JEP Core
The canonical source for Judgment Event Protocol: signed statements of Judgment (J), Delegation (D), Termination (T) and Verification (V).
Core defines event structure and observable checks. It does not decide truth, authority, legal effect, causality, policy or external consequences. JEP is an individual Internet-Draft, not an IETF-endorsed standard.
Install the validator
In a fresh Python environment:
python -m pip install jep-core-conformance==0.7.6
jep-validate --help
jep-validate validate event.json --keys keys.json
event.json must be the actual event and keys.json the verifier's key map; use the local create/export/verify example to generate synthetic sample files. Demo-supplied public keys establish signature consistency, not independently trusted actor identity. No hosted API or account is required.
Do not install historical jep-v06-conformance-seed alongside this package: they share the jep_conformance import namespace. The current package already includes the explicit jep-validate-06 compatibility command. Existing old environments and signed archives are not silently migrated.
Start here
| Task | Entry |
|---|---|
| Understand Core 0.7 in one page | Current overview |
| Select exact Core / Profiles / Conformance publications | Specification sources |
| Read the published protocol | Frozen Internet-Draft -07 |
| Read the working source | Editor's Copy |
| Implement or migrate | Implementer guide · 0.7 migration |
| Create, export and independently verify locally | Agent SDK local example |
| Try a locally hosted HTTP API | HTTP Quickstart |
| Choose a client or recorder | Integration directory |
| Understand component boundaries | Architecture |
| Test your own implementation | BYOI conformance path · Report format |
| Contribute or report a vulnerability | Contributing · Private security reporting |
Current contract
Core 0.7 · wire major jep: "1" · published 2026-09-26.
- Event Identity
(who,id)identifies an event; Event Hash identifies an exact signed artifact. - Acceptance is idempotent per Event Identity within an acceptance domain.
- Validation reports independent checks and
valid,invalidorindeterminate. - Freshness mechanisms belong to profiles; Core does not require a nonce.
- Chain reconstruction, delegation enforcement and termination cascade belong to companion/application layers.
The published -07 snapshot is immutable. Its exact RFCXML and SHA-256 are recorded in the freeze record. Later changes belong to the Editor's Copy and a subsequent draft. Datatracker is the external publication record.
Develop and test from source
Clone this repository before using the source-only commands below:
git clone https://github.com/hjs-spec/jep-core.git
cd jep-core
python -m pip install -e '.[test]'
make validate conformance repository-check
python -m pytest
The default Python validator, schemas and manifest target Core 0.7. Validator usage explains keys and acceptance storage.
Current and historical assets
| Current | Historical compatibility |
|---|---|
Core -07; Profiles -01; Conformance -02 |
Core -06; profiles/conformance -00 |
test-manifest-0.7.json, Python jep_validate_07.py |
test-manifest-0.6.json, Python jep_validate.py |
| Versioned 0.7 schemas and vectors | Go and TypeScript validators currently support 0.6 only |
Schemas and tools are implementation aids; the applicable specification controls normative requirements. Use make conformance-legacy only for known 0.6 artifacts. Never select a legacy decoder because current validation failed, or rewrite a historical signed artifact.
Documentation index · Versioning · Logging comparison · Current delivery status
The repository was previously named jep-v06. Repository identity is now stable; protocol drafts and software packages have separate versions. Maintainer-operated production API hosting is deferred; self-hosting remains optional.
External implementation testing
Software 0.7.6 includes the BYOI runner. It exports a self-contained signed suite and runs a producer, verifier or acceptance adapter without companion repositories. Reports disclose actual coverage and do not claim certification. See the installation and adapter contract.
Licensing
Original implementation code and implementation aids use BSD-3-Clause. Internet-Draft text, extracted Code Components and third-party material retain their applicable terms. Read the licensing scope before reuse.
Metadata
Release files for jep-core-conformance 0.7.6
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| jep_core_conformance-0.7.6.tar.gz | 48.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| jep_core_conformance-0.7.6-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 102.7 kB
Release files / jep_core_conformance-0.7.6.tar.gz
| Download URL | jep_core_conformance-0.7.6.tar.gz |
|---|---|
| Size | 48.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ab6249738fdfd4dcdf2b13f908fe27996effe1bf240f41cf12afc8437e67a9b0
|
|
BLAKE2b-256 checksum How to use checksums |
85cabc4df3e77569cccb398cbe292b4e7bca98e07e3a011f76321957605b2a0e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.
Transparency logRelease files / jep_core_conformance-0.7.6-py3-none-any.whl
| Download URL | jep_core_conformance-0.7.6-py3-none-any.whl |
|---|---|
| Size | 54.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f90c0ee2bcd5495d9209a8bf33a1a90ae937fdab07a05ed3be48dc2b10f4bb8b
|
|
BLAKE2b-256 checksum How to use checksums |
1c9c015befada1d20e748ff86400c0249f379d9e9a0fa03e5345a748bf2ff815
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.
Transparency log