coreason-auditor
Project description
coreason-auditor
Regulatory Compliance, AI-BOM Generation, & Audit Trail Reporting for the CoReason Ecosystem.
"If it isn't documented in a PDF, it didn't happen. Turn logs into Law."
coreason-auditor is the automated reporting engine for the CoReason ecosystem. It bridges the gap between "Technical Logging" (JSON streams) and "Regulatory Submission" (Human-readable documents) by generating cryptographically signed Audit Packages.
Features
Based on the Product Requirements:
- Traceability Engine: Maps Requirements $\to$ Tests $\to$ Results (RTM). Fails generation if critical requirements are uncovered.
- AI-BOM Generator: Creates Software Bill of Materials (CycloneDX Standard) for models, data lineage, and dependencies.
- Session Replayer: Forensic tool that reconstructs user sessions, displaying hidden "Thought Chains" and "Tool Calls" alongside user input.
- 21 CFR Part 11 Signer: Applies digital signatures to exported reports for immutability and authenticity.
- Deviation Reporting: Prioritizes failures and interventions (Exception-First Reporting).
Installation
pip install coreason-auditor
Usage
from pathlib import Path
from coreason_auditor.orchestrator import AuditOrchestrator
from coreason_auditor.models import AgentConfig, AssayReport, BOMInput
# Initialize Orchestrator (Dependencies injected via DI container in production)
orchestrator = AuditOrchestrator(...)
# Load Inputs
agent_config = AgentConfig(...)
assay_report = AssayReport(...)
bom_input = BOMInput(...)
# Generate Signed Audit Package
package = orchestrator.generate_audit_package(
agent_config=agent_config,
assay_report=assay_report,
bom_input=bom_input,
user_id="compliance_officer_01",
agent_version="1.2.0"
)
# Export to PDF
orchestrator.export_to_pdf(package, "audit_report_v1.2.0.pdf")
For CLI usage:
python -m coreason_auditor.main \
--agent-config agent.yaml \
--assay-report assay_report.json \
--bom-input bom_input.json \
--output report.pdf \
--agent-version 1.0.0
License
Copyright (c) 2025 CoReason, Inc. Licensed under the Prosperity Public License 3.0. See LICENSE for details.
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file coreason_auditor-0.2.1.tar.gz.
File metadata
- Download URL: coreason_auditor-0.2.1.tar.gz
- Upload date:
- Size: 24.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
24a25989f37bbb89db0f7f73e037ff6b750399809f0bf6b80dfd95844ded8b83
|
|
| MD5 |
8c1004450db003f6480f54bb98bbbed2
|
|
| BLAKE2b-256 |
8f1e1266b9f710ba66f10fc3c4c6336f50477f309731f2de5e973735980c2441
|
Provenance
The following attestation bundles were made for coreason_auditor-0.2.1.tar.gz:
Publisher:
publish.yml on CoReason-AI/coreason-auditor
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
coreason_auditor-0.2.1.tar.gz -
Subject digest:
24a25989f37bbb89db0f7f73e037ff6b750399809f0bf6b80dfd95844ded8b83 - Sigstore transparency entry: 869203991
- Sigstore integration time:
-
Permalink:
CoReason-AI/coreason-auditor@bdb1e4881fd3f6332ad4b44d285d30c43410cf87 -
Branch / Tag:
refs/tags/v0.2.1 - Owner: https://github.com/CoReason-AI
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@bdb1e4881fd3f6332ad4b44d285d30c43410cf87 -
Trigger Event:
release
-
Statement type:
File details
Details for the file coreason_auditor-0.2.1-py3-none-any.whl.
File metadata
- Download URL: coreason_auditor-0.2.1-py3-none-any.whl
- Upload date:
- Size: 35.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
01d9ec6115e540978605f8a22c792535b96256c0edc8f564df0a4c79b833d553
|
|
| MD5 |
371a81268926fd08ac71be34662b7be1
|
|
| BLAKE2b-256 |
708f3ab17a6f062acf2e44be13ada449e896bd95827a80886140553f93c3028b
|
Provenance
The following attestation bundles were made for coreason_auditor-0.2.1-py3-none-any.whl:
Publisher:
publish.yml on CoReason-AI/coreason-auditor
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
coreason_auditor-0.2.1-py3-none-any.whl -
Subject digest:
01d9ec6115e540978605f8a22c792535b96256c0edc8f564df0a4c79b833d553 - Sigstore transparency entry: 869203994
- Sigstore integration time:
-
Permalink:
CoReason-AI/coreason-auditor@bdb1e4881fd3f6332ad4b44d285d30c43410cf87 -
Branch / Tag:
refs/tags/v0.2.1 - Owner: https://github.com/CoReason-AI
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@bdb1e4881fd3f6332ad4b44d285d30c43410cf87 -
Trigger Event:
release
-
Statement type: