Metadata-Version: 2.4
Name: aevum-core
Version: 0.9.0
Summary: Aevum — the sealed movement. Replay-first, policy-governed context kernel.
Project-URL: Homepage, https://aevum.build
Project-URL: Repository, https://github.com/aevum-labs/aevum
Project-URL: Issues, https://github.com/aevum-labs/aevum/issues
License: Apache-2.0
Keywords: ai,audit,context,governance,provenance,replay
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Typing :: Typed
Requires-Python: >=3.11
Requires-Dist: base58>=2.1
Requires-Dist: cbor2>=6.1.1
Requires-Dist: cryptography>=48.0.1
Requires-Dist: httpx>=0.27.0
Requires-Dist: oxrdflib>=0.4.0
Requires-Dist: pydantic<3.0,>=2.0
Requires-Dist: pynacl>=1.6.2
Requires-Dist: pyshacl>=0.25.0
Requires-Dist: pyyaml>=6.0
Requires-Dist: rdflib>=7.0.0
Requires-Dist: rfc3161-client>=1.0.6
Requires-Dist: rfc8785>=0.1.2
Provides-Extra: a2a
Requires-Dist: aevum-agent>=0.9.0; extra == 'a2a'
Provides-Extra: adk
Requires-Dist: google-adk<3,>=2.2; extra == 'adk'
Provides-Extra: all
Requires-Dist: aevum-agent>=0.9.0; extra == 'all'
Requires-Dist: aevum-mcp>=0.9.0; extra == 'all'
Requires-Dist: aevum-server>=0.9.0; extra == 'all'
Requires-Dist: aevum-store-oxigraph>=0.9.0; extra == 'all'
Requires-Dist: aevum-store-postgres>=0.9.0; extra == 'all'
Requires-Dist: cedarpy~=4.8.0; extra == 'all'
Requires-Dist: liboqs-python>=0.14.0; extra == 'all'
Provides-Extra: anthropic
Requires-Dist: anthropic>=0.50.0; extra == 'anthropic'
Provides-Extra: benchmark
Requires-Dist: pytest-benchmark>=4.0.0; extra == 'benchmark'
Provides-Extra: cedar
Requires-Dist: cedarpy~=4.8.0; extra == 'cedar'
Provides-Extra: crewai
Requires-Dist: crewai>=0.80.0; extra == 'crewai'
Provides-Extra: default
Requires-Dist: aevum-store-oxigraph>=0.9.0; extra == 'default'
Provides-Extra: dev
Requires-Dist: cyclonedx-bom>=4.0; extra == 'dev'
Requires-Dist: dirty-equals>=0.7; extra == 'dev'
Requires-Dist: inline-snapshot>=0.13; extra == 'dev'
Requires-Dist: jsonschema>=4.23; extra == 'dev'
Requires-Dist: mypy>=1.9; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
Requires-Dist: pytest>=8.0; extra == 'dev'
Requires-Dist: ruff>=0.4; extra == 'dev'
Requires-Dist: types-pyyaml>=6.0; extra == 'dev'
Provides-Extra: langchain
Requires-Dist: langchain-core>=1.2.22; extra == 'langchain'
Provides-Extra: langgraph
Requires-Dist: langgraph-checkpoint>=4.1.0; extra == 'langgraph'
Provides-Extra: maf
Requires-Dist: agent-framework-core<2,>=1.0.0; extra == 'maf'
Provides-Extra: mcp
Requires-Dist: aevum-mcp>=0.9.0; extra == 'mcp'
Provides-Extra: openai-agents
Requires-Dist: openai-agents>=0.0.12; extra == 'openai-agents'
Provides-Extra: oxigraph
Requires-Dist: aevum-store-oxigraph>=0.9.0; extra == 'oxigraph'
Provides-Extra: postgres
Requires-Dist: aevum-store-postgres>=0.9.0; extra == 'postgres'
Provides-Extra: pqc
Requires-Dist: liboqs-python>=0.14.0; extra == 'pqc'
Provides-Extra: server
Requires-Dist: aevum-server>=0.9.0; extra == 'server'
Description-Content-Type: text/markdown

# aevum-core

The independent black box for AI agents — tamper-evident, independently
verifiable records of what your agents did.

`aevum-core` is the Aevum context kernel: five governed functions (`ingest`,
`query`, `review`, `commit`, `replay`) over an append-only episodic ledger,
gated by five unconditional barriers (crisis detection, classification
ceiling, consent, audit immutability, provenance) that are hardcoded and
never policy-controlled.

- **SHA3-256 hash-chained sigchain** — every event is RFC 8785 (JCS)
  canonicalized and Ed25519-signed (RFC 8032); an optional hybrid ML-DSA-65
  (FIPS 204) signature runs alongside it for post-quantum defense-in-depth.
- **COSE_Sign1 receipts with RFC 3161 trusted timestamps** — each entry is
  wrapped in a portable, independently verifiable receipt.
- **RFC 6962-style Merkle log** — Signed Tree Heads with inclusion and
  consistency proofs detect any historical rewrite of the ledger.
- **Cedar ABAC + OPA policy engines** — consent and content/infrastructure
  decisions are externalised and optional, sitting behind the unconditional
  barriers rather than replacing them.
- Verification logic also ships as a separate package,
  [`aevum-verify`](https://pypi.org/project/aevum-verify/), so a receipt can
  be checked without running the rest of the kernel.

## Install

    pip install aevum-core
    pip install "aevum-core[cedar]"  # + real Cedar consent enforcement

## Docs

Full documentation, threat model, and regulatory alignment:
https://github.com/aevum-labs/aevum

## License

Apache-2.0.
