Yarvelle Core
Domain-Neutral AI Agent Runtime, Execution Engine & Multi-Domain Scope Isolation Framework
Copyright 2026 Spectrayan (https://spectrayan.com)
Licensed under the PolyForm Noncommercial License 1.0.0 and the Yarvelle Core Additional Terms.
Overview
yarvelle-core is the domain-neutral execution backbone of the Yarvelle ecosystem. It provides:
- Deterministic Agent Runtime: LangGraph state machine execution, tool execution gating, agent reflection, and contextual follow-up generation.
- Pack API v1: Pluggable domain pack architecture (
pack.yaml,PackSpec) allowing external packs to register specialized tools, routers, safety policies, and database models. - 11-Layer Scope Isolation Engine: Strict multi-domain data isolation (
ScopeContext,ScopedSession, partitioned CAS storage, scoped FTS5 lexical search, memory namespace partitioning, and HKDF-derived vault sub-keys). - Local-First Security & Cryptography: Envelope encryption keyring vault (PBKDF2/Argon2 KEK, AES-256-GCM DEK), audit hash chaining, and localhost-bound API server.
- Conformance Test Suite: Comprehensive verification framework (
yarvelle_core.conformance) asserting zero cross-domain leakage across all 11 security layers.
Architecture
Dependencies flow strictly inward:
Applications (Carefold, Yarvelle) ──► Domain Packs (Health, Finance, Kids) ──► Yarvelle Core
yarvelle_core contains zero domain-specific business logic or terminology.
Installation
pip install yarvelle-core
For development:
git clone https://github.com/yarvelle/yarvelle-core.git
cd yarvelle-core
pip install -e ".[dev]"
Running Verification
# Run unit & isolation tests
pytest tests/
# Verify layer ordering and package boundaries
lint-imports
# Verify zero domain words in core
pytest tests/test_neutral_words_scan.py
Metadata
Release files for yarvelle-core 0.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| yarvelle_core-0.1.1.tar.gz | 562.9 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| yarvelle_core-0.1.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.3 MB
Release files / yarvelle_core-0.1.1.tar.gz
| Download URL | yarvelle_core-0.1.1.tar.gz |
|---|---|
| Size | 562.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b7230fc155f1b2592992b04cde649dd9324f0e12cb7e925044f3d9cbbda018f7
|
|
BLAKE2b-256 checksum How to use checksums |
ec5544a48d1822fc52d4d30b878fed0f204910aed310d20c8f08f6661994ba9b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logRelease files / yarvelle_core-0.1.1-py3-none-any.whl
| Download URL | yarvelle_core-0.1.1-py3-none-any.whl |
|---|---|
| Size | 778.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ec8d2f7e1c4fec89e7e97b9b0e9ede803f5cec52f006dfc41dbd812f5f648a99
|
|
BLAKE2b-256 checksum How to use checksums |
b59d7e8863bb322d53bbd4944d793c66a24a76d2b86511b20b24949342fc673c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logSecurity for yarvelle-core 0.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for yarvelle_core-0.1.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.