Metadata-Version: 2.4
Name: sectum-ai-evidence
Version: 0.1.1
Summary: Sectum AI - tamper-evident evidence chain, verification, and audit-pack rendering.
Project-URL: Homepage, https://sectum.ai
Project-URL: Repository, https://github.com/sectum-ai/sectum-ai
Author: Sectum AI
License-Expression: Apache-2.0
Keywords: ai-security,attestation,audit,evidence,verification
Classifier: Development Status :: 2 - Pre-Alpha
Classifier: Intended Audience :: Developers
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Requires-Python: >=3.12
Requires-Dist: reportlab>=4
Requires-Dist: sectum-ai-spec
Provides-Extra: rekor
Requires-Dist: cryptography>=43; extra == 'rekor'
Provides-Extra: rfc3161
Requires-Dist: rfc3161-client>=1.0.3; extra == 'rfc3161'
Provides-Extra: weasyprint
Requires-Dist: weasyprint>=60; extra == 'weasyprint'
Description-Content-Type: text/markdown

# sectum-ai-evidence

The tamper-evident **evidence chain** for [Sectum AI](https://github.com/sectum-ai/sectum-ai).

This distribution turns a verification run into an auditor-acceptable evidence
pack and verifies it independently:

- canonicalize the run and hash it (SHA-256) into a `run_digest`, then hash the
  whole pack into the `attested_digest` that the anchors bind;
- timestamp the `attested_digest` with an RFC 3161 Time-Stamp Authority;
- record it in a Sigstore Rekor transparency log;
- bundle the canonical run, the hashed ground-truth manifest, the TSA token,
  the Rekor proof, and control mappings into an `in-toto` attestation + a
  human-readable PDF audit pack;
- `sectum-ai verify <pack>` recomputes the digests and validates the TSA token and
  Rekor inclusion proof, reporting PASS/FAIL with reasons — so a third party can
  verify a pack without trusting the producer.

```sh
pip install sectum-ai-evidence
```

Most users install the umbrella package [`sectum-ai`](https://pypi.org/project/sectum-ai/)
instead, which pulls this in automatically.

- Evidence-chain docs: <https://docs.sectum.ai>
- Source: <https://github.com/sectum-ai/sectum-ai>

Apache-2.0.
