Agent Evidence Observer (prototype)
Record brokered agent writes and check selected native framework reports offline.
Use it in agent harnesses and evaluation pipelines that need replayable action records or a consumer gate for retained reports.
Install the root package: pip install agent-evidence-observer==0.0.2.
Quick start
These commands install a pinned source snapshot. Python 3.12 or later and
uv are needed:
git clone https://github.com/probityai/agent-evidence-observer && cd agent-evidence-observer
git checkout f68c8538639aea1515ea357a85a20739004e66fd
uv venv .venv --python python3.12 && uv pip install --python .venv/bin/python .
.venv/bin/agent-evidence-observer demo ./sample-run
.venv/bin/agent-evidence-observer verify ./sample-run
The two commands print:
{"noDetectedGap": "true", "retryReplayed": "true", "status": "verified", "witnessScope": "PEER"}
{"noDetectedGap": "true", "status": "verified", "witnessScope": "PEER"}
sample-run/ now holds the signed packet, the history, the public keys and the file tree. The demo
writes a file, retries it, and the retry returns the first effect. noDetectedGap means the broker's
file-tree snapshots found no change it did not make. It does not mean every agent effect was seen.
Status
The root distribution is version 0.0.2. Every record says witnessScope: PEER: the witness key runs on the same
host under the same operator, so the records show what this broker saw, not what an independent
observer saw. Linux runs can launch a fixed probe, or a Python script given to run-workload, under
bubblewrap with only the broker's socket exposed. Running a real agent that way, and a separately operated
witness, are the next steps.
Documentation
Start with worked examples to follow a practical question, then open its technical reference for commands and exact evidence.
| page | read it for |
|---|---|
| Component tour | every part of the prototype in one paragraph each, with links: ticket service, replay, evaluation history, A2A, AAE, protected dispatch |
| Running the demo | the full install with tests, and what each output field means |
| Design, trust boundary and roadmap | what each mechanism checks and does not establish, the Linux boundary gate, recovery, consumer admission, and the roadmap |
| Isolated producer | the acceptance criteria for running an unmodified agent behind the broker |
| Brokered workload | run a Python script behind the write broker with run-workload, then check it offline with verify-workload |
| Witness ledger | signed begin and terminal receipts, and how a reader checks them |
| Installation and profile selection | choose the root wheel, a separate profile wheel or a selected source reader; runtime requirements and installed examples |
| Release the root package | qualify a wheel and source distribution, then publish with a bound source tag |
| Atomic native reader | install an offline reader for selected native delegation runs and their refusal controls |
| Witnessed run selection | check a selected run against consumer-retained opening and closing checkpoints |
| Approved refund retries | run the APS approval and local SQLite example, then check retries and refusals with a separately installed reader |
| Refund handoff conformance | verify admission, recovery, handoff, effect and reconciliation bindings against 80 public vectors |
License
Apache License 2.0; see LICENSE.
Metadata
Release files for agent-evidence-observer 0.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| agent_evidence_observer-0.0.2.tar.gz | 244.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agent_evidence_observer-0.0.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 412.6 kB
Release files / agent_evidence_observer-0.0.2.tar.gz
| Download URL | agent_evidence_observer-0.0.2.tar.gz |
|---|---|
| Size | 244.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f358837bf09c793887972a4164b21bbdc7121a8cb75492a715dc5626159b0b90
|
|
BLAKE2b-256 checksum How to use checksums |
dd2c5d28d0c35c2cec610056949f48d14c53bd7715a3f9a7c0706a15a9776f6f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 16, 2026.
Transparency logRelease files / agent_evidence_observer-0.0.2-py3-none-any.whl
| Download URL | agent_evidence_observer-0.0.2-py3-none-any.whl |
|---|---|
| Size | 168.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5874e59a603ae250cc39c031008dc7e6fd7f3e99436e9e608c3cd19e9cf8070d
|
|
BLAKE2b-256 checksum How to use checksums |
01099ff0e5dd28969f6b38ab4ba0cf53a426d61199310dda028762e99433f19a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 16, 2026.
Transparency log