epicormic
Provider drift detection and containment for pollard-governed AI systems.
Epicormic shoots sprout from dormant buds after a tree is pollarded: growth that reappears after the cut. epicormic watches for model behaviour that reappears, or changes, after a baseline has been pinned.
Status: pre-release, under construction. The 0.0.1 release on PyPI is a name claim: it installs and reports its version and nothing more. The specification is docs/PLAN.md, and the first functional release will be 0.1.0.
What it will do
- Record repeated observations of a pinned canary panel inside a pollard execution tree, so every observation is content-addressed, budgeted, sealed, and replayable.
- Reduce each observation to value-free signals through an extensible scorer protocol.
- Test whether the current window differs from the baseline beyond sampling variance, per probe and pooled, and run anytime-valid sequential change detection across windows.
- Drive pollard's fail-closed levers from the drift state: a meter that refuses dispatch, a policy that forces confirmation of side-effectful tools, and a gate on unacknowledged execution fingerprint changes.
What it will not do
It does not prevent a provider from changing a model. It observes the consequence, records evidence, and contains the effect.
Installation
python -m pip install epicormic
Development install from a checkout:
python -m pip install -e ".[dev]"
License
MIT.
Metadata
Release files for epicormic 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| epicormic-0.0.1.tar.gz | 28.4 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| epicormic-0.0.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 32.7 kB
Release files / epicormic-0.0.1.tar.gz
| Download URL | epicormic-0.0.1.tar.gz |
|---|---|
| Size | 28.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
92b01520d264818dd0607556b628bde28a223b28434cbec84a1fbc6edeebb2e5
|
|
BLAKE2b-256 checksum How to use checksums |
cf26e1e3031fcf0b22dceefb168711ddd90885af34755a1502936e522212390b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.2
|
Release files / epicormic-0.0.1-py3-none-any.whl
| Download URL | epicormic-0.0.1-py3-none-any.whl |
|---|---|
| Size | 4.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
43256a012edeca6d71fdc60b9cab037078d82e53cd8b6d2c8e1653cc43453246
|
|
BLAKE2b-256 checksum How to use checksums |
4d37c8a25f5c64e37a62c90c8a3693499c22de591218e00cf03018b0d374874c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.12.2
|
Security for epicormic 0.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.