a task manifest (see examples/ and TaskManifest in veridict/schemas.py)
327
+ cat > task.json <<'EOF'
328
+ {"task_id": "my-audit", "artifact_path": "/path/to/your/repo",
329
+ "actor_identity": "you", "intent_lines": ["DOCTRINE: modules are idiomatic python"],
330
+ "criticality": [], "has_existing_tests": true, "pytest_args": []}
331
+ EOF
332
+
333
+ # 2) audit → ledger + certificate
334
+ veridict audit --task task.json --mode HYBRID \
335
+ --ledger my-ledger.jsonl --cert-out my-cert.json
336
+
337
+ # 2b) or WATCH a live audit as it writes (streaming transport, §10.3):
338
+ veridict watch --ledger my-ledger.jsonl --forever
339
+
340
+ # 3) verify offline (anyone can; no trust in the auditor required)
341
+ veridict verify --ledger my-ledger.jsonl --cert my-cert.json
342
+ ```
343
+
344
+ Want the reference implementation to run the audit for you and publish the
345
+ certificate? Open an **[Audit my repo](https://github.com/goun7/veridict/issues/new?template=audit-my-repo.md)**
346
+ issue — the certificate that comes back is evidence, not endorsement (§13):
347
+ anyone can replay it offline against the published ledger, and a REFUTED
348
+ claim says exactly which evidence refuted it.
349
+
350
+ ### Audit on every push (GitHub Action)
351
+
352
+ Run Veridict inside your own CI without installing anything locally:
353
+
354
+ ```yaml
355
+ jobs:
356
+ audit:
357
+ uses: goun7/veridict/.github/workflows/veridict-audit.yml@v1
358
+ with:
359
+ intent: "DOCTRINE: modules are idiomatic python"
360
+ mode: HYBRID # GATE / WATCH / CERTIFICATE also available
361
+ fail-on-refuted: false # flip to true once you trust the audit
362
+ ```
363
+
364
+ The run uploads `veridict-audit` artifacts (ledger + certificate) — download
365
+ once, verify forever: `veridict verify --ledger veridict-ledger.jsonl --cert
366
+ veridict-cert.json`. See the workflow file for all inputs.
367
+
368
+ ## Public site
369
+
370
+ The standard and the design document are readable (and linkable) at
371
+ **https://goun7.github.io/veridict/** — deployed from `main` on every push.
372
+
373
+ ## Documents
374
+
375
+ - **Standard (normative draft):** [`docs/specs/2026-09-10-veridict-standard-v1.0.md`](docs/specs/2026-09-10-veridict-standard-v1.0.md) — §14.2 carries errata; errata proposals are a first-class issue template
376
+ - **Standard v1.1 delta (draft):** [`docs/specs/2026-09-12-veridict-standard-v1.1-delta.md`](docs/specs/2026-09-12-veridict-standard-v1.1-delta.md) — ratifies the WATCH transport latency sentence (D10); read on top of v1.0
377
+ - **Design document (founding paper):** [`docs/specs/2026-09-09-veridict-design.md`](docs/specs/2026-09-09-veridict-design.md)
378
+ - **Architecture:** [`ARCHITECTURE.md`](ARCHITECTURE.md) — module map to standard sections
379
+ - **Commercial model:** [`docs/commercial-model.md`](docs/commercial-model.md) — open-core model, growth levers, anti-corruption guardrails
380
+ - **Contributing / Governance / Security:** [`CONTRIBUTING.md`](CONTRIBUTING.md) · [`GOVERNANCE.md`](GOVERNANCE.md) · [`SECURITY.md`](SECURITY.md)
381
+
382
+ ## Status & roadmap
383
+
384
+ Phase 1 (core) and Phase 2 (watcher layer) are implemented with end-to-end
385
+ receipts in the dogfood run. Phase 3 (platform + standard) substrate is in
386
+ place: spec draft, conformance kit (C1–C10), marketplace index, test vectors,
387
+ spec-only verifier. The remaining exit criteria are external by nature:
388
+
389
+ 1. an **independent verifier** implemented from the spec by someone else,
390
+ 2. a first **external production deployment**,
391
+ 3. **≥10 active watcher manifests** on the marketplace.
392
+
393
+ Roadmap decisions are tracked in the issue tracker; the commercial
394
+ model is documented in [`docs/commercial-model.md`](docs/commercial-model.md).
395
+
396
+ ## Contributing
397
+
398
+ Start with the issue tracker — the tracker is seeded with the project's own
399
+ exit criteria:
400
+
401
+ - **[Independent verifier from the standard alone](https://github.com/goun7/veridict/issues/1)** (exit criterion ①) — write a verifier without reading our code; where you and the reference disagree, either the standard is ambiguous or someone is wrong, and both findings earn errata credit.
402
+ - **[Good-first issues](https://github.com/goun7/veridict/labels/good-first-issue)** — e.g. canary corpus expansion (self-contained, tests included as reference).
403
+ - **[Errata proposals](https://github.com/goun7/veridict/issues/new?template=standard_errata.md)** — a normative sentence that is wrong, ambiguous, or unimplementable. Accepted errata land in §14.2 with credit.
404
+
405
+ All work is governed by the receipts culture: tests and regenerated
406
+ evidence over claims. See [`CONTRIBUTING.md`](CONTRIBUTING.md).
407
+
408
+ ## Model
409
+
410
+ Open-core: the standard, the ledger core, and the offline verifier are
411
+ Apache-2.0 — forever. Commercial offerings (hosted platform, watcher
412
+ certification, enterprise integrations) build on top and never gate the
413
+ open core. See [`docs/commercial-model.md`](docs/commercial-model.md).