Metadata-Version: 2.4
Name: govp
Version: 0.1.4
Summary: Offline reference verifier for the GOVP open evidence protocol
Project-URL: Homepage, https://govp.io
Project-URL: Repository, https://github.com/govp-protocol/govp
Project-URL: Specification, https://govp.io/govp/spec/govp-1.html
Project-URL: Documentation, https://govp.io/govp/docs.html
Project-URL: Issues, https://github.com/govp-protocol/govp/issues
Author: Gemacode Research
Maintainer: GOVP Protocol
License-Expression: MIT
License-File: LICENSE
Keywords: ed25519,evidence,open-protocol,provenance,verification
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Science/Research
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Topic :: Security
Classifier: Topic :: Security :: Cryptography
Requires-Python: >=3.10
Requires-Dist: certifi>=2024.7.4
Requires-Dist: cryptography>=43
Description-Content-Type: text/markdown

# GOVP

The public specification, conformance vectors and reference command-line
verifier for the Gemacode Open Validation Protocol.

GOVP turns a published statement and its artifact into portable evidence that
can be checked without trusting Gemacode or calling a central API.

## Use it now

With the checksum-verified standalone binary:

```bash
curl -fsSL https://govp.io/install.sh | sh
govp self-test
```

From PyPI, after the public launch:

```bash
python -m pip install govp
govp self-test
```

From the source repository:

```bash
pipx install git+https://github.com/govp-protocol/govp.git
govp self-test
govp verify examples/manufacturing-record.govp.txt \
  --asset examples/manufacturing-record.statement.txt
```

Without installing:

```bash
pipx run --spec git+https://github.com/govp-protocol/govp.git govp self-test
```

## Commands in v0.1.4

- `govp verify RECORD [--asset FILE]`
- `govp verify-url URL`
- `govp inspect RECORD`
- `govp id --type TYPE --asset-id ID --sha256 DIGEST`
- `govp self-test`

Emission, witness receipts and the autonomous observer are intentionally not
present in v0.1. They will be added only after their implementations pass the
same published vectors.

The boundary is deliberate: GOVP CLI 0.1.4 is the reference verifier, not an
issuer. GOVP Studio, the WordPress implementation or another conforming
implementation creates and signs records today.

## Repository map

- `spec/` — protocol text
- `schema/` — machine-readable bundle schema
- `conformance/` — byte-exact vectors
- `src/govp/` — Python reference verifier and CLI
- `examples/` — real signed records with illustrative content

## Honest boundary

GOVP verifies integrity, attribution and declared artifact binding. A core
record alone does not prove that a statement is true, independently timestamped
or witnessed by separate organizations.

MIT licensed. See `LICENSE`.

The MIT license applies to the software and repository documentation. Runtime
and build dependency licensing is recorded in `DEPENDENCY-LICENSES.md`.
