sectum-ai-evidence

The tamper-evident evidence chain for Sectum AI.

This distribution turns a verification run into an auditor-acceptable evidence pack and verifies it independently:

  • canonicalize the run and hash it (SHA-256) into a run_digest, then hash the whole pack into the attested_digest that the anchors bind;
  • timestamp the attested_digest with an RFC 3161 Time-Stamp Authority;
  • record it in a Sigstore Rekor transparency log;
  • bundle the canonical run, the hashed ground-truth manifest, the TSA token, the Rekor proof, and control mappings into an in-toto attestation + a human-readable PDF audit pack;
  • sectum-ai verify <pack> recomputes the digests and validates the TSA token and Rekor inclusion proof, reporting PASS/FAIL with reasons — so a third party can verify a pack without trusting the producer.
pip install sectum-ai-evidence

Most users install the umbrella package sectum-ai instead, which pulls this in automatically.

Apache-2.0.

Project links

Data verified by PyPI on Aug 14, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for dmitrymaranik from gravatar.com dmitrymaranik

Credits

Author: Sectum AI

GitHub Statistics

Data verified by PyPI on Aug 14, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.12

Provides Extra

rekor rfc3161 weasyprint

Tags

ai-security attestation audit evidence verification

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sectum_ai_evidence-0.8.4.tar.gz (42.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sectum_ai_evidence-0.8.4-py3-none-any.whl (51.6 kB view details)

Uploaded Python 3

File details

Details for the file sectum_ai_evidence-0.8.4.tar.gz.

File metadata

  • Download URL: sectum_ai_evidence-0.8.4.tar.gz
  • Upload date:
  • Size: 42.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for sectum_ai_evidence-0.8.4.tar.gz
Algorithm Hash digest
SHA256 c54c6acecde0169ae9c9166b9a027ea10aaf67df4c6d8915fc415af49f6cde77
MD5 28a270f5d8284f2318c7570a24e7a1ba
BLAKE2b-256 e52ee7c2db24463d2b78471de3d94a9a78c5920ca4f6189763a3b9a2ea483a80

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.4.tar.gz:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sectum_ai_evidence-0.8.4-py3-none-any.whl.

File metadata

File hashes

Hashes for sectum_ai_evidence-0.8.4-py3-none-any.whl
Algorithm Hash digest
SHA256 a1416cdb7419f6e56894a8e67a027ff418d00260931f4d88e774109f1f879f20
MD5 65bf6ab4fa4693045cf543f813479a39
BLAKE2b-256 ba77e8746222b42bf0c55bd4b502b299db5c99c685600cfd184922f690b25d61

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.8.4-py3-none-any.whl:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page