Skip to main content

coreason-auditor

Project description

coreason-auditor

Regulatory Compliance, AI-BOM Generation, & Audit Trail Reporting for the CoReason Ecosystem.

License CI Code Style: Ruff Documentation


"If it isn't documented in a PDF, it didn't happen. Turn logs into Law."

coreason-auditor is the automated reporting engine for the CoReason ecosystem. It bridges the gap between "Technical Logging" (JSON streams) and "Regulatory Submission" (Human-readable documents) by generating cryptographically signed Audit Packages.

Features

Based on the Product Requirements:

  • Traceability Engine: Maps Requirements $\to$ Tests $\to$ Results (RTM). Fails generation if critical requirements are uncovered.
  • AI-BOM Generator: Creates Software Bill of Materials (CycloneDX Standard) for models, data lineage, and dependencies.
  • Session Replayer: Forensic tool that reconstructs user sessions, displaying hidden "Thought Chains" and "Tool Calls" alongside user input.
  • 21 CFR Part 11 Signer: Applies digital signatures to exported reports for immutability and authenticity.
  • Deviation Reporting: Prioritizes failures and interventions (Exception-First Reporting).

Installation

pip install coreason-auditor

Usage

from pathlib import Path
from coreason_auditor.orchestrator import AuditOrchestrator
from coreason_auditor.models import AgentConfig, AssayReport, BOMInput

# Initialize Orchestrator (Dependencies injected via DI container in production)
orchestrator = AuditOrchestrator(...)

# Load Inputs
agent_config = AgentConfig(...)
assay_report = AssayReport(...)
bom_input = BOMInput(...)

# Generate Signed Audit Package
package = orchestrator.generate_audit_package(
    agent_config=agent_config,
    assay_report=assay_report,
    bom_input=bom_input,
    user_id="compliance_officer_01",
    agent_version="1.2.0"
)

# Export to PDF
orchestrator.export_to_pdf(package, "audit_report_v1.2.0.pdf")

For CLI usage:

python -m coreason_auditor.main \
  --agent-config agent.yaml \
  --assay-report assay_report.json \
  --bom-input bom_input.json \
  --output report.pdf \
  --agent-version 1.0.0

License

Copyright (c) 2025 CoReason, Inc. Licensed under the Prosperity Public License 3.0. See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

coreason_auditor-0.1.0.tar.gz (24.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

coreason_auditor-0.1.0-py3-none-any.whl (35.1 kB view details)

Uploaded Python 3

File details

Details for the file coreason_auditor-0.1.0.tar.gz.

File metadata

  • Download URL: coreason_auditor-0.1.0.tar.gz
  • Upload date:
  • Size: 24.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for coreason_auditor-0.1.0.tar.gz
Algorithm Hash digest
SHA256 9e75a17dc94e7d370d46873141ce3552d3e4abbd5a7f24bd3878b1cc121393ec
MD5 a5dcfce22688747c00bbe267dbce0e89
BLAKE2b-256 c16b2bf06e46e90a0f96903cda0285aeb61c1ae18a7a567435fb3cf07e317649

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.1.0.tar.gz:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file coreason_auditor-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for coreason_auditor-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 6f28a19a38a298a616e5a5af944b91179140c80b34b67045d304cdc1372bb8d3
MD5 8291ba48e7d7d3d85cdbffbc65326952
BLAKE2b-256 3f61f549d90b328a3cfd6509b8a9bed81a426195309a2e7ccfdc7bcd3d8b71a4

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.1.0-py3-none-any.whl:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page