sectum-ai-evidence

The tamper-evident evidence chain for Sectum AI.

This distribution turns a verification run into an auditor-acceptable evidence pack and verifies it independently:

  • canonicalize the run and hash it (SHA-256) into a run_digest, then hash the whole pack into the attested_digest that the anchors bind;
  • timestamp the attested_digest with an RFC 3161 Time-Stamp Authority;
  • record it in a Sigstore Rekor transparency log;
  • bundle the canonical run, the hashed ground-truth manifest, the TSA token, the Rekor proof, and control mappings into an in-toto attestation + a human-readable PDF audit pack;
  • sectum-ai verify <pack> recomputes the digests and validates the TSA token and Rekor inclusion proof, reporting PASS/FAIL with reasons — so a third party can verify a pack without trusting the producer.
pip install sectum-ai-evidence

Most users install the umbrella package sectum-ai instead, which pulls this in automatically.

Apache-2.0.

Project links

Data verified by PyPI on Aug 13, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.8.4)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for dmitrymaranik from gravatar.com dmitrymaranik

Credits

Author: Sectum AI

GitHub Statistics

Data verified by PyPI on Aug 13, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.12

Provides Extra

rekor rfc3161 weasyprint

Tags

ai-security attestation audit evidence verification

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sectum_ai_evidence-0.8.3.tar.gz (42.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sectum_ai_evidence-0.8.3-py3-none-any.whl (51.6 kB view details)

Uploaded Python 3

File details

Details for the file sectum_ai_evidence-0.8.3.tar.gz.

File metadata

  • Download URL: sectum_ai_evidence-0.8.3.tar.gz
  • Upload date:
  • Size: 42.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for sectum_ai_evidence-0.8.3.tar.gz
Algorithm Hash digest
SHA256 bbd42e420de91a8909f8034f1ed942a6301763a7a0c77b87621a84fdc1d40c95
MD5 15b3ed5a94c03582e9020bc74b1fff12
BLAKE2b-256 24d0327c81b9ee286ee652ef7291c9e5e33e697d849c7d878c394ae696d5940b

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.3.tar.gz:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sectum_ai_evidence-0.8.3-py3-none-any.whl.

File metadata

File hashes

Hashes for sectum_ai_evidence-0.8.3-py3-none-any.whl
Algorithm Hash digest
SHA256 a7a34b9bfe81980f18256552cfd7f6ab1737eb6e1203b3b4e7acb6e4dc14672d
MD5 e42576f29af61384ce5f3364699e2fd3
BLAKE2b-256 8812e4deae1c44ecd7aeb13a0cc27879062afe41e6865cfbff1fe5bdceb3df34

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.3-py3-none-any.whl:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page