hardbound 0.0.1

Public Protocol surface for the hardware-bound enterprise trust tier of Web4. Protocols an implementation must satisfy to anchor identity, vault, witness chain, and policy in TPM 2.0 / YubiKey / Secure Enclave hardware.

hardbound (Python)

Public Protocol surface for the hardware-bound enterprise trust tier of Web4. This package is the contract; implementations live elsewhere.

from hardbound import (
    TrustedKeyProvider,
    SealedVault,
    AttestationSigner,
    OversightPolicy,
    Attestation,
    PolicyAction,
    PolicyDecision,
    PolicyAllow,
    PolicyDeny,
    PolicyWarn,
    HardboundError,
)

What this package is

Four Protocols (typing.Protocol, runtime_checkable) + supporting dataclasses:

Protocol	Replaces in consumer Hestia
TrustedKeyProvider	software-derived sovereign LCT
SealedVault	passphrase-derived AEAD key
AttestationSigner	Phase-1 placeholder signer LCT
OversightPolicy	default-allow stub

What this package is NOT

• A working implementation. The reference (closed-source) impl lives at metalinxx.io. Contact [e-mail] for early access.

See also

• hestia-plugin-sdk — the Python SDK for plugging an agent into the OSS Hestia daemon
• hestia Rust crate — the daemon itself
• https://github.com/dp-web4/hestia/blob/main/demo/enterprise/README.md — architectural pitch + integration plan

License

AGPL-3.0-or-later. Contact [e-mail] if you need a permissive license for a compatible implementation.