This release is a pre-release and may not be stable for production use.
Subpoena for Python
The Python port of Subpoena's tier-1 harness. It meets the contract in docs/ports.md, checked the same way as the Go reference.
| Part | Module | Checked by |
|---|---|---|
| Harness (H1–H6) | subpoena.harness |
conformance/harness.yaml, all cases |
| TraceQL subset (Q1–Q3) | subpoena.traceql, native, no Go needed |
the whole corpus in tests/test_traceql.py, and subpoena-conform over python -m subpoena.traceql: 139 cases, 0 mismatches |
| Witness file (W3) | subpoena.witness |
the witness.ReadLog cases (tests/test_witness.py) |
| Generated names | generated by Weaver from your registry, like the example | pkg/production/languages_test.go |
| Lint (L1), cross-examination (G1) | not yet | — |
from subpoena.harness import Harness, require_absent, require_exists
def test_denied_session_never_execs():
h = Harness()
gateway = Gateway(tracer_provider=h.tracer_provider) # inject; never install another provider
gateway.handle(denied_request)
tr = h.collect() # before any assertion
require_absent(tr, NO_EXEC_AFTER_DENY) # Inconclusive fails, too
collect() raises IncompleteError (carrying the snapshot) if a span was
dropped or never ended. Absence on an incomplete snapshot is Inconclusive, and
require_absent fails on it unless allow_inconclusive=True is passed.
pip install subpoena
Python 3.9+; depends on opentelemetry-api and opentelemetry-sdk only.
Alpha: APIs will change.
Development
From a checkout of github.com/sprigworks/subpoena:
make python # venv (uv), pytest, subpoena-conform
CI runs Python 3.9 and 3.12.
Releasing
Bump version in pyproject.toml, merge, then push a tag python/v<version>
(for example python/v0.1.0a1) to GitHub and Buzz. The publish-python
workflow reruns the port checks, builds, and uploads to PyPI through Trusted
Publishing; no token is involved.
1 maintainer
Metadata
1 maintainer
Release files for subpoena 0.1.0a1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| subpoena-0.1.0a1.tar.gz | 18.8 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| subpoena-0.1.0a1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 35.1 kB
Release files / subpoena-0.1.0a1.tar.gz
| Download URL | subpoena-0.1.0a1.tar.gz |
|---|---|
| Size | 18.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
24e564697fa3f5ff61f6f68e4af1eb16bd4df3194fb77194cf0a8d956b29036d
|
|
BLAKE2b-256 checksum How to use checksums |
e070d4d52dad64e032467fcf8b5e14a43a05df105c48c797adfb6b7d998fd7e5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.12.8
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logRelease files / subpoena-0.1.0a1-py3-none-any.whl
| Download URL | subpoena-0.1.0a1-py3-none-any.whl |
|---|---|
| Size | 16.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
4b39b66f9909bbcaa8f40cad6d6fdf3b70e0b4799a02a8cc50ab7b6dd222dd42
|
|
BLAKE2b-256 checksum How to use checksums |
26e128606a956714b5ab1173dcc519c7163ce04f7d4fa54344565d384f18e543
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.12.8
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logSecurity for subpoena 0.1.0a1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for subpoena-0.1.0a1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 26, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
