Skip to main content

tibet-forge

Zero-friction provenance. Built-in trust.

Turn any Python project into a certified, auditable tool with one command. Cryptographic provenance baked in, not bolted on.

Quick Start

pip install tibet-forge

tibet-forge certify ./my-project
╔════════════════════════════════════════════════════════╗
║         Humotica Trust Score: 87/100 (B+)              ║
║         ✓ CERTIFIED                                     ║
╚════════════════════════════════════════════════════════╝

Badge markdown:
[![Humotica Trust Score](https://img.shields.io/badge/...)]

What You Get

Trust Scoring

Gamified quality metrics. See exactly where your code stands:

Humotica Trust Score: 87/100 (B+)
├── Code Quality: 85/100 (weight: 25%)
├── Security: 95/100 (weight: 25%)
├── Efficiency: 80/100 (weight: 20%)
├── Uniqueness: 70/100 (weight: 15%)
└── Provenance: 100/100 (weight: 15%)

Zero-Friction Provenance

TIBET audit trails injected automatically. Every function call tracked, every decision logged:

# Your code stays clean
def login(user, password):
    ...

# tibet-forge adds provenance invisibly
@tibet_audit(action="login", erachter="User authentication")
def login(user, password):
    ...

Hyper-Optimized Execution

Bloat detection powered by AST analysis. Know exactly what's slowing you down:

Efficiency Analysis:
  ✓ No heavy dependencies detected
  • Consider: httpx instead of requests (3x faster, async-native)
  • Unused import: 'os' in utils.py

Smart Deduplication

Intent hashing finds existing tools that do what you're building:

Similar Projects Found:
  • rapid-rag (65% similar)
    Production-ready RAG with TIBET integration
    https://pypi.org/project/rapid-rag/

Commands

# Full certification with badge
tibet-forge certify .

# Quick scan
tibet-forge scan .

# Just the score
tibet-forge score .

# Preview TIBET injection
tibet-forge wrap --dry-run .

# Initialize config
tibet-forge init

Trust Score Components

Component Weight Measures
Code Quality 25% README, tests, docs, types
Security 25% No vulns, no hardcoded secrets
Efficiency 20% No bloat, minimal dependencies
Uniqueness 15% Novel contribution, not reinventing
Provenance 15% TIBET integration, audit readiness

The Badge

Projects scoring 70+ earn the Humotica Trust badge:

Humotica Trust Score

Configuration

Create tibet-forge.json:

{
  "name": "my-project",
  "scan_bloat": true,
  "scan_duplicates": true,
  "scan_security": true,
  "auto_wrap": true,
  "min_score_for_badge": 70
}

Or in pyproject.toml:

[tool.tibet-forge]
scan_bloat = true
min_score_for_badge = 70

Why "Forge"?

Raw code goes in. Trusted tool comes out.

Like a blacksmith's forge - heat, hammer, harden. Your vibe code becomes production steel.

Part of the Humotica Suite

Package Focus
tibet-core Provenance foundation
rapid-rag RAG in 3 lines
oomllama Smart LLM routing
tibet-forge Zero-friction certification

License

MIT - Humotica

Credits

Designed by Jasper van de Meent. Built by Jasper and Root AI as part of HumoticaOS.


Stack-positie: Groep safety · Bootstrap = OSAPI-handshake naar tibet + jis (fail → snaft-rule + tibet-pol-rapport) · ← tibet-ci · tibet-ci-audit → · See STACK.md · See demo/golden-path/ for the spine end-to-end.

Enterprise

For private hub hosting, SLA support, custom integrations, or compliance guidance:

Enterprise enterprise@humotica.com
Support support@humotica.com
Security security@humotica.com

See ENTERPRISE.md for details.

Metadata

Release files for tibet-forge 0.7.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for tibet-forge 0.7.1
File Size Uploaded Provenance
tibet_forge-0.7.1.tar.gz 26.2 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for tibet-forge 0.7.1
File Interpreter ABI Platform
tibet_forge-0.7.1-py3-none-any.whl Python 3 none any Details

Total release size: 60.6 kB

Release files / tibet_forge-0.7.1.tar.gz

Download URL tibet_forge-0.7.1.tar.gz
Size 26.2 kB
Tags Source
SHA-256 checksum
How to use checksums
e7b96367d053565f9f7373eb103162f2c711a69eccc2d735d235d3459a3bbf68
BLAKE2b-256 checksum
How to use checksums
678ca415356475843ee4b3e2c742dc319eebb5b54b161194d77a442d52512f2d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.5

Release files / tibet_forge-0.7.1-py3-none-any.whl

Download URL tibet_forge-0.7.1-py3-none-any.whl
Size 34.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
cdb0aeafd5860cbc45e267cea4d76e0b7d72dbe6e301463260ef0bc8bb5d9834
BLAKE2b-256 checksum
How to use checksums
425aff7aacb20388d82d6994aa542758478750eddc388dd0e73c274131b49663
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.5

Security for tibet-forge 0.7.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page