agos-property

A small, deterministic kernel for compiling already-authorized Property observations into bounded graphs and attributed evidence. It performs no I/O and grants no authority.

Host acquisition -> finite authorized observations -> compile -> Graph -> evidence

The package owns three things:

Authorization, acquisition, credentials, storage, jurisdiction adapters, database schemas, product workflows, and effects belong to the integrating application.

Install

Until the first package release, install from the public repository:

git clone https://github.com/iamagos/agos-property.git
python -m pip install ./agos-property

Use

Applications normalize source-specific records into immutable CommittedObservation values, authorize and bound the finite input set, then call the pure compiler:

from agos_property.compile import GraphSpec, compile_graph

graph = compile_graph(spec, observations, compiler)

The caller supplies compiler, a pure function from the canonical observation tuple and explicit GraphSpec to GraphParts. The kernel validates its closure, cutoffs, bounds, identities, references, and canonical ordering.

Evidence is another pure projection:

from agos_property.evidence import build_property_evidence

result = build_property_evidence(
    graph,
    subject,
    requested_paths=requested_paths,
)

result names every fact, source observation, agreement, conflict, and missing path. Complete positive results retain only observations referenced by their facts. A missing-path result retains the complete finite Graph observation set that establishes the negative evidence claim. Rights and visibility remain provenance; they never grant access.

examples/basic.py is a complete, executable composition:

python examples/basic.py

The complete synthetic contract is executable:

python vectors/kernel/replay.py vectors/kernel/basic.json

Design

The kernel is a functional core:

explicit values -> pure deterministic transformation -> immutable result

It has no Engine, store, provider registry, global clock, ambient policy, or compatibility facade. Graph and evidence identities cover their complete canonical semantics. Equivalent finite inputs produce byte-identical results.

Develop

uv sync --locked --all-groups
uv run pytest
uv run ruff check .
uv run mypy agos_property
uv build --no-sources

Runtime dependencies remain empty.

Security

See SECURITY.md. Report vulnerabilities privately rather than opening a public issue.

License

Copyright 2026 I am Agos, Inc. Licensed under the Apache License, Version 2.0.