arc-avs-sdk 1.0.0a1

ARC privacy framework: PQ-encrypted, attested, validator-anchored data layer for any application.

arc-avs-sdk

Python SDK for the ARC Privacy AVS — a Sepolia-anchored validator network that proves applications process user data without retention. Same wire format as @arc-avs/sdk on npm; envelopes round-trip byte-exact between TS and Python.

pip install arc-avs-sdk
# adapters & router are optional extras
pip install "arc-avs-sdk[postgres,neo4j,chain]"

Quick start

import asyncio
from arc_avs_sdk import arc, init
from arc_avs_sdk.adapter.memory import MemoryAdapter

schema = arc.schema(
    app_id     = "your-app.com",
    compliance = ["GDPR", "CCPA"],
    classes    = {
        "User": arc.identity({
            "profile": arc.encrypted.struct({
                "name":  arc.encrypted.string(),
                "email": arc.encrypted.email(),
            }),
            "events": arc.collection(
                item_kind="event",
                query="indexed",
                index_fields=["kind"],
                retention="permanent",
            ),
        }),
    },
)

async def main() -> None:
    runtime = await init(schema, adapter=MemoryAdapter())
    user, _ = await runtime.create_user("User", {"name": "Alice", "email": "a@b.c"})
    ref, proof = await runtime.put_record(
        user, "User", "event", {"kind": "login"}, index_fields={"kind": "login"}
    )
    print(proof.input_hash)

asyncio.run(main())

What's shipped

• Crypto layer — ML-KEM-768, ML-DSA-65, AES-256-GCM, secp256k1 ECDSA, keccak256
• Schema DSL — domain-agnostic, byte-canonical, on-chain hash matches the TS canonicalization
• Runtime — create_user, put_record, read, list, process, purge_user, export_user
• Adapters — memory, postgres, mongo, redis, neo4j (graph-RAG / agent memory)
• Processors — openai, anthropic, mistral, kimi, nous
• Validator router — web3.py based EIP-712 attestation submission

Compatibility

The Python CipherEnvelope serializes to the same byte layout as the TypeScript SDK. A round-trip test in tests/test_envelope_compat.py proves that an envelope sealed in TS opens in Python and vice-versa.

Property	TS	Python
Schema canonical hash	keccak256(canonicalize_schema(s))	keccak256(canonicalize_schema(s))
bind_aad(app_id, class, seq)	byte-identical	byte-identical
bind_digest(...)	byte-identical	byte-identical
proof_bind_digest(...)	byte-identical	byte-identical

This matters because the on-chain inputHash recorded by PrivacyTaskManager must agree across language stacks.