Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

Sandloom

Python backend framework for AI-driven development.

Build with people and AI agents while the framework enforces module boundaries, owns transactions and provides shared mechanisms for authorization, tenancy, event delivery and idempotency.

Why Sandloom

  • AI-driven development: a consistent module structure, typed contracts, CLI scaffolding, agent instructions and executable quality gates keep changes scoped as the application grows.
  • Enforced module boundaries: business modules communicate through typed events and contracts. Architecture checks reject cross-module imports.
  • Pluggable infrastructure: application modules use capability contracts instead of raw backend clients. Configure compatible registered drivers or implement adapters without spreading infrastructure SDKs through business code. PostgreSQL and Redis are the documented production backends.
  • Monolith to services: deploy the same business modules together or in separate services using module selection and service bindings. Moving existing data to a module's own database is a separate offline extraction step.
  • Built-in mechanisms: transaction ownership, one writer per request, authorization rechecks before commit, tenant isolation, a transactional outbox, durable consumers and idempotent commands.

Install and create an application

Requires Python 3.11+, uv and Docker for local PostgreSQL and Redis services. Sandloom is an alpha; --pre allows pip to select its prerelease packages.

python -m pip install --pre "sandloom[standard]"
sandloom new myapp --with identity,tenancy,billing --module notes

Follow the printed next steps to install application dependencies, start local services, run checks and migrations, and launch the API.

The standard extra includes Redis, Celery and the separate sandloom-identity, sandloom-tenancy and sandloom-billing packages. Install sandloom alone for the kernel, public sandloom.sdk, shared contracts, CLI and composition root. Other extras: redis, celery, fast, check, testing and sentry.

Inspect before editing

From the application root, after installing its dependencies:

uv run sandloom generate
uv run sandloom graph
uv run sandloom context notes
uv run sandloom explore

graph shows module purposes and declared connections; context gives a compact map of one module's contracts, events and owned files. Both default to text; request JSON explicitly with --format json. explore opens an offline browser view with declared processes, interface impact and architecture comparisons. See module maps and the architecture explorer.

Alpha status

Sandloom is under active development. Review the compatibility policy and release notes before upgrading; a minor version in the 0.x series may introduce breaking changes. The framework's documented guarantees have specific scopes; consult the guarantee reference for their mechanisms and limits.

License

Apache-2.0. Copyright 2026 Vasyl Cherniavskyi. See LICENSE and NOTICE.

Metadata

Release files for sandloom 0.7.0a5

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sandloom 0.7.0a5
File Size Uploaded Provenance Actions
sandloom-0.7.0a5.tar.gz 1.3 MB With provenance Details for sandloom-0.7.0a5.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for sandloom 0.7.0a5
File Interpreter ABI Platform Actions
sandloom-0.7.0a5-py3-none-any.whl Python 3 none any Details for sandloom-0.7.0a5-py3-none-any.whl

Total release size: 3.0 MB

Release files / sandloom-0.7.0a5.tar.gz

Download URL sandloom-0.7.0a5.tar.gz
Size 1.3 MB
Tags Source
SHA-256 checksum
How to use checksums
9a4986a692e14c75d3c37a37cf7795f8cb3979dc96607afdc5295ea1b05af296
BLAKE2b-256 checksum
How to use checksums
f3f5a72cb9309accd119c5e35a90ac29a494dbcd2023601edc3cd8b3a3620d98
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 31, 2026.

Transparency log

Release files / sandloom-0.7.0a5-py3-none-any.whl

Download URL sandloom-0.7.0a5-py3-none-any.whl
Size 1.6 MB
Tags Python 3
SHA-256 checksum
How to use checksums
9a7a7b6f74b48d4bfee13b4dfce7c5e72734c5d4134010772de9b4de98f6d289
BLAKE2b-256 checksum
How to use checksums
1252b348776152f453d1f263a20f521693b96bab8c054b363001d68cc9112fb3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 31, 2026.

Transparency log

Security for sandloom 0.7.0a5

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for sandloom-0.7.0a5.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 31, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page