RepositoryCurrent collected state Current
Observed since 20 Oct, 21:53 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
PACKAGE EXPLORERView in registry
agent-evidence-observer
PyPIRecord brokered agent writes and check selected native reports offline
Versions collected1
Direct dependencies9From release 0.1.0
Last observed20 Oct, 21:53 UTC
README
Version 0.1.0 documentationAgent Evidence Observer (prototype)
Record brokered agent writes and check selected native framework reports offline.
Use it in agent harnesses and evaluation pipelines that need replayable action records or a consumer gate for retained reports.
Install the root package: pip install agent-evidence-observer==0.1.0.
Quick start
Run the demo from the released package. You need Python 3.12 or later and uv; there is nothing to clone.
uvx agent-evidence-observer==0.1.0 demo ./sample-run
uvx agent-evidence-observer==0.1.0 verify ./sample-run
The two commands print:
{"noDetectedGap": "true", "retryReplayed": "true", "status": "verified", "witnessScope": "PEER"}
{"noDetectedGap": "true", "status": "verified", "witnessScope": "PEER"}
sample-run/ now holds the signed packet, the history, the public keys and the file tree. The demo
writes a file, retries it, and the retry returns the first effect. noDetectedGap means the broker's
file-tree snapshots found no change it did not make. It does not mean every agent effect was seen.
To run from a pinned source checkout instead, see Run the source quick start.
Status
The root distribution is version 0.1.0. Every record says witnessScope: PEER: the witness key runs on the same
host under the same operator, so the records show what this broker saw, not what an independent
observer saw. Linux runs can launch a fixed probe, or a Python script given to run-workload, under
bubblewrap with only the broker's socket exposed. launch-agent runs an unmodified agent in docker or
apptainer and records, from outside it, every program it ran and every file it changed. It does not use
bubblewrap, which cannot start on hosts with apparmor_restrict_unprivileged_userns=1 such as Ubuntu 24.04.
agent-evidence-witness runs a separately operated witness: a record it co-signs verifies as EXTERNAL
when the reader pins a different operator for the witness key. It needs the witness extra, which is not yet
in a released wheel.
Documentation
Start with worked examples to follow a practical question, then open its technical reference for commands and exact evidence.
| page | read it for |
|---|---|
| Start a project | a template that records a write with this package and checks it with probity-verify, pinned and in CI |
| Component tour | every part of the prototype in one paragraph each, with links: ticket service, replay, evaluation history, A2A, AAE, protected dispatch |
| Running the demo | the full install with tests, and what each output field means |
| Design, trust boundary and roadmap | what each mechanism checks and does not establish, the Linux boundary gate, recovery, consumer admission, and the roadmap |
| Agent launcher | run an unmodified agent with three outside sensors and check its claims with probity-verify |
| Isolated producer | the acceptance criteria for running an unmodified agent behind the broker |
| Brokered workload | run a Python script behind the write broker with run-workload, then check it offline with verify-workload |
| Witness ledger | signed begin and terminal receipts, and how a reader checks them |
| Separately operated witness | run a witness on another host, co-sign records 2-of-2, and catch a witness that forks its log |
| Installation and profile selection | choose the root wheel, a separate profile wheel or a selected source reader; runtime requirements and installed examples |
| Release the root package | qualify a wheel and source distribution, then publish with a bound source tag |
| Atomic native reader | install an offline reader for selected native delegation runs and their refusal controls |
| Witnessed run selection | check a selected run against consumer-retained opening and closing checkpoints |
| Approved refund retries | run the APS approval and local SQLite example, then check retries and refusals with a separately installed reader |
| Refund handoff conformance | verify admission, recovery, handoff, effect and reconciliation bindings against 80 public vectors |
License
Apache License 2.0; see LICENSE.
Downloads & popularity
Awaiting observationsNo metric observations yet
Download counts and popularity will appear here as the collector receives them.
Versions 1
Collected releases| Version | Published | Direct dependencies | Open version |
|---|---|---|---|
| 0.1.0 | 20 Oct 2026 | 9 |
Package advisories
0No matching advisories collected
This describes our collected data; it is not a security assessment.
Repository
PENDINGMetadata history
Meaningful changesRecord identity
package:d0eb39c4a7a53c55cf114a077eb5956d5fa9f754af8d681b9dc3c2387977eca2