assay-verify

AI 产出物的验证 SDK — Let's Encrypt 模式,不是穆迪模式。验证不是一项服务, 是默认。Assay Protocol v0 的参考实现(CC-BY,任何人可实现)。

三行代码

from assay_verify import verify, attest, keygen

keygen("my.key")                                # 一次性:生成密钥对
sig = attest("claims.json", "my.key")           # 生产端:产出即打包(自动签名)
result = verify("claims.json", sig, pub_hex)    # 消费端:一行验真

自定义声明(基准数字、agent 产出):

payload = {"agent": "my-bot", "benchmark": "swe-x", "score": 0.83,
           "sha256": hashlib.sha256(artifacts).hexdigest()}
sig = attest("run.log", "my.key", payload=payload)

三态语义(诚实验证器必须能说"算不了")

VALID — 签名有效且哈希吻合
INVALID — 验签失败(篡改或错钥)
MALFORMED — 材料缺失/格式错

特性

零第三方依赖,纯标准库(python ≥3.8)
ed25519(RFC 8032)纯 python 实现,与 nautilus-compass 主实现交叉互验通过
向后兼容:直接验证 compass 已发布的签名成绩单(docs/wall/)

安装(即将上 PyPI)

pip install assay-verify

或直接拷贝 assay_verify/ 目录(单包,无依赖,欢迎 vendor)。

Metadata

Release files for assay-verify 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for assay-verify 0.1.0
File	Size	Uploaded	Provenance	Actions
assay_verify-0.1.0.tar.gz	7.5 kB	Sep 19, 2026	Without provenance	Details for assay_verify-0.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for assay-verify 0.1.0
File	Interpreter	ABI	Platform	Actions Reset
assay_verify-0.1.0-py3-none-any.whl 7.4 kB Sep 19, 2026 Without provenance	Python 3	none	any	Details for assay_verify-0.1.0-py3-none-any.whl

Total release size: 14.9 kB

Release files / assay_verify-0.1.0.tar.gz

Download URL	assay_verify-0.1.0.tar.gz
Size	7.5 kB
Tags	Source
SHA-256 checksum How to use checksums	`981241ffb3409dcce27cbb5b975d48726badb065a860cf7557281903338b01d0`
BLAKE2b-256 checksum How to use checksums	`66592ece9dbcd12e1c8582b4c06de98da0ac212a191225e6e04d319f4cb0eb50`
Upload date	Sep 19, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Release files / assay_verify-0.1.0-py3-none-any.whl

Download URL	assay_verify-0.1.0-py3-none-any.whl
Size	7.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`d2ada3e9c1d198e23e4777d0787a983d77ce7f481352403544ab138059cb0152`
BLAKE2b-256 checksum How to use checksums	`f7563c55ae1a5acf24480dd5c2d1fd710aecdf4b7fb6338bacc726c56117326c`
Upload date	Sep 19, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Security for assay-verify 0.1.0

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.0 This release

Sep 19, 2026 2 release files No provenance

assay-verify 0.1.0