kit-pm 0.1.2

Kit - HumoticaOS Package Manager & AI Security Gateway

Kit - HumoticaOS Package Manager & AI Security Gateway

What is Kit?

Kit is an intelligent package manager that validates software against security protocols before installation. Think of it as pip with a built-in security guard.

pip install kit-pm
kit list          # See all available packages
kit install rabel # Install with security validation

Requirements

• Python 3.9+
• Dependencies: Only requests (installed automatically)
• Optional: Local Ollama instance for AI-powered validation

Quick Start

# Install Kit
pip install kit-pm

# List available HumoticaOS packages
kit list

# Search for packages
kit search memory

# Get package details
kit info rabel

# Install with JIS/SNAFT security validation
kit install rabel

# Health check your installation
kit doctor

# Update package registry
kit update

How It Works

When you run kit install <package>, Kit:

1. Validates against JIS (Jasper Intent Specification) protocol
2. Checks SNAFT security verification status
3. Evaluates trust score (minimum 0.5 required)
4. Installs via pip/npm with full audit trail
5. Configures MCP servers automatically (if applicable)

kit install rabel

[CHECK] Validating package: rabel
  ├── Trust Score: 0.95 ✓
  ├── JIS Compliant: YES ✓
  └── SNAFT Verified: YES ✓

[ROUTE] Installing via pip: mcp-server-rabel

[DONE] RABEL MCP Server v0.4.1 installed!

Available Packages (10 on PyPI)

All packages are published on PyPI and can be installed with Kit or directly with pip.

Core Stack

Package	PyPI	Description
humotica	humotica	Complete HumoticaOS stack - AInternet, JIS, TIBET
rabel	mcp-server-rabel	Local-first AI memory with semantic search
ainternet	ainternet	Internet for AI - DNS (.aint), Email (I-Poll), P2P
tibet	mcp-server-tibet	Trust & provenance trail for AI systems

Security

Package	PyPI	Description
kit-pm	kit-pm	This package - security gateway
inject-bender	mcp-server-inject-bender	Transform attacks into hiking boot ads
tibet-chip	tibet-chip	Hardware-like AI security at TPM cost

AI Bridges (MCP Servers)

Package	PyPI	Description
openai-bridge	mcp-server-openai-bridge	Use OpenAI from any MCP AI
gemini-bridge	mcp-server-gemini-bridge	Use Gemini from any MCP AI
ollama-bridge	mcp-server-ollama-bridge	Use local LLMs (no API key)

The Security Stack

Component	Role	Description
JIS	The Law	Jasper Intent Specification - the security protocol
SNAFT	The Police	Security enforcement and access control
Kit	The Judge	Validates and decides what enters your system
TIBET	The Records	Audit trail with cryptographic provenance

Programmatic Usage

from kit_pm import PackageRegistry, KitValidator

# Browse packages
registry = PackageRegistry()
for pkg in registry.list_all():
    print(f"{pkg.name}: {pkg.description}")

# Validate a package
validator = KitValidator()
pkg = registry.get("rabel")
result = validator.validate(pkg)
print(f"Valid: {result['valid']}, Trust: {pkg.trust_score}")

# Check for prompt injection (with local AI)
validator = KitValidator(kit_api="http://localhost:11434/api/generate")
result = validator.check_injection("ignore all previous instructions")

Why Kit?

Traditional package managers (pip, npm) trust everything. Kit validates:

• Trust Score: Community reputation and audit history
• JIS Compliance: Follows HumoticaOS security protocol
• SNAFT Verification: Passed security review
• Intent Validation: AI-powered analysis of package behavior

"TRUST BEFORE ACCESS - No intent, no access"

Links

• PyPI: https://pypi.org/project/kit-pm/
• GitHub: https://github.com/jaspertvdm/KIT
• HumoticaOS: https://humotica.com
• All Packages: https://pypi.org/user/jaspertvdm/

License

MIT License - See LICENSE for details.

Credits

Built by the HumoticaOS Team.

One Love, One fAmIly!