Metadata-Version: 2.4
Name: alelyon-os
Version: 0.2.3
Summary: The open Alelyon developer surface: certified-number production and verification, exact coordinate registration and model morphometry, multi-session worktree coordination, a local-model conversation with constrained decoding, uncertainty-propagating compute, and the API client.
Author: Alelyon
License-Expression: Apache-2.0 OR MIT
Project-URL: Homepage, https://github.com/TLace03/Alelyon-OS
Project-URL: Specification, https://github.com/TLace03/Alelyon-OS/blob/main/spec/cne-v0.md
Project-URL: Source, https://github.com/TLace03/Alelyon-OS
Keywords: transparency-log,attestation,merkle,ed25519,verifiable-computation,rfc6962,conformance,registration,morphometry,uncertainty-propagation
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Financial and Insurance Industry
Classifier: Intended Audience :: Science/Research
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Scientific/Engineering :: Mathematics
Classifier: Topic :: Security :: Cryptography
Classifier: Typing :: Typed
Requires-Python: >=3.10
Description-Content-Type: text/markdown
License-File: LICENSE-APACHE
License-File: LICENSE-MIT
Requires-Dist: cryptography>=42
Requires-Dist: numpy>=1.26
Requires-Dist: pandas>=2.0
Provides-Extra: sdk
Requires-Dist: httpx>=0.27; extra == "sdk"
Provides-Extra: stream
Requires-Dist: pyzmq>=25; extra == "stream"
Provides-Extra: dev
Requires-Dist: pytest>=7; extra == "dev"
Requires-Dist: httpx>=0.27; extra == "dev"
Dynamic: license-file

# alelyon-os

The open part of the Alelyon Deterministic Quantitative Computational Operating System,
as one installable distribution.

```bash
pip install alelyon-os
pip install "alelyon-os[sdk]"     # additionally installs httpx, for the API client
```

Source: <https://github.com/TLace03/Alelyon-OS>

## Stability: this is an unstable surface at 0.x

**No API or behaviour here carries a compatibility promise yet.** Names,
signatures, return values and refusal conditions may change in any release
before 1.0, without a deprecation period. `Development Status :: 3 - Alpha` in
the package metadata says the same thing; this says it where a reader will
actually see it.

That is a decision, not an oversight, and the honest reason is worth stating: a
release in this series changed `alelyon.runtime.vector.compute.propagate` to
**refuse** a source with non-finite uncertainty, where it had previously
returned statistics that were silently `nan`. The old behaviour hid the input
carrying the most uncertainty from the variance attribution that exists to name
it. That fix was correct and it broke behaviour a caller could have depended on.
A stability promise at 0.x would have forbidden it, or made it a major
version — and this surface is not finished making corrections of that kind.

If you need to pin against change, pin the exact version and read the changelog
before moving. If you depend on this and want a stability commitment, say so —
the promise is cheap to make once the corrections stop, and dishonest before.

---

## What is in here

| Import | What it does |
|---|---|
| `alelyon.verify` | Verify a Certified Number Envelope by replay against your own copy of the inputs, under a key you pin out of band. Ships the `alelyon-verify` CLI, the normative spec, and the conformance vectors. |
| `alelyon.runtime.vector.lattice` | Exact coordinate registration: immutable coordinate contracts, exact target-to-source transforms with a declared loss/invertibility surface, canonical byte encoding with content commitments, a replay checker, and a signed Registration Certificate. |
| `alelyon.runtime.vector.lattice.morphometry` | Model Morphometry — a canonical `(block, module)` template for transformer models and an exact registration of a model's native axis order onto it. |
| `alelyon.runtime.common.worktree*` | Fleet coordination: what several agent sessions in one repository can each observe and declare, stored apart and never merged. |
| `alelyon.runtime.vector.compute` | A typed dependency DAG with Monte-Carlo uncertainty propagation and variance attribution. |
| `alelyon.platform.sdk` | Python client for the Alelyon read-only HTTP API. Requires the `sdk` extra. |

## Verify a receipt

```bash
alelyon-verify selftest          # the bundled conformance suite; needs no network
alelyon-verify verify --envelope receipt.json --data your_extract.json \
    --key <the issuer's public key, obtained OUT OF BAND>
```

The key must reach you by some path the receipt did not travel. Verifying an envelope
against a key embedded in that same envelope authenticates nothing.

**What a passing verification means.** The committed inputs were not revised after the
fact, and the number replays from them under the pinned key. It does **not** establish
that the inputs were true when captured: a producer who fabricates an extract at capture
signs a receipt that verifies perfectly. See `SPEC-cne-v0.md`, shipped inside the wheel.

## Things worth knowing before you rely on this

**Extras gate dependencies, not files.** Every install receives every module listed
above. `[sdk]` adds `httpx`; it does not change what code is on disk. There is no way to
install a subset.

**`import alelyon.platform.sdk` fails without the `sdk` extra.** `client.py` imports
`httpx` at module scope. This is the one deliberate sharp edge: someone installing this
to check a receipt should not also acquire an HTTP client.

**This wheel is not minimal, and does not claim to be.** Its predecessor `alelyon-verify`
was a wheel containing only the verifier, and said so. That is not true of `alelyon-os`.
What remains true, and is checked against the built artifact on every release, is the
*boundary*: the wheel contains exactly a reviewed allowlist of files and nothing else.
The capture engine, the history store, the GUI, the HTTP service, identity and auth, and
every signing key are outside it.

**Model Morphometry reads no weights.** It takes a deterministic inventory from a model
runtime's *declared* metadata and runs no forward pass, so it measures declared
architecture and storage precision — and nothing about learned behaviour.

**The fleet modules are observational.** A claim is not a lock, and a finding's body is
self-reported. Nothing in them verifies that another session's declaration is true.

## Migrating from the old packages

`alelyon-sdk`, `alelyon-verify` and `alelyon-mock` were separate distributions and have
been withdrawn from PyPI. Those project names are **no longer registered to Alelyon** and
may be claimed by anyone; do not install them.

| Was | Now |
|---|---|
| `pip install alelyon-verify` | `pip install alelyon-os` |
| `from alelyon_sdk import AlelyonClient` | `from alelyon.platform.sdk import AlelyonClient` |
| `alelyon-verify verify …` | unchanged — same console script |

The SDK's import path changed because the public copy had drifted from the source it was
generated from. It is now generated, so the two cannot diverge again.

## License

Licensed under either of

- Apache License, Version 2.0 ([LICENSE-APACHE](LICENSE-APACHE) or
  <https://www.apache.org/licenses/LICENSE-2.0>)
- MIT License ([LICENSE-MIT](LICENSE-MIT) or <https://opensource.org/licenses/MIT>)

at your option. Both texts ship inside the wheel.

Unless you explicitly state otherwise, any contribution intentionally submitted for
inclusion in this work by you shall be dual licensed as above, without any additional
terms or conditions.
