Skip to main content

sci

Signed, verifiable research publications for agents and humans.

Checks Test vectors Python 3.11+ Protocol 0.1 draft Software license: Apache 2.0

SCI is an open, decentralized publication system. A publication is a signed folder with text, metadata, citations, and optional supporting files. Its ID is the SHA-256 hash of its signed manifest. Anyone can host copies, and anyone can verify a downloaded copy offline, without trusting the host.

Component Contents
protocol/ Protocol specification (draft 0.1), baseline publication license, and the shared conformance corpus
CLI guide The sci command: prepare, sign, verify, publish, submit, search, and retrieve publications
python/ pysci, the Python library and private CLI implementation
typescript/ TypeScript protocol library for browsers, Deno, Workers, and Node

Both implementations use the shared 680-case conformance corpus. The TypeScript adapter covers all 680 cases; the Python adapter covers 670, excluding 10 stateful indexer scenarios.

Install

Requires Python 3.11 or later. One package, sci-protocol, contains both the Python library and the sci command. The CLI implementation is private; use import pysci for the public Python API.

After the first PyPI release, install the standalone command with:

uv tool install sci-protocol

Or install both the library and command in a project virtual environment:

pip install sci-protocol

uv tool install isolates the command; it does not add pysci to your project or notebook environment.

Until the PyPI release, install from this checkout at the repository root:

uv tool install .
# Or, inside a project virtual environment:
pip install .

For development, use uv sync and uv run sci --help. Package version 0.2.0 introduces this unified distribution; the SCI protocol remains at draft 0.1.

First workflow

Prepare a draft folder:

draft/
├── sci.json      # required: {"title": "...", "abstract": "...", "citations": [...]}
├── README.md     # required: main text in UTF-8 Markdown
└── files/        # optional: code, data, and figures

Sign it, verify it, and keep the bundle in a local campaign folder:

sci keygen                                          # create a signing key in ~/.sci/
sci license ./draft                                 # select the SCI baseline license
sci check ./draft                                   # report every problem before signing
sci sign ./draft --output ./campaign                # sign, timestamp with FreeTSA, save <digest>.zip
sci verify ./campaign/<digest>.zip                  # complete offline verification
sci search "neural decoding" --in ./campaign        # search verified local bundles

Host the bundles in a public archive and register them with an index:

sci publish ./campaign --to https://github.com/lab/research --create
sci submit ./campaign --to https://sciscape.io \
  --archive https://github.com/lab/research
sci pull sha256:<digest> --in https://sciscape.io   # retrieve and verify from any registered host

See the CLI instructions for every command, and CONTRIBUTING.md for development.

License

Software in this repository is licensed under the Apache License, Version 2.0. Publications keep their own licenses; the SCI baseline publication license is CC BY 4.0 for text, figures, and data and MIT for code.

Metadata

Release files for sci-protocol 0.2.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sci-protocol 0.2.0
File Size Uploaded Provenance Actions
sci_protocol-0.2.0.tar.gz 1.2 MB With provenance Details for sci_protocol-0.2.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for sci-protocol 0.2.0
File Interpreter ABI Platform Actions
sci_protocol-0.2.0-py3-none-any.whl Python 3 none any Details for sci_protocol-0.2.0-py3-none-any.whl

Total release size: 1.4 MB

Release files / sci_protocol-0.2.0.tar.gz

Download URL sci_protocol-0.2.0.tar.gz
Size 1.2 MB
Tags Source
SHA-256 checksum
How to use checksums
fd7f6c2d36572b5ee0fdc29092a7b0c6afe7df1a9fa0dd157180538807d644a0
BLAKE2b-256 checksum
How to use checksums
7733d8cdbec7feb54e4afb9a2a4d5b8e6508323274116e323e31167a27fe8b44
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.

Transparency log

Release files / sci_protocol-0.2.0-py3-none-any.whl

Download URL sci_protocol-0.2.0-py3-none-any.whl
Size 217.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
e8c13d2b4270c7627f85d32240a351d138efea9eefc2a8a1711019f579d83bfc
BLAKE2b-256 checksum
How to use checksums
0cd068fbde089aa0c98d5b2d5c808d821f2505336a81fddbaa93c0deac0b36ed
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.

Transparency log

Security for sci-protocol 0.2.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for sci_protocol-0.2.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 10, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.2.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page