Most libraries help you call a model. Vincio governs the boundary between your application and the model — what evidence is selected, how it is scored and budgeted, how the output is validated, and what it cost. It compiles everything that goes into a model (prompts, memory, retrieved evidence, tools, schemas, policies) into an optimized, provenance-aware context packet, then checks, measures, and traces everything that comes out. Named for Leonardo da Vinci — engineering and craft in equal measure.
Try it in 30 seconds, no install — open the quickstart notebook in Colab. One
pip install, runs offline on the bundled mock provider, no API key required.
Contents · Install · Quickstart · One-line front door · Providers · Features · Live performance · How it compares · Examples · CLI · Architecture · Docs
Install
pip install vincio # core — dependency-light: pydantic, httpx, pyyaml, typing-extensions
pip install "vincio[openai]" # + a provider (also: anthropic, google, mistral)
pip install "vincio[chroma]" # + a vector store (also: pinecone, lancedb, postgres, …)
pip install "vincio[server]" # + the FastAPI server (vincio serve)
pip install "vincio[all]" # every optional integration
Python 3.11+. Every heavy integration (vector stores, OCR, server, OpenTelemetry, charts, …) is an opt-in extra; the core stays small and runs offline.
Quickstart
from vincio import ContextApp
app = ContextApp(name="docs_qa", provider="openai", model="gpt-4o-mini")
app.add_source("docs", path="./docs", retrieval="hybrid") # index a folder
app.set_policy("answer_only_from_sources", True) # ground answers in evidence
result = app.run("How do I configure SSO?")
result.output # the grounded answer
result.citations # the evidence it actually cited
result.trace_id # every run produces a full trace
result.cost_usd # …and a cost
Run the whole pipeline offline — no key, no network. Pass the bundled deterministic mock; it auto-generates schema-valid output, so retrieval, validation, evals, traces, and cost all run in dev and CI for real:
from vincio.providers import MockProvider
app = ContextApp(name="docs_qa", provider=MockProvider(), model="mock-1")
Set VINCIO_PROVIDER + the matching key in the environment (or pass provider=/model=) to point the
same code at OpenAI, Anthropic, Google, Mistral, a local model, or any OpenAI-compatible gateway.
The one-line front door
For the five jobs you reach for most, vincio.tasks is one expression each — a task-shaped constructor
with governed defaults that lowers to the exact same governed run as the verbose builder path
(retrieval, grounding, validation, rails, budgets, tracing, and the audit chain all apply unchanged).
.app is the escape hatch to every deep method.
from vincio import rag, extractor, tool_agent, evaluation, chat, Flow
rag("./docs").ask("How do I configure SSO?") # grounded, cited, eval-scored RAG
extractor(Ticket).extract("I was charged twice") # typed structured extraction
tool_agent(writes=[create_ticket]).run(task) # an approval-gated tool agent
evaluation(dataset, gates={"groundedness": ">= 0.8"}).run() # an offline eval with CI gates
chat().send("What's my refund window?") # a multi-turn assistant
# …or thread the whole pipeline fluently — the Vincio answer to LCEL:
Flow(provider=p, model=m).retrieve("./docs").ground().evaluate("groundedness").run(question)
Typed output, agents with hard budgets, and a real backend service
Typed output you can rely on — declare a Pydantic schema, get a validated instance back:
from pydantic import BaseModel
from vincio import ContextApp
from vincio.providers import MockProvider
class Triage(BaseModel):
label: str
confidence: float
app = ContextApp(name="triage", provider=MockProvider(), model="mock-1", output_schema=Triage)
app.run("The dashboard crashes after login").output.label # → a validated Triage
Agents with tools, memory, and hard budgets — permissioned tools, approval-gated writes, a loop that cannot run away:
app = ContextApp(name="support", output_schema=RefundDecision)
app.add_memory(scope="user", strategy="semantic")
app.add_tool(lookup_order, permissions=["orders:read"])
app.add_tool(issue_refund, permissions=["refunds:write"], approval_required=True)
app.run("Refund my duplicate charge")
A real backend to copy — examples/applications/ ships a FastAPI
grounded-RAG service, a ticket-triage API, a structured-extraction service, and a CLI research agent —
each runnable fully offline, each splitting an offline-testable core.py from a thin FastAPI main.py.
Providers & models
Vincio calls real models in production. One ModelProvider interface routes to every major provider,
with the model-operations layer (reasoning control, half-cost batch, caching, failover, cost tracking)
built in. The deterministic mock is a development convenience — pass it to build and test the whole
pipeline with no key and no cost, then point the same code at a real model.
Providers, model operations, and the mock — in detail
- Providers — OpenAI, Anthropic, Google (Gemini), Mistral, local models, and any OpenAI-compatible gateway (Groq, Together, Fireworks, OpenRouter, …) through one interface.
- Self-hosted DeepSeek V4 — point at your own DS4 box as a first-class provider (
provider="ds4"): thinking modes, disk-KV cache accounting, fail-closed on-prem residency, and an honest self-hosted$0in the cost table. - Enterprise auth — Amazon Bedrock (SigV4), Google Vertex (service account), Azure OpenAI (Azure AD / key) via pluggable strategies.
- Model operations — unified reasoning/thinking control, batch backends (~50% cost), a prompt-cache strategy, a circuit breaker with health-aware failover, a key pool, and a data-driven
ModelRegistrywhose shipped catalog prices the current lineup of every provider and is held by a coverage gate, so no current model silently bills $0. - The mock —
MockProvideris deterministic and emits schema-valid output, so the full pipeline runs offline in CI with no key and no cost. Pass it for dev and tests; use a real provider in production.
Features
One governed runtime, nine layers. Use the high-level ContextApp, or reach for any of 559 public
symbols directly under one frozen API contract.
Every engine, in detail
Context & prompts — a typed prompt compiler (${variables}, lint rules, cache-aware stable-prefix
layout, versioning, diffing) and a context compiler that scores every candidate (relevance, novelty,
authority, freshness, provenance, token cost, leakage risk), deduplicates, resolves conflicts,
compresses, and packs to a budget — with an excluded-context report and a diffable CompileReceipt
explaining every decision.
Retrieval & memory — hybrid RAG (BM25 + dense + learned-sparse + late-interaction in one weighted
RRF), query understanding (HyDE, multi-query, decomposition), sentence-window / auto-merging chunking,
GraphRAG, metadata filters with tenant scope, and text + image + table + video evidence as first-class
scored candidates. Context anchors (add_source(anchor=True)) keep a PRD / spec / brand frame
always-present across a whole task as a cached, pinned brief. LAGER (app.use_lager()) replaces
top-k with a lazy, reasoning-driven evidence loop over a typed knowledge graph. Layered memory (session
→ episodic → semantic → tenant → graph) adds guarded writes, confidence decay, contradiction resolution,
bi-temporal recall, per-memory ACLs, and audited GDPR-style edit/forget/export.
Agents & orchestration — a permissioned tool registry (RBAC + ABAC), schema-from-typehints, a
resource-limited sandbox, idempotent write guardrails with approval callbacks, and a grounded
computer-use action plane. Universal web browsing & search (app.use_web_search()) gives any
model — even one with no function calling — governed web_search / web_read tools with SSRF-hardened,
content-hashed, offline-verifiable evidence. Universal reasoning (app.use_reasoning_engine())
gives every model adaptive task/depth/strategy selection, evidence-first search, bounded candidate and
correction passes, model-native routing for every language the selected model understands, conservative
tool matching, explicit no-web handling, Unicode evidence verification, and answer-only receipts without
stored chain-of-thought.
Planners (ReAct / plan-and-execute / hierarchical HTN) with
in-place plan repair; multi-agent crews with a shared blackboard; durable stateful graphs
(checkpoint / resume / time-travel / human-in-the-loop); and a distributed durable-execution backend.
Output, evaluation & observability — Pydantic contracts, constrained decoding, streaming validation
with early abort, bounded self-correction that repairs structure only (never invents facts), and
DSPy-style typed signatures. Evaluation: golden datasets, 30+ metrics, deterministic / model / G-Eval
judges, synthetic data, red-teaming, trajectory & tool-use scoring, drift detection, regression gates,
and a pytest plugin. A three-track benchmark platform (see Live performance).
Observability: full trace span trees, OpenTelemetry export, a local trace viewer, a versioned prompt
registry, and per-run cost — no account or hosted backend required.
Data & analytics — a typed columnar Dataset + header-once DataEncoder, bounded profiling &
sampling, governed text-to-query, a multi-step analysis agent, content- & data-bound cited charts, a
streaming out-of-core path, a governed semantic layer, windowed real-time analytics, and cross-org
federated analytics — every answer citing the exact source cells or events and verify()-ing offline.
The closed loop — one reproducible cycle (trace → dataset → eval → optimize → promote): a reflective GEPA/MIPRO optimizer, a distillation flywheel, on-policy reinforcement from verifiable rewards, and gated deploy with canary + rollback. No promotion ships without clearing the gates.
Security & governance — deterministic PII / secret redaction (multilingual), prompt-injection defense with provable containment (taint tracking + capability tokens), RBAC / ABAC, tenant isolation, and a hash-chained, signed audit log with offline tamper verification. Governance: model / system cards, an OWASP / NIST / MITRE / ISO compliance matrix, an AI-BOM, provable erasure, a consent ledger, data-residency enforcement, formal invariant verification, agent identity & delegation, verified-reasoning certificates, and continuous assurance cases.
Protocols & interop — MCP (client and server), A2A agent-to-agent, and Agent Skills, all in-process; and import/export bridges for LangChain, LlamaIndex, Haystack, and DSPy assets.
Reach further — a cross-organization agent economy (negotiation, contracts, durable sagas, metering,
settlement, arbitration, reputation, collateral & solvency proofs), an edge / WASM in-process runtime,
on-device LoRA adaptation, federated learning with a differential-privacy accountant, and per-run
energy / carbon accounting. See ROADMAP.md.
Live performance
Vincio's claims are measured, not asserted — and the numbers below are all live. The feature head-to-head runs on your machine against the real competitor library; the model uplift is a dated run against real models. Honest losses are shown too: where a specialist wins, we say so.
Feature vs. the library you'd otherwise reach for — reproduce with one command, python benchmarks/bench.py feature, which runs against whatever competitor libraries are installed (a missing
one is reported skipped, never fabricated):
The same model, called directly vs. routed through Vincio — on private-knowledge questions a model cannot answer from pretraining, retrieval + grounding turn a near-useless direct call (which either abstains or hallucinates) into a cited, correct answer at a fraction of the cost per correct answer:
Reasoning quality is measured separately from retrieval quality. On a small, reviewed Tier-L set, the non-reasoning Llama 3.2 3B model moved from 0/4 direct to 3/4 through Vincio: all three stable math/logic/multi-step answers passed deterministic verification; on the current-fact case Vincio verified two web snapshots but withheld the model's unsupported final claim instead of counting the refusal as correct. A companion model-native routing run classified 5/5 Spanish, Japanese, Arabic, Swahili and Chinese requests correctly for language, task/depth and web intent. Sample sizes are deliberately shown:
Reproduce the two arms with benchmarks/reasoning_uplift_live.py
and benchmarks/reasoning_multilingual_live.py. The dated,
machine-readable summary is in benchmarks/reference/live_snapshot.json.
Two more dated live runs (reproduce with the script in each): LAGER reaches a multi-hop bridge that
shares zero words with the query — 100% vs classic top-k RAG's 75% at ~8× fewer input
tokens/call (benchmarks/lager_uplift_live.py). Context anchors hold a globally-binding rule that
pure per-query RAG drops — 100% vs 50% at ~3× fewer tokens than pasting every file
(benchmarks/rag_anchor_uplift_live.py). Web search answers post-cutoff facts the model gets wrong —
2/3 fresh vs 0/3 direct (benchmarks/web_uplift_live.py).
How the numbers stay honest — the three-track benchmark platform
Every figure comes from Vincio's own benchmark platform: three tracks under one honesty contract, where each number carries a provenance tier that says, structurally, how real it is. A lower tier can never print a higher tier's label — a Tier-S mechanism check can never masquerade as a Tier-L score.
vincio bench feature # a Vincio feature vs a competitor library — LIVE, on your machine
vincio bench uplift # the same model, Vincio-routed vs direct (live with a key; Tier-S offline)
vincio bench model mmlu # a model on a public benchmark (29 across 10 niches)
The deterministic mechanism checks (the Tier-S mockups) gate CI so a regression fails the build —
they are honesty rails, not performance claims, and are never printed as one. The full map is
benchmarks/PROVENANCE.md; the machine-readable source of truth is
benchmarks/manifest.json.
How Vincio compares
Each ecosystem below is strong in its focus area. This reflects built-in, in-library capability — not what's reachable by bolting on a separate product or SaaS.
Ecosystems evolve, and Vincio is built to interoperate: vincio.interop brings LangChain, LlamaIndex,
Haystack, and DSPy assets in (and hands Vincio's back). In-depth write-ups in
docs/comparisons/.
Examples
A three-tier on-ramp in examples/ — start in the browser, learn each subsystem, then copy a
real backend. Every tier runs fully offline on the bundled mock and points at a real model with one
env var; each is gated in CI so it can never drift.
- Notebooks — six Colab-ready notebooks, one
pip install, no setup: Quickstart · RAG · Agents · Evaluation · Data analysis - Feature tours — one focused, runnable program per subsystem, each a syntax-and-best-practice walkthrough (quickstart, retrieval, memory, agents, structured output, evaluation, security & governance, the data plane, LAGER, context anchors, and more). Full index in
examples/README.md. - Applications — production-shaped backends to copy: a FastAPI grounded-RAG service, a ticket-triage API, a structured-extraction service, and a no-framework CLI research agent.
cd examples && python 01_quickstart.py # offline, no keys
export VINCIO_PROVIDER=openai OPENAI_API_KEY=sk-... && python 01_quickstart.py # against a real model
pip install "vincio[server]" && cd examples/applications/rag_service && uvicorn main:app --reload
Command line
vincio init my-project --template rag # scaffold config + app + golden set
vincio run app.py --input "..." # run an app
vincio eval run golden.jsonl # run an eval suite with CI gates + baseline compare
vincio bench feature # a Vincio feature vs a competitor library — LIVE
vincio trace view trace_123 # TUI trace tree with scores + feedback
vincio loop run --app app.py --gate groundedness=">= 0.8" # one closed-loop cycle
vincio web search "…" # governed web search / read / crawl
vincio audit verify # verify the audit-log hash chain offline
vincio mcp serve app.py # expose an app as an MCP server
vincio serve --app app.py # launch the HTTP API (health/readiness/metrics)
The full CLI (27 command groups) is in the CLI reference. vincio serve
launches a FastAPI server (API-key + JWT auth, SSE streaming, Prometheus metrics); from vincio.server import create_app embeds it.
Architecture
One coherent pipeline from raw input to traced, validated result: the input engine normalizes and scopes the request; memory, retrieval, tools, and the prompt compiler all feed the context compiler, which scores, deduplicates, resolves conflicts, compresses, and budgets; the model runs provider-neutral; and every output is validated, evaluated, secured, traced, costed, and written back to memory.
See AGENTS.md for the package layout and docs/concepts/ for a tour of
each engine.
Status
Vincio is feature-complete and in long-term support. The public API (API_VERSION 5.0, decoupled
from the release version) is frozen under Semantic Versioning with
a mechanical deprecation policy; performance and quality targets are
published as SLOs and gated by VincioBench; releases ship a CycloneDX SBOM with
SLSA provenance. New capabilities are added behind opt-in extras, never by breaking working code.
Upgrade notes are in MIGRATION.md.
Vincio is, and stays, a library. The building blocks for production (audit chain, retention, tenant isolation, RBAC/ABAC, a server) ship in the package for you to deploy on your own infrastructure. There is no hosted service.
Documentation
The documentation index maps every guide, concept, and reference page in a reading order; the learning path is a staged route from your first app to the full platform.
- Start — getting started · context packets · the prompt & context compiler
- Build — RAG app · structured output · add tools · memory · context anchors · LAGER · web search
- Evaluate & improve — run evals · benchmark suite · close the loop · performance
- Orchestrate & interop — orchestrate agents · MCP · A2A · Agent Skills
- Data & analytics — analyze data · the data plane concepts
- Secure & govern — threat model · security policy · governance & compliance · verified reasoning
- Reference — API · capability map · CLI · config · SLOs · stability
- Migrating — from LangChain · LlamaIndex · Ragas · Mem0
Contributing
Contributions are welcome. The test suite runs fully offline and must stay green:
pip install -e ".[dev]"
python -m pytest -q # the full offline suite — no network or API keys required
ruff check vincio/ tests/
mypy vincio
See AGENTS.md for the codebase layout, TESTING.md for the testing model,
and CONTRIBUTING.md for the workflow.
License
Apache License 2.0 © Vincio Contributors.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file vincio-7.10.0.tar.gz.
File metadata
- Download URL: vincio-7.10.0.tar.gz
- Upload date:
- Size: 3.7 MB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
f3a9bc90f54b740385e80d8cdc50bed2fa6c3256a8081523590adadcf0f7bd86
|
|
| MD5 |
3eeac88f48b7b0a78d44efe231ba9820
|
|
| BLAKE2b-256 |
7c32846d0c3bd5e6e9c16022d0114ba186005456f0755adaf987825f2da68ac5
|
Provenance
The following attestation bundles were made for vincio-7.10.0.tar.gz:
Publisher:
release.yml on Ohswedd/vincio
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
vincio-7.10.0.tar.gz -
Subject digest:
f3a9bc90f54b740385e80d8cdc50bed2fa6c3256a8081523590adadcf0f7bd86 - Sigstore transparency entry: 2102388301
- Sigstore integration time:
-
Permalink:
Ohswedd/vincio@9adf846775a87dec55fee14c2948dea0f68e8b65 -
Branch / Tag:
refs/tags/v7.10.0 - Owner: https://github.com/Ohswedd
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@9adf846775a87dec55fee14c2948dea0f68e8b65 -
Trigger Event:
release
-
Statement type:
File details
Details for the file vincio-7.10.0-py3-none-any.whl.
File metadata
- Download URL: vincio-7.10.0-py3-none-any.whl
- Upload date:
- Size: 2.0 MB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
8e0d70810a262cb63f1d4312ea651f8767ccafac48ad42c0724c768f99ced3bf
|
|
| MD5 |
c7b47ab134ca72769dfb76dbca240c73
|
|
| BLAKE2b-256 |
7e5ff3acbf4590a059fb0061e744b07a29ee2f3d34904e3c0cfc7964117b9da1
|
Provenance
The following attestation bundles were made for vincio-7.10.0-py3-none-any.whl:
Publisher:
release.yml on Ohswedd/vincio
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
vincio-7.10.0-py3-none-any.whl -
Subject digest:
8e0d70810a262cb63f1d4312ea651f8767ccafac48ad42c0724c768f99ced3bf - Sigstore transparency entry: 2102388489
- Sigstore integration time:
-
Permalink:
Ohswedd/vincio@9adf846775a87dec55fee14c2948dea0f68e8b65 -
Branch / Tag:
refs/tags/v7.10.0 - Owner: https://github.com/Ohswedd
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@9adf846775a87dec55fee14c2948dea0f68e8b65 -
Trigger Event:
release
-
Statement type: