algovoi-keystone-secure-lite

The open, lite flow-point hardening layer for the AlgoVoi keystone. Several canonical keystone flow points emit a ref that proves a fact was recorded, but not that it was recorded correctly or freshly. This package closes that with three securing refs, each a deterministic, offline-recomputable content address. Moves no funds; adds no new crypto.

decision_audit_ref = "sha256:" + SHA-256(JCS({decision_ref, passport_credential_ref, mandate_ref, policy_bound_ref[, screen_binding_ref]}))
guard_context_ref  = "sha256:" + SHA-256(JCS({canon_version, type, guard_timestamp_ms, policy_ref, mandate_ref, passport_credential_ref}))
with_validity / check_freshness  -- attach + enforce an integer-millisecond validity window on any ref preimage

Each input is imported by hash. Swap the passport, the mandate, the policy, the screen, or the moment and the ref diverges: a decision audited under policy P does not recompute under a rotated policy P', and a guard context is bound to the exact instant the gate evaluated it. Timestamps are epoch-millisecond integers hashed directly (Substrate Rule 2) -- no floating point, no RFC 3339 strings.

Lite vs commercial

	Lite (this package)	Keystone Secure
Licence	Apache-2.0, open	Commercial OEM
Hardening refs	content-addressed, recompute offline	same construction, Falcon-1024 signed
Evidence	bring your own	signed, hash-linked chain into the Compliance Command Center posture tiers
Enforcement	recompute + compare	fail-closed decision-audit, freshness, and guard-context enforcement

The lite ref you pin is byte-identical to the ref the commercial tier signs: pin lite, anchor a vector hash, carry the NOTICE → free v0 key; upgrade for post-quantum signing + CCC posture + enforcement.

Install & use

pip install algovoi-keystone-secure-lite

from algovoi_keystone_secure_lite import (
    decision_audit_ref, verify_decision_audit, guard_context_ref, with_validity, check_freshness,
)

# each input is imported by hash: a decision_ref, a passport_ref, a mandate_ref, a policy_bound_ref, a screen_ref
audit = decision_audit_ref(decision_ref, passport_ref, mandate_ref, policy_bound_ref, screen_binding_ref)
verify_decision_audit(audit, decision_ref, passport_ref, mandate_ref, policy_bound_ref, screen_binding_ref)  # True

# pin what the admission gate saw at a moment in time
gc = guard_context_ref(guard_timestamp_ms, policy_ref, mandate_ref, passport_ref)

# attach + enforce a validity window on any preimage
policy = with_validity({"required_scope": "payments.send"}, issued_at_ms=1_720_000_000_000, expires_at_ms=1_720_003_600_000)
check_freshness(policy, now_ms=1_720_000_060_000)   # True, inside the window

A decision audited under policy P returns a different decision_audit_ref if recomputed against the policy_bound_ref under a rotated P'; rotation is detectable. Malformed refs and non-integer timestamps are rejected, not hashed.

Conformance

conformance/keystone_decision_audit_v1/: 2 positives, 3 divergence/omission negatives, 1 rejection negative, 2 invariants.
conformance/keystone_guard_context_v1/: 1 positive, 2 divergence negatives, 2 rejection negatives, 2 invariants.

Each verifier imports only stdlib + rfc8785:

pip install rfc8785
python conformance/keystone_decision_audit_v1/verify.py
python conformance/keystone_guard_context_v1/verify.py

Adopters

The 4-check gate is scripts/check_v0_adoption.py (dependency + canonical hash anchor + NOTICE + version pin → ISSUE_V0_KEY). Apply: chopmob@gmail.com.

License

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

algovoi_keystone_secure_lite-0.2.1-cp313-cp313-win_amd64.whl (39.4 kB view details)

Uploaded Aug 15, 2026 CPython 3.13Windows x86-64

algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl (224.2 kB view details)

Uploaded Aug 15, 2026 CPython 3.13manylinux: glibc 2.17+ ARM64manylinux: glibc 2.28+ ARM64

algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl (226.7 kB view details)

Uploaded Aug 15, 2026 CPython 3.13manylinux: glibc 2.28+ x86-64manylinux: glibc 2.5+ x86-64

algovoi_keystone_secure_lite-0.2.1-cp312-cp312-win_amd64.whl (39.9 kB view details)

Uploaded Aug 15, 2026 CPython 3.12Windows x86-64

algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl (238.3 kB view details)

Uploaded Aug 15, 2026 CPython 3.12manylinux: glibc 2.17+ ARM64manylinux: glibc 2.28+ ARM64

algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl (241.0 kB view details)

Uploaded Aug 15, 2026 CPython 3.12manylinux: glibc 2.28+ x86-64manylinux: glibc 2.5+ x86-64

algovoi_keystone_secure_lite-0.2.1-cp311-cp311-win_amd64.whl (40.8 kB view details)

Uploaded Aug 15, 2026 CPython 3.11Windows x86-64

algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl (217.3 kB view details)

Uploaded Aug 15, 2026 CPython 3.11manylinux: glibc 2.17+ ARM64manylinux: glibc 2.28+ ARM64

algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl (216.0 kB view details)

Uploaded Aug 15, 2026 CPython 3.11manylinux: glibc 2.28+ x86-64manylinux: glibc 2.5+ x86-64

algovoi_keystone_secure_lite-0.2.1-cp310-cp310-win_amd64.whl (40.7 kB view details)

Uploaded Aug 15, 2026 CPython 3.10Windows x86-64

algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl (208.1 kB view details)

Uploaded Aug 15, 2026 CPython 3.10manylinux: glibc 2.17+ ARM64manylinux: glibc 2.28+ ARM64

algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl (206.1 kB view details)

Uploaded Aug 15, 2026 CPython 3.10manylinux: glibc 2.28+ x86-64manylinux: glibc 2.5+ x86-64

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp313-cp313-win_amd64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp313-cp313-win_amd64.whl
Upload date: Aug 15, 2026
Size: 39.4 kB
Tags: CPython 3.13, Windows x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp313-cp313-win_amd64.whl
Algorithm	Hash digest
SHA256	`7a3baa1910fd43c1c4f0d55dcc44cb12c1214643f877097c63069be66dc5bab0`
MD5	`849cfcb328f3507d30d1d63fcdaaa8c1`
BLAKE2b-256	`c153861171c4da24604eb0004d88c942e319a3ab5ac74c6ef614bf0b0f3ad829`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Upload date: Aug 15, 2026
Size: 224.2 kB
Tags: CPython 3.13, manylinux: glibc 2.17+ ARM64, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`f394ddda4984c9fd2272ffe14df898f0f0cc3ba0a8891188646dbe66ef79bb32`
MD5	`4b6320168255acdf12793fc5522ee0cc`
BLAKE2b-256	`f2cd6fbab718b6a103609fe4ac9c22f5edc488b73ded8fd4f984a39a5cb32649`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Upload date: Aug 15, 2026
Size: 226.7 kB
Tags: CPython 3.13, manylinux: glibc 2.28+ x86-64, manylinux: glibc 2.5+ x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Algorithm	Hash digest
SHA256	`30c1927676b83adf6ed9d19bcd89f031288b1c2ec812917a20535040dc5994af`
MD5	`06ef70df6d0235f7a46c9f3cba261a3e`
BLAKE2b-256	`7c30a7d263439c83bf4e7af1fda45681225698b154c3dae383d18c4363b56936`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp312-cp312-win_amd64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp312-cp312-win_amd64.whl
Upload date: Aug 15, 2026
Size: 39.9 kB
Tags: CPython 3.12, Windows x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp312-cp312-win_amd64.whl
Algorithm	Hash digest
SHA256	`5f64c06a88d731ad515dbfce5c72a9c1f1c630ca56a1dcc14e96378f4ff6d5bf`
MD5	`694cefdcdd7508fc8aeb4a79a0bbcda7`
BLAKE2b-256	`3b08090a812f1960f6c92cb9ae9de9ea2fdf30b1e451701ce19f38ff4d4f6dbe`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Upload date: Aug 15, 2026
Size: 238.3 kB
Tags: CPython 3.12, manylinux: glibc 2.17+ ARM64, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`5b3722f8e46a6a031211c00d2d4c2215380e762e702c2bd3ee4f014e7faba66a`
MD5	`614693fb85e5ac8f6e40f676d01d11c2`
BLAKE2b-256	`7196b056ba127bc89cd86809384dbc2ba5d51191bfdca8761c2e2c075d57cea2`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Upload date: Aug 15, 2026
Size: 241.0 kB
Tags: CPython 3.12, manylinux: glibc 2.28+ x86-64, manylinux: glibc 2.5+ x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Algorithm	Hash digest
SHA256	`144ecfd28981636136844efd5093aadb01e0b2931982be70d4216dda3b7e8f3e`
MD5	`3a94d6ad4e1b051258f668fb291bb725`
BLAKE2b-256	`560fcc4f70cafb3a57e821a9489e4c1ea5e465673a6a020333661c78ff4184ea`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp311-cp311-win_amd64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp311-cp311-win_amd64.whl
Upload date: Aug 15, 2026
Size: 40.8 kB
Tags: CPython 3.11, Windows x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp311-cp311-win_amd64.whl
Algorithm	Hash digest
SHA256	`ba1bd08137e8d6c6b56b4e48d13b4657d237aad37e51df3db3ae66ff5e807eb5`
MD5	`4cb31d69873bc0b0babe4d3f4d1b74a4`
BLAKE2b-256	`eeba1a956d985ab20d5cae834e36317e082e204cf78db82380069dd1ae14b6ad`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Upload date: Aug 15, 2026
Size: 217.3 kB
Tags: CPython 3.11, manylinux: glibc 2.17+ ARM64, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`6e4f01708cc37823b51aea5b46b37e3dad0c466214b8cc40fe9b24d2c27e02af`
MD5	`95b4fc2a1ea5acea1e75cf32658964ca`
BLAKE2b-256	`bf8a0eb91ae825375ab79299ecb4e12e38c5bef25705ba7a0387871df7569103`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Upload date: Aug 15, 2026
Size: 216.0 kB
Tags: CPython 3.11, manylinux: glibc 2.28+ x86-64, manylinux: glibc 2.5+ x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp311-cp311-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Algorithm	Hash digest
SHA256	`ac01ae61fda950364240a625a6e0ee733ebc535605de041061d37925f6c8f777`
MD5	`331976d21000efbcc12de8313ec0ac9c`
BLAKE2b-256	`00755e2772f49f105b2241013bb0a2a967bdc99a3a9256c627751b4344af122d`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp310-cp310-win_amd64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp310-cp310-win_amd64.whl
Upload date: Aug 15, 2026
Size: 40.7 kB
Tags: CPython 3.10, Windows x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp310-cp310-win_amd64.whl
Algorithm	Hash digest
SHA256	`ba1dc178713d850bef638451c9d683c23d41795abfd05e0deee256de3bf436d4`
MD5	`c38ff58d02346a504d56584bd96489c4`
BLAKE2b-256	`feafdcee475f648eccde730f26a4801d07fa61189b55fe8726c0261a5889902a`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Upload date: Aug 15, 2026
Size: 208.1 kB
Tags: CPython 3.10, manylinux: glibc 2.17+ ARM64, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`f0865aca7196fa2045d1d43a6968274ffce14520f28a3075046e7bf11c17b632`
MD5	`a9064fc09c16c54c581c52da822786da`
BLAKE2b-256	`a03231895bbb4bc139177f9d05157bf273bf22dc0c7e14d23c7b209afffe1499`

See more details on using hashes here.

File details

Details for the file algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl.

File metadata

Download URL: algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Upload date: Aug 15, 2026
Size: 206.1 kB
Tags: CPython 3.10, manylinux: glibc 2.28+ x86-64, manylinux: glibc 2.5+ x86-64
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.12.10

File hashes

Hashes for algovoi_keystone_secure_lite-0.2.1-cp310-cp310-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl
Algorithm	Hash digest
SHA256	`6a804e12dc54edf35a2185af9433a89054b1bcf181962df0ba1811fb9d705f37`
MD5	`0efeabed2ab973d95cf9c69a53068e76`
BLAKE2b-256	`91ec4d873ab12b6f79778a45a051b7a621c714399ff542be9bae5821337dbb7f`

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

0.2.1 This release

Aug 15, 2026 12 files

0.2.0

Jul 10, 2026 4 files

algovoi-keystone-secure-lite 0.2.1

algovoi-keystone-secure-lite

Lite vs commercial

Install & use

Conformance

Adopters

License

Project links

Key dates

1 maintainer

Credits

License

Requires

Provides Extra

Tags

Download files

Source Distributions

Built Distributions

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

File details

File metadata

File hashes

Release history Release notifications | RSS feed