sectum-ai-evidence

The tamper-evident evidence chain for Sectum AI.

This distribution turns a verification run into an auditor-acceptable evidence pack and verifies it independently:

  • canonicalize the run and hash it (SHA-256) into a run_digest, then hash the whole pack into the attested_digest that the anchors bind;
  • timestamp the attested_digest with an RFC 3161 Time-Stamp Authority;
  • record it in a Sigstore Rekor transparency log;
  • bundle the canonical run, the hashed ground-truth manifest, the TSA token, the Rekor proof, and control mappings into an in-toto attestation + a human-readable PDF audit pack;
  • sectum-ai verify <pack> recomputes the digests and validates the TSA token and Rekor inclusion proof, reporting PASS/FAIL with reasons — so a third party can verify a pack without trusting the producer.
pip install sectum-ai-evidence

Most users install the umbrella package sectum-ai instead, which pulls this in automatically.

Apache-2.0.

Project links

Data verified by PyPI on Aug 16, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for dmitrymaranik from gravatar.com dmitrymaranik

Credits

Author: Sectum AI

GitHub Statistics

Data verified by PyPI on Aug 16, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.12

Provides Extra

rekor rfc3161 weasyprint

Tags

ai-security attestation audit evidence verification

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sectum_ai_evidence-0.9.0.tar.gz (44.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sectum_ai_evidence-0.9.0-py3-none-any.whl (53.5 kB view details)

Uploaded Python 3

File details

Details for the file sectum_ai_evidence-0.9.0.tar.gz.

File metadata

  • Download URL: sectum_ai_evidence-0.9.0.tar.gz
  • Upload date:
  • Size: 44.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for sectum_ai_evidence-0.9.0.tar.gz
Algorithm Hash digest
SHA256 d75ab9cd84e136db8190da69f6a39ab94f2fd493cfb96a21de9b02e94822faea
MD5 3b6accd0f286b458ecc93b0bca0e7fe0
BLAKE2b-256 8db0abb00eb5c3112244c555211a0395d02222a84d79ac3cafcedf4491b1b840

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.9.0.tar.gz:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sectum_ai_evidence-0.9.0-py3-none-any.whl.

File metadata

File hashes

Hashes for sectum_ai_evidence-0.9.0-py3-none-any.whl
Algorithm Hash digest
SHA256 853e30001295ded37d7685fab835de67be6d14f0de635c78cc05aec7d954c101
MD5 929dd6f303e8ae5abc46c9c402e5ff9d
BLAKE2b-256 ff9314c2fc5c85fac01bfca1ddb9122bc004bd6e6e149a559d0348a2b928314d

See more details on using hashes here.

Provenance

The following attestation bundles were made for sectum_ai_evidence-0.9.0-py3-none-any.whl:

Publisher: release.yml on sectum-ai/sectum-ai

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page