Skip to main content

coreason-auditor

Project description

coreason-auditor

Regulatory Compliance, AI-BOM Generation, & Audit Trail Reporting for the CoReason Ecosystem.

License CI Code Style: Ruff Documentation


"If it isn't documented in a PDF, it didn't happen. Turn logs into Law."

coreason-auditor is the automated reporting engine for the CoReason ecosystem. It bridges the gap between "Technical Logging" (JSON streams) and "Regulatory Submission" (Human-readable documents) by generating cryptographically signed Audit Packages.

Features

Based on the Product Requirements:

  • Traceability Engine: Maps Requirements $\to$ Tests $\to$ Results (RTM). Fails generation if critical requirements are uncovered.
  • AI-BOM Generator: Creates Software Bill of Materials (CycloneDX Standard) for models, data lineage, and dependencies.
  • Session Replayer: Forensic tool that reconstructs user sessions, displaying hidden "Thought Chains" and "Tool Calls" alongside user input.
  • 21 CFR Part 11 Signer: Applies digital signatures to exported reports for immutability and authenticity.
  • Deviation Reporting: Prioritizes failures and interventions (Exception-First Reporting).

Installation

pip install coreason-auditor

Usage

from pathlib import Path
from coreason_auditor.orchestrator import AuditOrchestrator
from coreason_auditor.models import AgentConfig, AssayReport, BOMInput

# Initialize Orchestrator (Dependencies injected via DI container in production)
orchestrator = AuditOrchestrator(...)

# Load Inputs
agent_config = AgentConfig(...)
assay_report = AssayReport(...)
bom_input = BOMInput(...)

# Generate Signed Audit Package
package = orchestrator.generate_audit_package(
    agent_config=agent_config,
    assay_report=assay_report,
    bom_input=bom_input,
    user_id="compliance_officer_01",
    agent_version="1.2.0"
)

# Export to PDF
orchestrator.export_to_pdf(package, "audit_report_v1.2.0.pdf")

For CLI usage:

python -m coreason_auditor.main \
  --agent-config agent.yaml \
  --assay-report assay_report.json \
  --bom-input bom_input.json \
  --output report.pdf \
  --agent-version 1.0.0

License

Copyright (c) 2025 CoReason, Inc. Licensed under the Prosperity Public License 3.0. See LICENSE for details.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

coreason_auditor-0.2.1.tar.gz (24.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

coreason_auditor-0.2.1-py3-none-any.whl (35.7 kB view details)

Uploaded Python 3

File details

Details for the file coreason_auditor-0.2.1.tar.gz.

File metadata

  • Download URL: coreason_auditor-0.2.1.tar.gz
  • Upload date:
  • Size: 24.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for coreason_auditor-0.2.1.tar.gz
Algorithm Hash digest
SHA256 24a25989f37bbb89db0f7f73e037ff6b750399809f0bf6b80dfd95844ded8b83
MD5 8c1004450db003f6480f54bb98bbbed2
BLAKE2b-256 8f1e1266b9f710ba66f10fc3c4c6336f50477f309731f2de5e973735980c2441

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.2.1.tar.gz:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file coreason_auditor-0.2.1-py3-none-any.whl.

File metadata

File hashes

Hashes for coreason_auditor-0.2.1-py3-none-any.whl
Algorithm Hash digest
SHA256 01d9ec6115e540978605f8a22c792535b96256c0edc8f564df0a4c79b833d553
MD5 371a81268926fd08ac71be34662b7be1
BLAKE2b-256 708f3ab17a6f062acf2e44be13ada449e896bd95827a80886140553f93c3028b

See more details on using hashes here.

Provenance

The following attestation bundles were made for coreason_auditor-0.2.1-py3-none-any.whl:

Publisher: publish.yml on CoReason-AI/coreason-auditor

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page