TrustLint
Offline Python compliance linter for AI agents: EU AI Act Article 5 and Article 50 (and related corpus rules). Scans text against its bundled TrustLint rule set. No API key is required for local checks.
TrustLint catches rule-backed EU AI Act, SOX, HIPAA, GDPR, COPPA, and PCI DSS risks before text reaches production.
Install
pip install trustlint
The wheel includes its rule set, so it does not need a local rules/
directory. TrustLint reads, in order: --rules-dir, a rules/regulations folder in
the current directory or above it, then the bundled rules. Update the rules by
upgrading the package (pip install -U trustlint).
Quick Start
trustlint check --text "Deploy social credit score for citizens"
Use trustlint check prompt.txt to scan a file, or
trustlint rules list to inspect the available rules.
Hosted API vs. Offline Linter
trustlint check and trustlint rules list run locally, need no API key and record
nothing. trustlint scan with COMPLYEDGE_API_KEY sends the text to the hosted check
(ce_eu_ keys to eu.api.complyedge.io, ce_ keys to api.complyedge.io), which writes
an audit record. For the hosted
check and its audit record (for every decision a timestamp, a keyed hash of the
text and an event_id, plus the rule IDs and citations when a rule fires; never
the text itself), use the
ComplyEdge Python SDK.
Scope
TrustLint is an offline linter. Its Python engine runs the regex conditions of the bundled rule corpus and applies the sanctions rules' effective-window and carve-out state; semantic conditions in the rule files are not run. It does not replace the hosted ComplyEdge API when an application needs runtime policy enforcement and an evidence trail.
License
Apache-2.0, ComplyEdge
1 maintainer
Metadata
1 maintainer
Release files for trustlint 2.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| trustlint-2.2.0.tar.gz | 116.7 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| trustlint-2.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 298.4 kB
Release files / trustlint-2.2.0.tar.gz
| Download URL | trustlint-2.2.0.tar.gz |
|---|---|
| Size | 116.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8741870898cb76341cd1e4109204eddb34f7e7a0aed3b41b5fd73c4e250a635d
|
|
BLAKE2b-256 checksum How to use checksums |
b046ea936dbdfc11ba1c041850e991b938c63c4e303d28815f45894f1ff0dd73
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logRelease files / trustlint-2.2.0-py3-none-any.whl
| Download URL | trustlint-2.2.0-py3-none-any.whl |
|---|---|
| Size | 181.7 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
083f5f7ed2c3ce235f55201c8791bee8f7db08ac9afe982d98cdfb4e92735ef5
|
|
BLAKE2b-256 checksum How to use checksums |
da5677b9ef3c3590979c78215a53db88539f29d66a83d7298caf0955b855b889
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logSecurity for trustlint 2.2.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for trustlint-2.2.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
