Cryptographic evidence infrastructure for AI decisions
Reason this release was yanked:
Superseded by REBUILD-1 veratum 0.1.0 (pip install veratum)
Project description
Veratum Python SDK
Cryptographic evidence for every AI decision.
Veratum creates tamper-proof, cryptographically sealed receipts for every AI decision your application makes — automatically. Receipts are Bitcoin-anchored, RFC 3161 timestamped, and independently verifiable by any regulator without requiring a Veratum account.
Install
pip install veratum
Quickstart
import veratum
import openai
sdk = veratum.init(api_key="vsk_live_••••••••••••••••")
client = sdk.wrap(openai.OpenAI())
# Every call now creates a tamper-proof receipt automatically.
# EU AI Act Article 12, Colorado SB 24-205, NYC LL144, GDPR — satisfied.
response = client.chat.completions.create(
model="gpt-4o",
messages=[{"role": "user", "content": "Your prompt here"}]
)
That's it. No other changes to your code.
Privacy-first mode
# Raw prompts never leave your infrastructure
sdk = veratum.init(api_key="vsk_live_••••••••••••••••", hash_only=True)
MCP Gateway (zero code changes)
docker run \
-e VERATUM_API_KEY=vsk_live_•••• \
-p 8080:8080 \
veratum/gateway
Point your MCP client at localhost:8080. Every agent tool call is now evidence.
What each receipt contains
- Dual hash: SHA-256 + SHA-3-256 of decision content
- Dual signature: Ed25519 + ML-DSA-65 (quantum-resistant)
- RFC 3161 timestamp: DigiCert qualified timestamp (eIDAS compliant)
- Bitcoin anchor: OpenTimestamps proof, independently verifiable forever
- Compliance validation: 17 regulatory frameworks checked automatically
Verify receipts offline
pip install veratum[verify]
veratum-verify receipt.json
No internet required. No Veratum account required.
Documentation
Full documentation at docs.veratum.ai
Compliance coverage
EU AI Act · GDPR · EEOC · CFPB/ECOA · Colorado SB 24-205 · NYC Local Law 144 Illinois AIVA · FINRA 17a-4 · NAIC Model Bulletin · UK DRCF · Canada AIDA Singapore FEAT · Japan Cabinet AI Guidelines · ISO 42001:2023 · and more
Issues & support
- Bug reports and feature requests: GitHub Issues
- Enterprise & compliance questions: ali.ashkir@veratum.ai
- Dashboard: app.veratum.ai
License
MIT License. See LICENSE for details.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file veratum-2.3.1.tar.gz.
File metadata
- Download URL: veratum-2.3.1.tar.gz
- Upload date:
- Size: 163.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
399bc0d2f9f725ca3a36704aacecc5386c81c9adac49cb299f957bf3454c2bd5
|
|
| MD5 |
139f7fd5124fadf7062494f63998b935
|
|
| BLAKE2b-256 |
61a30320c7f9daaff1c63e5411fb9ca62de31116170317e204c755e2c8f8b06f
|
Provenance
The following attestation bundles were made for veratum-2.3.1.tar.gz:
Publisher:
publish.yml on veratum-ai/sdk-python
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
veratum-2.3.1.tar.gz -
Subject digest:
399bc0d2f9f725ca3a36704aacecc5386c81c9adac49cb299f957bf3454c2bd5 - Sigstore transparency entry: 1275256199
- Sigstore integration time:
-
Permalink:
veratum-ai/sdk-python@ec8b2e229523c3851a6de094d129e17dd003a183 -
Branch / Tag:
refs/tags/v2.3.1 - Owner: https://github.com/veratum-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@ec8b2e229523c3851a6de094d129e17dd003a183 -
Trigger Event:
push
-
Statement type:
File details
Details for the file veratum-2.3.1-py3-none-any.whl.
File metadata
- Download URL: veratum-2.3.1-py3-none-any.whl
- Upload date:
- Size: 181.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
369506fb3f739d615fd699c6b465bd1b23d9bb718ec689f8512a5ebd4d97b649
|
|
| MD5 |
29ebaa5c32c0632ad039cec5b939b957
|
|
| BLAKE2b-256 |
33550c18514efe624348e2b723e2517c9af4491b21251a49e718026220e43cb4
|
Provenance
The following attestation bundles were made for veratum-2.3.1-py3-none-any.whl:
Publisher:
publish.yml on veratum-ai/sdk-python
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
veratum-2.3.1-py3-none-any.whl -
Subject digest:
369506fb3f739d615fd699c6b465bd1b23d9bb718ec689f8512a5ebd4d97b649 - Sigstore transparency entry: 1275256344
- Sigstore integration time:
-
Permalink:
veratum-ai/sdk-python@ec8b2e229523c3851a6de094d129e17dd003a183 -
Branch / Tag:
refs/tags/v2.3.1 - Owner: https://github.com/veratum-ai
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@ec8b2e229523c3851a6de094d129e17dd003a183 -
Trigger Event:
push
-
Statement type: