sectum-ai-evidence

The tamper-evident evidence chain for Sectum AI.

This distribution turns a verification run into an auditor-acceptable evidence pack and verifies it independently:

  • canonicalize the run and hash it (SHA-256) into a run_digest, then hash the whole pack into the attested_digest that the anchors bind;
  • timestamp the attested_digest with an RFC 3161 Time-Stamp Authority;
  • record it in a Sigstore Rekor transparency log;
  • bundle the canonical run, the hashed ground-truth manifest, the TSA token, the Rekor proof, and control mappings into an in-toto attestation + a human-readable PDF audit pack;
  • sectum-ai verify <pack> recomputes the digests and validates the TSA token and Rekor inclusion proof, reporting PASS/FAIL with reasons — so a third party can verify a pack without trusting the producer.
pip install sectum-ai-evidence

Most users install the umbrella package sectum-ai instead, which pulls this in automatically.

Apache-2.0.

Project links

Data verified by PyPI on Aug 7, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.8.4)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for dmitrymaranik from gravatar.com dmitrymaranik

Credits

Author: Sectum AI

GitHub Statistics

Data verified by PyPI on Aug 7, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.12

Provides Extra

rekor rfc3161 weasyprint

Tags

ai-security attestation audit evidence verification

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sectum_ai_evidence-0.8.2.tar.gz (42.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sectum_ai_evidence-0.8.2-py3-none-any.whl (51.6 kB view details)

Uploaded Python 3

File details

Details for the file sectum_ai_evidence-0.8.2.tar.gz.

File metadata

  • Download URL: sectum_ai_evidence-0.8.2.tar.gz
  • Upload date:
  • Size: 42.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for sectum_ai_evidence-0.8.2.tar.gz
Algorithm Hash digest
SHA256 a7f5d1199c54701f70023c4e2df324dd2dec04db3a746f59740073edc73afc9e
MD5 7a110baa696301caa01c0e6ab9cc7dad
BLAKE2b-256 6d16a64a4d7481139237f6625c9252a400b57fa79825bb660f51809c5bebfc61

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.2.tar.gz:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sectum_ai_evidence-0.8.2-py3-none-any.whl.

File metadata

File hashes

Hashes for sectum_ai_evidence-0.8.2-py3-none-any.whl
Algorithm Hash digest
SHA256 3c08f00602c8551aa2d0e93c92c2cd078070a7ed7f1040ecac8dfc609cb5f83b
MD5 aa7db7584c8fe129e261d0b5b866548c
BLAKE2b-256 e0caa2060342e3b16b1ebd57abe867c182df3e3a2b5026a0b2e9c02d63fac2c7

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.2-py3-none-any.whl:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page