This release is a pre-release and may not be stable for production use.
Vixe
Status:
0.1.0a2is an experimental V1 fixture-execution boundary. It is not a usable AI platform, and its default providers fail closed: they do not establish mechanical network isolation or run a fixture.
The package exposes its identity and a deliberately constrained fixture CLI:
vixe --help
vixe --version
python -m vixe --help
python -m vixe --version
vixe execute FIXTURE_ROOT
Execution is only considered after an injected provider supplies independently
verified mechanical network isolation. The built-in Windows and Linux providers
do not supply that proof, so they return not-established / not-run and exit
with code 10. Python alone is not such proof.
V1 accepts exactly one declared Python entry script and its declared fixture files. After an injected provider proves mechanical network isolation, Vixe materializes those files in a temporary workspace and returns redacted output and provider evidence. It does not expose a generic shell, arbitrary binaries, external modules, containers, a model loop, or a persistent runtime. This API boundary is not a claim that Vixe is ready to execute untrusted code: without a provider that supplies that proof, no workspace is materialized and no script runs.
Read the execution contract before using vixe execute.
This release has no working mechanical Windows/Linux isolation backend, network
access, shell or general subprocess interface, models, or Norte dependency.
It has zero runtime dependencies.
Development
With the test dependencies installed, validate the project with:
python -m compileall src
python -m pytest
python -m build
The source repository is cereja-project/vixe.
Releases
Release artifacts are built by GitHub Actions and published to PyPI only through Trusted Publishing with OpenID Connect. The repository does not store a permanent PyPI token.
License
Vixe is available under the MIT License. Copyright 2026 Cereja Project.
Metadata
Release files for cereja-vixe 0.1.0a2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| cereja_vixe-0.1.0a2.tar.gz | 16.0 kB | With provenance | Details for cereja_vixe-0.1.0a2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| cereja_vixe-0.1.0a2-py3-none-any.whl | Python 3 | none | any | Details for cereja_vixe-0.1.0a2-py3-none-any.whl |
Total release size: 34.5 kB
Release files / cereja_vixe-0.1.0a2.tar.gz
| Download URL | cereja_vixe-0.1.0a2.tar.gz |
|---|---|
| Size | 16.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b7dbe14c3a56b2a701f98ca8716f838a326eaee39033c877a4d91e0f601b4997
|
|
BLAKE2b-256 checksum How to use checksums |
e897a83d0b7d56e58a023d5708b73036e8700a6b73eb3ae3ee328471a73512f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 7, 2026.
Transparency logRelease files / cereja_vixe-0.1.0a2-py3-none-any.whl
| Download URL | cereja_vixe-0.1.0a2-py3-none-any.whl |
|---|---|
| Size | 18.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f1a5a6508b711212aaf0c72c2295c67c2604abfdf37aee2014400b53982f0298
|
|
BLAKE2b-256 checksum How to use checksums |
dc0259916898967da680199ba79281ade03a4e89af4fa2b52b3b431cae184d1c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 7, 2026.
Transparency logSecurity for cereja-vixe 0.1.0a2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for cereja_vixe-0.1.0a2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Aug 7, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.