fedora-fl-security

fedora-fl-security is a thin public facade for FedoRA's security planning, diagnostics, and evidence APIs. It re-exports the implementation shipped in fedora-fl and depends on the exact same version of that distribution.

The fedora_security namespace exposes threat models, defense recommendations, aggregation/privacy helpers, FedoRA/UFCG planning, capability diagnostics, proof workflows, receipts, and versioned evidence schemas. Its planning outputs can support review of a FedoRA, Flower, FLARE, or custom deployment; each runtime still needs its own validated mechanisms and operational controls.

Install

pip install "fedora-fl-security==2.1.0b2"

This command applies after publication. For the unpublished candidate, install the matching base and facade wheels supplied with the review packet.

For source development, run these commands from this directory to install the implementation and then the facade:

pip install -e ..
pip install -e .

All three FedoRA distributions release in lockstep. The security facade does not turn the overall beta library or an experimental backend into a certified production deployment.

Use

from fedora_security import ThreatModel, run_proof_workflow

threat = ThreatModel(
    byzantine_fraction=0.2, model_poisoning=True, privacy_level="strong",
)
recommendation = threat.recommend_defenses()
bundle = run_proof_workflow(
    scenario_name="byzantine-privacy", outdir="fedora_proof",
    num_clients=20, num_rounds=3,
)

The proof compares aggregation defenses on one synthetic cohort and produces inspectable evidence. DP and secure aggregation in its plan are recommendations; this proof does not execute those mechanisms or certify a multi-round privacy budget. The DP APIs separately require a trusted coordinator and the documented fixed-roster adjacency. External audits, workload validation, and concrete runtime review remain prerequisites for stronger deployment claims.