Skip to main content

coreason-auditor

Project description

coreason-auditor

Regulatory Compliance, AI-BOM Generation, & Audit Trail Reporting for the CoReason Ecosystem.

License CI Code Style: Ruff Documentation


"If it isn't documented in a PDF, it didn't happen. Turn logs into Law."

coreason-auditor is the automated reporting engine for the CoReason ecosystem. It bridges the gap between "Technical Logging" (JSON streams) and "Regulatory Submission" (Human-readable documents) by generating cryptographically signed Audit Packages.

Features

Based on the Product Requirements:

  • Traceability Engine: Maps Requirements $\to$ Tests $\to$ Results (RTM). Fails generation if critical requirements are uncovered.
  • AI-BOM Generator: Creates Software Bill of Materials (CycloneDX Standard) for models, data lineage, and dependencies.
  • Session Replayer: Forensic tool that reconstructs user sessions, displaying hidden "Thought Chains" and "Tool Calls" alongside user input.
  • 21 CFR Part 11 Signer: Applies digital signatures to exported reports for immutability and authenticity.
  • Deviation Reporting: Prioritizes failures and interventions (Exception-First Reporting).

Installation

pip install coreason-auditor

Usage

from pathlib import Path
from coreason_auditor.orchestrator import AuditOrchestrator
from coreason_auditor.models import AgentConfig, AssayReport, BOMInput

# Initialize Orchestrator (Dependencies injected via DI container in production)
orchestrator = AuditOrchestrator(...)

# Load Inputs
agent_config = AgentConfig(...)
assay_report = AssayReport(...)
bom_input = BOMInput(...)

# Generate Signed Audit Package
package = orchestrator.generate_audit_package(
    agent_config=agent_config,
    assay_report=assay_report,
    bom_input=bom_input,
    user_id="compliance_officer_01",
    agent_version="1.2.0"
)

# Export to PDF
orchestrator.export_to_pdf(package, "audit_report_v1.2.0.pdf")

For CLI usage:

python -m coreason_auditor.main \
  --agent-config agent.yaml \
  --assay-report assay_report.json \
  --bom-input bom_input.json \
  --output report.pdf \
  --agent-version 1.0.0

License

Copyright (c) 2025 CoReason, Inc. Licensed under the Prosperity Public License 3.0. See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

coreason_auditor-0.2.0.tar.gz (24.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

coreason_auditor-0.2.0-py3-none-any.whl (35.7 kB view details)

Uploaded Python 3

File details

Details for the file coreason_auditor-0.2.0.tar.gz.

File metadata

  • Download URL: coreason_auditor-0.2.0.tar.gz
  • Upload date:
  • Size: 24.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for coreason_auditor-0.2.0.tar.gz
Algorithm Hash digest
SHA256 23f6f44b4a1964910e8e10a13d9addb73bfc62c093416e511498c08692898bbd
MD5 8bee0455522ee99d5e0363389307c639
BLAKE2b-256 9b63702b88c3aa9d0292b80b7557430af3189c6b717ab337b1c2be2b7db8797b

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.2.0.tar.gz:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file coreason_auditor-0.2.0-py3-none-any.whl.

File metadata

File hashes

Hashes for coreason_auditor-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 d6874b78768dbbd89b58a32e3b7372c7add740368af900a58599b8c1c6681446
MD5 909a4e51722f8d7e2abf36c4ed04a563
BLAKE2b-256 fa459fa36b0f0ef349295849776ea29c2c4e901847187a81102929093a5a9d46

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.2.0-py3-none-any.whl:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page