tibet-forge
Zero-friction provenance. Built-in trust.
Turn any Python project into a certified, auditable tool with one command. Cryptographic provenance baked in, not bolted on.
Quick Start
pip install tibet-forge
tibet-forge certify ./my-project
╔════════════════════════════════════════════════════════╗
║ Humotica Trust Score: 87/100 (B+) ║
║ ✓ CERTIFIED ║
╚════════════════════════════════════════════════════════╝
Badge markdown:
[]
What You Get
Trust Scoring
Gamified quality metrics. See exactly where your code stands:
Humotica Trust Score: 87/100 (B+)
├── Code Quality: 85/100 (weight: 25%)
├── Security: 95/100 (weight: 25%)
├── Efficiency: 80/100 (weight: 20%)
├── Uniqueness: 70/100 (weight: 15%)
└── Provenance: 100/100 (weight: 15%)
Zero-Friction Provenance
TIBET audit trails injected automatically. Every function call tracked, every decision logged:
# Your code stays clean
def login(user, password):
...
# tibet-forge adds provenance invisibly
@tibet_audit(action="login", erachter="User authentication")
def login(user, password):
...
Hyper-Optimized Execution
Bloat detection powered by AST analysis. Know exactly what's slowing you down:
Efficiency Analysis:
✓ No heavy dependencies detected
• Consider: httpx instead of requests (3x faster, async-native)
• Unused import: 'os' in utils.py
Smart Deduplication
Intent hashing finds existing tools that do what you're building:
Similar Projects Found:
• rapid-rag (65% similar)
Production-ready RAG with TIBET integration
https://pypi.org/project/rapid-rag/
Commands
# Full certification with badge
tibet-forge certify .
# Quick scan
tibet-forge scan .
# Just the score
tibet-forge score .
# Preview TIBET injection
tibet-forge wrap --dry-run .
# Initialize config
tibet-forge init
Trust Score Components
| Component | Weight | Measures |
|---|---|---|
| Code Quality | 25% | README, tests, docs, types |
| Security | 25% | No vulns, no hardcoded secrets |
| Efficiency | 20% | No bloat, minimal dependencies |
| Uniqueness | 15% | Novel contribution, not reinventing |
| Provenance | 15% | TIBET integration, audit readiness |
The Badge
Projects scoring 70+ earn the Humotica Trust badge:
Configuration
Create tibet-forge.json:
{
"name": "my-project",
"scan_bloat": true,
"scan_duplicates": true,
"scan_security": true,
"auto_wrap": true,
"min_score_for_badge": 70
}
Or in pyproject.toml:
[tool.tibet-forge]
scan_bloat = true
min_score_for_badge = 70
Why "Forge"?
Raw code goes in. Trusted tool comes out.
Like a blacksmith's forge - heat, hammer, harden. Your vibe code becomes production steel.
Part of the Humotica Suite
| Package | Focus |
|---|---|
| tibet-core | Provenance foundation |
| rapid-rag | RAG in 3 lines |
| oomllama | Smart LLM routing |
| tibet-forge | Zero-friction certification |
License
MIT - Humotica
Credits
Designed by Jasper van de Meent. Built by Jasper and Root AI as part of HumoticaOS.
Stack-positie: Groep safety · Bootstrap = OSAPI-handshake naar tibet + jis (fail → snaft-rule + tibet-pol-rapport) · ← tibet-ci · tibet-ci-audit → · See STACK.md · See demo/golden-path/ for the spine end-to-end.
Enterprise
For private hub hosting, SLA support, custom integrations, or compliance guidance:
| Enterprise | enterprise@humotica.com |
| Support | support@humotica.com |
| Security | security@humotica.com |
See ENTERPRISE.md for details.
Metadata
Release files for tibet-forge 0.7.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| tibet_forge-0.7.1.tar.gz | 26.2 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| tibet_forge-0.7.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 60.6 kB
Release files / tibet_forge-0.7.1.tar.gz
| Download URL | tibet_forge-0.7.1.tar.gz |
|---|---|
| Size | 26.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e7b96367d053565f9f7373eb103162f2c711a69eccc2d735d235d3459a3bbf68
|
|
BLAKE2b-256 checksum How to use checksums |
678ca415356475843ee4b3e2c742dc319eebb5b54b161194d77a442d52512f2d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.5
|
Release files / tibet_forge-0.7.1-py3-none-any.whl
| Download URL | tibet_forge-0.7.1-py3-none-any.whl |
|---|---|
| Size | 34.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
cdb0aeafd5860cbc45e267cea4d76e0b7d72dbe6e301463260ef0bc8bb5d9834
|
|
BLAKE2b-256 checksum How to use checksums |
425aff7aacb20388d82d6994aa542758478750eddc388dd0e73c274131b49663
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.5
|
Security for tibet-forge 0.7.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.