axor-backend

FastAPI system-of-record + plane service. Persists and fans out; it never interprets governance — replay/degradation is axor_core.kernel's.

Run: AXOR_ALLOW_UNSIGNED=1 uv run uvicorn axor_backend.main:app --factory --port 8400 (SQLite by default; set AXOR_DATABASE_URL=postgresql+asyncpg://… for Postgres/JSONB).

Modules:

Module Responsibility
app.py application factory — resolves config, builds state, installs the auth gate, registers routers. Nothing else.
config.py every AXOR_* variable, resolved once into one frozen AppConfig
deps.py request-scoped access to the long-lived collaborators (StoreDep, GraphDep, …)
security.py principal resolution + the auth middleware; the policy it applies lives in auth.py
lifecycle.py lifespan: boot warnings, rehydrating the in-memory projections, retention and EE-scheduler sweeps
licensing.py verified EE licenses per organization + the paid-feature gate
corpus.py / traces.py the pinned-corpus report (shared by route and scheduler); reading a run back as a kernel trace
routers/ the HTTP surface, one module per domain; ALL_ROUTERS is the single registration point
plane.py plane service (protocol v0.3): /command, /desired (SSE), /telemetry, /facts, /cascade-stop
storage.py append-only events + runs/desired/reported/facts/pins/keys/share-links/notification-subs; JSON→JSONB on Postgres. Events read back in append order (events.id), which is causal order — per-node seq is not. Desired-state writes are versioned CAS: a signed command lands only at the version it was signed for.
replay_api.py config→KernelConfig, scrubber/counterfactual payloads
provenance.py value provenance inside ONE run, derived from that run's events on request — no store, because value refs are minted per trace and repeat across runs
attestations.py operator attestations: recorded in the fact log here, given their meaning (append-only, revocation-as-an-event, same-keyset revocation) by axor_sentinel.sentinel.attestation
coverage.py what an attestation discharges: covers names fact ids and level = max(severity(uncovered)), both imported from axor_core.kernel.degradation — the plane holds no second opinion about what an operator's signature bought
signing.py operator command signing — delegates JCS to axor_core.kernel.canonicalize
notifications.py / monitor.py webhook triggers (retries + dead-letter); node-stale sweep
share.py EvidenceCase HTML + dependency-free PDF receipt, revocable links
auth.py opt-in master token + scoped API keys
ee/ Enterprise Edition (offline Ed25519 license) — commercial licence, see ee/LICENSE

Env: AXOR_DATABASE_URL, AXOR_API_TOKEN, AXOR_OPERATOR_KEYS (JSON op→hex), AXOR_ALLOW_UNSIGNED, AXOR_VENDOR_PUBKEY, AXOR_STALE_AFTER. Every one of them is resolved in config.py and nowhere else — the dataclass fields are the list. AXOR_VENDOR_PUBKEY is the licensing trust root: /v1/license/verify checks against it and refuses a vendor key supplied in the request.

Tests: uv run pytest packages/axor-backend. The suite runs on SQLite; the postgres marker runs the dialect-sensitive parts (migration chain, JSONB, batched RETURNING, versioned CAS under real concurrent connections) against a real Postgres when AXOR_TEST_POSTGRES_URL is set, and skips otherwise — CI sets it. In-process suites use httpx ASGITransport; tests/e2e/ (marker e2e) boots the real backend + proxy as subprocesses and drives them over HTTP/SSE — cross-service upload, live audit & desired streams, webhook delivery, auth enforcement, and process-restart durability. Run only those with -m e2e, or skip them with -m 'not e2e'.

Project links

Data verified by PyPI on Sep 16, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for Dmitrii_Buchilin from gravatar.com Dmitrii_Buchilin

GitHub Statistics

Data verified by PyPI on Sep 16, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Apache Software License (Apache-2.0)

Requires

Python >=3.12

Provides Extra

identity wrap

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

axor_backend-0.2.0.tar.gz (378.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

axor_backend-0.2.0-py3-none-any.whl (245.9 kB view details)

Uploaded Python 3

File details

Details for the file axor_backend-0.2.0.tar.gz.

File metadata

  • Download URL: axor_backend-0.2.0.tar.gz
  • Upload date:
  • Size: 378.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for axor_backend-0.2.0.tar.gz
Algorithm Hash digest
SHA256 d69dea7f81c16d440c583f13f809489743ebb162b437be50f19f296d1abf720a
MD5 aab87771ba6ff224a3e8ce0819aa8b01
BLAKE2b-256 bcc8023646fccec1989b7e007bf714a61543942499586fb103e26726b448ee4a

See more details on using hashes here.

Provenance

The following attestation bundles were made for axor_backend-0.2.0.tar.gz:

Publisher: release.yml on Bucha11/axor-control-plane

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file axor_backend-0.2.0-py3-none-any.whl.

File metadata

  • Download URL: axor_backend-0.2.0-py3-none-any.whl
  • Upload date:
  • Size: 245.9 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for axor_backend-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 b2cd659dad84839305dc2b6622cf52e1b644de927c0eae31a39d7af217d081ee
MD5 d1f3d203953d881d8450016a922cac21
BLAKE2b-256 5358a3f1e30d0371c3187697cb6b95a1c5e19d85c2453e2a4fab075def5214d2

See more details on using hashes here.

Provenance

The following attestation bundles were made for axor_backend-0.2.0-py3-none-any.whl:

Publisher: release.yml on Bucha11/axor-control-plane

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.2.0 This release

2 files

0.1.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page