Skip to main content

haiec-isaf-logger

Enterprise-grade compliance logging for AI systems with cryptographic verification.

PyPI version Python 3.8+ License: MIT Version

Use Cases

Automate AI compliance documentation and ensure regulatory readiness:

  • Regulatory Compliance: Automatically generate EU AI Act, NIST AI RMF, and ISO 42001 documentation
  • Audit Trail Creation: Complete cryptographic audit trails for AI model training and deployment
  • Data Provenance: Track data lineage with cryptographic hashing for regulatory requirements
  • Multi-Tenant AI: Isolated session management for SaaS AI platforms serving multiple customers
  • Risk Management: Document AI system decisions with tamper-proof evidence

Add 3 lines of code, get compliance-ready documentation with cryptographic verification.

Quick Start

import isaf

# Initialize (one line)
isaf.init()

# Add decorators to your training functions
@isaf.log_data(source="customer_data", version="3.2.1")
def load_training_data():
    return pd.read_csv("data.csv")

@isaf.log_objective(name="binary_crossentropy", constraints=["fairness < 0.05"])
def train_model(data):
    model = create_model()
    model.fit(data)
    return model

# Run training as normal
data = load_training_data()
model = train_model(data)

# Export compliance report (one line)
isaf.export("compliance_report.json")

Installation

pip install haiec-isaf-logger

Features

  • 3 Lines of Code: Minimal integration with existing ML pipelines
  • Full Stack Coverage: Logs Layer 6 (Framework), Layer 7 (Data), Layer 8 (Objectives)
  • Cryptographic Verification: SHA-256 hash chains prove lineage integrity
  • Compliance Ready: Maps to EU AI Act, NIST AI RMF, ISO 42001, Colorado AI Act
  • Framework Agnostic: Works with PyTorch, TensorFlow, JAX, scikit-learn
  • Flexible Storage: SQLite for local, MLflow for production

What Gets Logged

Layer 6: ML Framework

  • Framework versions (PyTorch, TensorFlow, etc.)
  • CUDA availability and configuration
  • Default parameters and numerical precision
  • System environment (Python version, OS, processor)

Layer 7: Training Data

  • Data source and version
  • Dataset shape, dtypes, missing values
  • Data hash for provenance tracking
  • Preprocessing operations

Layer 8: Objective Function

  • Loss function name and mathematical form
  • Constraints and regularization terms
  • Hyperparameters (learning rate, batch size, etc.)
  • Business justification

Compliance Mappings

ISAF automatically maps your logged data to regulatory requirements:

  • EU AI Act: Article 10 (Data Governance), Article 11 (Technical Documentation)
  • NIST AI RMF: MEASURE-2.2, GOVERN-1.1
  • ISO 42001: Section 8.4 (Control of externally provided AI)
  • Colorado AI Act: SB24-205 (Impact Assessment Documentation)

CLI Tools

# Inspect lineage file
isaf inspect compliance_report.json

# Verify cryptographic integrity
isaf verify compliance_report.json

# Export from database
isaf export-from-db lineage.db --output report.json

# List sessions
isaf list-sessions lineage.db

Advanced Usage

Custom Storage Backend

# SQLite (default)
isaf.init(backend='sqlite', db_path='my_lineage.db')

# MLflow
isaf.init(backend='mlflow', tracking_uri='http://localhost:5000')

# Memory only (testing)
isaf.init(backend='memory')

Automation Rules

# Create automation rule
await ks.createRule({
    'metricName': 'accuracy',
    'thresholdValue': 0.70,
    'thresholdOperator': '<',
    'layer1Action': 'throttle_50',
    'minDurationSeconds': 30
})

Compliance Export

# Export with compliance mappings
isaf.export(
    'compliance_report.json',
    include_hash_chain=True,
    compliance_mappings=['eu_ai_act', 'nist_ai_rmf', 'iso_42001']
)

Verification

# Verify lineage integrity
verified = isaf.verify_lineage('compliance_report.json')
print(f"Verification: {'PASSED' if verified else 'FAILED'}")

Examples

PyTorch Example

import torch
import isaf

isaf.init()

@isaf.log_data(source='internal', version='1.0')
def load_data():
    return torch.utils.data.TensorDataset(X, y)

@isaf.log_objective(name='cross_entropy')
def train(model, data):
    optimizer = torch.optim.Adam(model.parameters())
    for epoch in range(10):
        # training loop
        pass
    return model

data = load_data()
model = train(model, data)
isaf.export('pytorch_lineage.json')

scikit-learn Example

from sklearn.ensemble import RandomForestClassifier
import isaf

isaf.init()

@isaf.log_data(source='synthetic', version='1.0')
def load_data():
    from sklearn.datasets import make_classification
    return make_classification(n_samples=1000, n_features=20)

@isaf.log_objective(name='gini_impurity', constraints=['max_depth=10'])
def train_model(X, y):
    model = RandomForestClassifier(max_depth=10)
    model.fit(X, y)
    return model

X, y = load_data()
model = train_model(X, y)
isaf.export('sklearn_lineage.json')

Documentation

Contributing

Contributions welcome! Please read CONTRIBUTING.md first.

License

MIT License - see LICENSE file for details.

Citation

If you use ISAF Logger in your research, please cite:

@software{isaf_logger,
  title = {ISAF Logger: Instruction Stack Audit Framework},
  author = {HAIEC Lab},
  year = {2025},
  url = {https://github.com/subodhkc/isaf-logger}
}

Support


Built by Subodh Kc — a HAIEC (Human AI Evidence Company) product.

Metadata

Release files for haiec-isaf-logger 0.3.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for haiec-isaf-logger 0.3.1
File Size Uploaded Provenance Actions
haiec_isaf_logger-0.3.1.tar.gz 24.0 kB With provenance Details for haiec_isaf_logger-0.3.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for haiec-isaf-logger 0.3.1
File Interpreter ABI Platform Actions
haiec_isaf_logger-0.3.1-py3-none-any.whl Python 3 none any Details for haiec_isaf_logger-0.3.1-py3-none-any.whl

Total release size: 53.1 kB

Release files / haiec_isaf_logger-0.3.1.tar.gz

Download URL haiec_isaf_logger-0.3.1.tar.gz
Size 24.0 kB
Tags Source
SHA-256 checksum
How to use checksums
e885457c8f74ff6a00f05386265ea421623ca28775c8bc6b121e744a1f393248
BLAKE2b-256 checksum
How to use checksums
25d0ea6712d1b1c6c210c21b7572069ae934e82625d81dca7dae731b6d9612e1
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

Release files / haiec_isaf_logger-0.3.1-py3-none-any.whl

Download URL haiec_isaf_logger-0.3.1-py3-none-any.whl
Size 29.1 kB
Tags Python 3
SHA-256 checksum
How to use checksums
aec667c791633a912af43cfd8051710659327235b45bb5eb33adb24c96338816
BLAKE2b-256 checksum
How to use checksums
e962e0be4f1cf221e991dd6d6996b9b44a6669bde9b8e2f22c82659af5cc2cc7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

Security for haiec-isaf-logger 0.3.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for haiec_isaf_logger-0.3.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.3.1 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page