Skip to main content

winnex-tracer-core

The shared base for the Winnex tracer family — a pip package.

Generic infrastructure reused by tracer-gov, tracer-med, tracer-jus and tracer-gap (each a separate pip package that depends on this one):

Module What it provides
winnex_tracer_core.persistence WormStorage (WORM JSONL + SHA3-256 hash chain), PgStore, BlockchainStore, FileStore
winnex_tracer_core.core.Signer Ed25519 / ICP-Brasil digital signatures
winnex_tracer_core.core.AuditLogTracker Tamper-evident self-audit log (HMAC chain)
winnex_tracer_core.core.RetentionPolicy Configurable retention (5-20 years)
winnex_tracer_core.core.commitment AuditCommitment — the lightweight (~500 B) signed audit record for the WORM

AuditCommitment (the production audit-trail path)

The C++ motor (winnex-madhava >= 1.9.2) returns a compact commitment (total_excluded_count + global_threshold + a deterministic boundary sample) instead of the full O(N) certificate (~2 MB at scale). This layer signs it with Ed25519 for non-repudiation, then stores the ~500-byte record in the WORM.

from winnex_tracer_core.core import make_worm_record, verify_record, public_key_hex
from winnex_tracer_core.persistence import WormStorage

# engine = winnex_madhava engine with search_with_commitment
record = make_worm_record(engine, query, k=10, max_sample=50)  # ~500 B
worm = WormStorage(base_path="/var/lib/tracer/worm")
worm.append(record)

# Auditor: verify non-repudiation
v = verify_record(record, public_key_hex())
assert v["status"] == "VALID"

The signing key comes from WORM_SIGNING_PRIVATE_KEY_HEX (or _FILE) — held outside the C++ binary, so a compromised engine cannot forge past records.

The layer architecture

winnex-madhava        (motor C++20, pip)   — the search engine + bound
winnex-tracer-core    (base, pip)          — WORM, Signer, AuditLog, commitment  ← THIS PACKAGE
  ├─ tracer-gov       (domínio governo)    — depends on winnex-tracer-core
  ├─ tracer-med       (domínio saúde)      — depends on winnex-tracer-core
  ├─ tracer-jus       (domínio legal)      — depends on winnex-tracer-core
  └─ tracer-gap       (domínio financeiro) — depends on winnex-tracer-core
        │
        ▼  (REST API de cada domínio)
Consumo final: Liferay (tracer-gov-liferay, tracer-med-liferay) e qualquer
outra plataforma (Pinecone, Weaviate, aplicações próprias) que chame o REST
dos domínios. O Liferay é UM dos consumidores finais, não a base.

Install

pip install -e .               # core (numpy)
pip install -e ".[signature]"  # + PyNaCl (Ed25519)
pip install -e ".[all]"        # + pg + blockchain

License

Business Source License 1.1 (BSL 1.1) | pay@winnex.ai | Winnex Brasil Soluções Empresariais LTDA (CNPJ 58.364.637/0001-47)

Release files for winnex-tracer-core 1.0.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for winnex-tracer-core 1.0.2
File Size Uploaded
winnex_tracer_core-1.0.2.tar.gz 22.1 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for winnex-tracer-core 1.0.2
File Interpreter ABI Platform
winnex_tracer_core-1.0.2-py3-none-any.whl Python 3 none any Details

Total release size: 48.1 kB

Release files / winnex_tracer_core-1.0.2.tar.gz

Download URL winnex_tracer_core-1.0.2.tar.gz
Size 22.1 kB
Tags Source
SHA-256 checksum
How to use checksums
bdf501271aac5ec088c9c89443e3112ec84f9a7dc2713eee95bb12cd638a72e7
BLAKE2b-256 checksum
How to use checksums
5de130863788929d2f0ff89b2183d6caaf2b2837120c518b93f6345888f4e224
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 20, 2026.

Transparency log

Release files / winnex_tracer_core-1.0.2-py3-none-any.whl

Download URL winnex_tracer_core-1.0.2-py3-none-any.whl
Size 26.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
efee961879519614a17c257ee8064f0d3802e48ad49a6bfab81aaf0b6e12ecf4
BLAKE2b-256 checksum
How to use checksums
dda43a0d9ee30e3a461a12fc26b2428708106955404ce7400e794ff79d0c864d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Aug 20, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

1.0.2 This release

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page