vaultgenome

The Python side of Vault Genome, open-source software that keeps fine-tuned AI models in service on attested confidential-computing hardware. The authority, the destination daemons and acpctl are Go programs, released signed for every platform on the repository's releases page; this distribution carries the two Python parts, each from where it lives in the repository.

pip install vaultgenome
vaultgenome-audit --audit xcc-audit.db --audit-pubkey audit.pem --audit-kid sagvd-audit-demo

Exit 0 when every event links and verifies, with the count and the tip; 1 otherwise, naming the first event that does not. On a machine without a GPU, take torch from the CPU index first, then the extra:

pip install --index-url https://download.pytorch.org/whl/cpu torch==2.14.1
pip install "vaultgenome[genome]"
vg-genome finetune --base BASE_DIR --base-name Qwen/Qwen2.5-0.5B-Instruct \
    --data drill-facts.jsonl --prompts drill-prompts.json --out genome/
vg-genome replay --genome genome/ --base BASE_DIR     # the recipe gives the same adapter, byte for byte

Byte-for-byte replay holds on the pinned runtime; vg-genome measure on another runtime says how far a measurement is from the references.

What a version here is

Each version is built from the signed tag of the repository, twice, and the two builds compared. The wheel and the sdist are release assets beside the binaries — each with a keyless Sigstore signature, an SBOM and a SLSA provenance, and in the release's signed checksums-<tag>.txt — and they are published to PyPI by the release workflow under its own identity, with no stored token. To check a file from PyPI against the release: sha256sum vaultgenome-<version>-py3-none-any.whl equals its line in checksums-v<version>.txt, and cosign verify-blob takes the wheel's .sigstore.json from the same page.

Python 3.12 is what the tests run on. The code is AGPL-3.0-or-later; a commercial licence is available from The Capital Index LLC (COMMERCIAL-LICENSE.md).

Repository · VERIFIABLE-CLAIMS · CHANGELOG · security policy