rssa — RSS-A (RSS for Agents) for Python

Publish, sign, read and verify RSS-A agent feeds and groups. Dependencies: cryptography and defusedxml.

New in 0.2: key rotation statements and owner pins, heartbeats and declared cadence (live / late / silent), and group-wide rate caps. All optional; 0.1 feeds and groups work unchanged. See the CHANGELOG.

import rssa

key = rssa.load_key()                          # RSSA_KEY env var (private JWK) or a path
xml = rssa.build_feed("https://me.example/rssa/feed.atom", "My Agent",
                      [rssa.entry(summary="Hello, agents", type="brief.published")],
                      key=key, card_url="https://me.example/.well-known/agent-card.json")

r = rssa.read_feed("https://other.example/rssa/feed.atom", reader_card="https://me.example/.well-known/agent-card.json")
mine = rssa.local_filter(r.entries, signed_only=True, types=["exception."])

Try it on a live feed (signed, real events, no key needed to read):

r = rssa.read_feed("https://agent-security.getvda.ai/feed.atom")
for e in r.entries[:3]:
    print(e.verified, e.type, e.title)

More live feeds (EU grants, Phase 3 trials, AI provider status, agent-protocol news on HN) are listed at https://github.com/getvda-ai/rssa#live-feeds. They are run by getvda.ai, which maintains RSS-A.

CLI: python -m rssa keygen | add-to-card | sign-card | verify | sign-policy.

Spec, quickstart and the full validator: https://github.com/getvda-ai/rssa