genesis-gates — the Genesis gate engine

The deterministic engine behind genesis-cli: delivery gates, system-completeness analysis, readiness scoring, risk classification, and the versioned JSON Schema contracts that make Genesis artifacts portable between tools.

No API keys, no server, no network calls of its own — gates shell out to scanners you already have and skip cleanly when one isn't installed.

pip install genesis-gates

Most people want the CLI instead: pip install genesis-cli.

What's in it

Gate engine (genesis_gates.engine) — a Gate/Provider registry, a GateRunner that turns a Delivery Manifest plus a repo into a linked EvidencePackage, and the Finding/Severity/GateStatus vocabulary every gate reports in.

Gates (genesis_gates.gates) — secret-scan, dependency-scan, unit-tests (run in an isolated venv built from the app's own requirements), SAST, SBOM.

Analysis (genesis_gates.analysis) — the layer that catches what scanners can't:

  • System completeness profiles — detects the systems a repo implements (auth, payments, file upload) and checks their mandatory flows against the implementation surface (routes, files), not prose. This is what catches an app that ships signup with no sign-in, Stripe checkout with no webhook signature verification, or uploads with no size limit.
  • Env reconciliation — the compose ${VAR} contract and direct env reads, diffed for unset and undocumented variables.
  • Readiness scoring — a 0–100 score with a grade, plus SARIF 2.1.0 output.
  • Risk classification — deterministic: auth, payments, migrations, secrets, and infra changes are always high-risk. This is the substrate for bounded-autonomy policies ("low-risk changes flow, risky changes wait").

Contracts (genesis_gates/contracts/*.schema.json) — delivery manifests, evidence packages, tasks, gate config, and readiness reports as JSON Schema (Draft 2020-12), so any tool can produce or consume Genesis artifacts. The schemas ship inside the wheel; genesis_gates.contracts.contracts_dir() resolves them, and GENESIS_CONTRACTS_DIR overrides the location.

Using it directly

from genesis_gates import GateRunner, load_gate_config

runner = GateRunner(config=load_gate_config("."))
package = runner.run(repo=".")
for result in package.results:
    print(result.gate, result.status, len(result.findings))

Importing genesis_gates.gates and genesis_gates.providers populates the registries via decorator side-effects — which is also how you extend Genesis: @register_gate / @register_provider in your own module.

License

Apache-2.0. Part of the Genesis Framework.

Project links

Data verified by PyPI on Aug 9, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for Yazdan.ahmed from gravatar.com Yazdan.ahmed

Credits

Author: Inceptium

GitHub Statistics

Data verified by PyPI on Aug 9, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.12

Tags

ci code-quality devsecops governance sarif static-analysis supply-chain

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

genesis_gates-0.1.0.tar.gz (75.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

genesis_gates-0.1.0-py3-none-any.whl (88.2 kB view details)

Uploaded Python 3

File details

Details for the file genesis_gates-0.1.0.tar.gz.

File metadata

  • Download URL: genesis_gates-0.1.0.tar.gz
  • Upload date:
  • Size: 75.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for genesis_gates-0.1.0.tar.gz
Algorithm Hash digest
SHA256 91b4b3f96576c853faf070f79386259243f4366ecbb9a8bcbaf7485b25e1e96f
MD5 f8cfd650faa941b5afdaf137c665dd5c
BLAKE2b-256 07148dc753ec214f7f15aea8c8dff9ff6538dbb99b5e287d7ddd1e3c5eb0d90c

See more details on using hashes here.

Provenance

The following attestation bundles were made for genesis_gates-0.1.0.tar.gz:

Publisher: release.yml on Inceptium-ai/genesis-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file genesis_gates-0.1.0-py3-none-any.whl.

File metadata

  • Download URL: genesis_gates-0.1.0-py3-none-any.whl
  • Upload date:
  • Size: 88.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for genesis_gates-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 519778aced074975f448dfcc306f0832a3f22b9c4150e634763138b8691af7e4
MD5 3655e0263d7cdfd9810b7437e8967cf2
BLAKE2b-256 fcac1d80d40abf79b6348d06001a458f1b785410cd4e75e5bcc05a290f17d816

See more details on using hashes here.

Provenance

The following attestation bundles were made for genesis_gates-0.1.0-py3-none-any.whl:

Publisher: release.yml on Inceptium-ai/genesis-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page