Metadata-Version: 2.5
Name: sagrada-preflight
Version: 0.0.1
Summary: Reserved name held by Cruxia-Labs. Contains no implementation; installing it does nothing.
Project-URL: Homepage, https://github.com/Cruxia-Labs
Author-email: Mars Ausili <mars@cruxia.ai>
License: Apache-2.0
Keywords: placeholder,reserved,sagrada
Classifier: Development Status :: 1 - Planning
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Requires-Python: >=3.10
Description-Content-Type: text/markdown

# sagrada-preflight

**This is a reserved name. It contains no implementation, and installing it does nothing.**

The name is held by [Cruxia-Labs](https://github.com/Cruxia-Labs) because
[`sagrada-mcp`](https://pypi.org/project/sagrada-mcp/) imports `sagrada_preflight`
*real-package-first*, falling back to a copy vendored inside its own wheel. Under that import
order, whoever owns this name on PyPI would control the HALT/ALLOW decision predicate and the
receipt-signing code in every environment where `sagrada-mcp` is installed. Publishing an empty
package under the name closes that path.

## If you were looking for the preflight gate

It ships inside [`sagrada-mcp`](https://pypi.org/project/sagrada-mcp/) — install that instead:

```bash
pip install sagrada-mcp
```

## Is it safe to have this installed?

Yes. This distribution defines no submodules, so the import `sagrada-mcp` actually performs
(`from sagrada_preflight.gate import ...`) raises `ModuleNotFoundError` — a subclass of
`ImportError` — which is precisely what its fallback catches. Verified end to end in a clean
virtual environment: with this package installed, `sagrada-mcp` still resolves its gate from the
vendored implementation, still returns `HALT` on a banned action, and its signed receipts still
verify offline.

If a future release of this name ever carries a real implementation, it will be announced under
the [Cruxia-Labs](https://github.com/Cruxia-Labs) organization and will match the vendored
behaviour before it takes precedence over it.

## Verifying receipts

Receipts produced by the gate verify offline, with no dependency on this package or on any
service:

```bash
uvx er1-verify <receipt.er1.json>
```

Licensed Apache-2.0.
