Metadata-Version: 2.5
Name: ritvo
Version: 0.0.1.dev0
Summary: An open-source authority layer for AI agents: who may approve what, how decisions escalate, and the evidence.
Project-URL: Homepage, https://ritvo.ai
Project-URL: Source, https://github.com/ritvo-ai/ritvo
Project-URL: Issues, https://github.com/ritvo-ai/ritvo/issues
Project-URL: Changelog, https://github.com/ritvo-ai/ritvo/blob/main/CHANGELOG.md
Project-URL: Security, https://github.com/ritvo-ai/ritvo/security/policy
Author-email: Sunil Kalkunte <11992509+sunilkalkunte@users.noreply.github.com>
License-Expression: Apache-2.0
License-File: LICENSE
License-File: NOTICE
Keywords: ai-agents,approvals,audit,authorization,governance,mcp
Classifier: Development Status :: 2 - Pre-Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: System Administrators
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Typing :: Typed
Requires-Python: >=3.12
Requires-Dist: typer>=0.20
Provides-Extra: dev
Requires-Dist: mypy>=2.3; extra == 'dev'
Requires-Dist: pytest>=9.0; extra == 'dev'
Requires-Dist: ruff==0.17.0; extra == 'dev'
Description-Content-Type: text/markdown

# Ritvo

Ritvo is an open-source authority layer for AI agents. When an agent asks to do something its bindings do not clearly allow, Ritvo decides who may approve it, escalates along named roles, enforces separation of duties, and keeps the evidence in a tamper-evident ledger.

The name comes from the Sanskrit *ṛta*, the right order of things.

## Status

**Early, pre-alpha.** The `ritvo` package on PyPI (version 0.0.1.dev0) is a placeholder that reserves the name. It contains only the `ritvo --version` command and no features. Nothing here is ready for production use. Interfaces, file formats and commands will change without notice until the first feature release, v0.1. See [CHANGELOG.md](CHANGELOG.md) for what exists today.

## Where Ritvo sits

Gateways sit between an agent and its tools. Ritvo sits below them, next to the resource, and above them as the policy authority:

- **Enforcement points** run next to the resource. The first is middleware inside your own MCP server, added with one library call and removed the same way. They work behind any gateway, or none.
- **The Governance OS** publishes signed policy bundles to enforcement points, resolves asks along escalation ladders, and mints single-use grants. It never touches a live call.
- **The inspector** (`ritvo inspect`) is a local, read-only scan of the MCP servers and agent frameworks you name. It writes an inventory and a report; it sends nothing anywhere.
- **The diagnostic** (`ritvo review`, `ritvo diagnose`) reads files and writes a gap report and a draft `ritvo.yaml`. It never connects to anything.

The design is in [docs/PRD.md](docs/PRD.md) (what and why) and [docs/SPEC.md](docs/SPEC.md) (behaviour and interfaces). Why Ritvo is not a gateway is recorded in [docs/decisions/0001-below-the-gateway.md](docs/decisions/0001-below-the-gateway.md).

## Non-goals

- **Not a gateway.** No key issuance, budgets, provider proxying or tool allow lists. Those are well served elsewhere.
- No credential custody, no TLS interception, no autonomy scoring, no agent-authored intent.
- Not multi-tenant SaaS. One instance per organisation, plus the library inside that organisation's own MCP server.
- No vertical policy content.
- Not a security scanner for prompt injection or malicious tool descriptions.

## Quick start

There is nothing to run yet beyond the CLI entry point. To install from source:

```sh
git clone https://github.com/Ritvo-ai/ritvo.git
cd ritvo
python3.12 -m venv .venv
source .venv/bin/activate        # Windows: .venv\Scripts\activate
pip install -e .
ritvo --version
```

The quick start will cover `ritvo inspect` and `ritvo review` as they land, and `ritvo demo` on `examples/mcp-demo` after that.

## Getting help

See [SUPPORT.md](SUPPORT.md). Report security issues privately as described in [SECURITY.md](SECURITY.md), never in a public issue.

## Contributing

See [CONTRIBUTING.md](CONTRIBUTING.md). Every commit needs a DCO sign-off. Please read the [Code of Conduct](CODE_OF_CONDUCT.md).

## Licence

Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE). The name Ritvo is covered by [TRADEMARK.md](TRADEMARK.md).
