Documentation
¶
Overview ¶
Package evidence is an umbrella for AICR's evidence kinds. Per ADR-007, AICR ships two kinds of validation evidence, each in its own subpackage:
- cncf — CNCF AI Conformance behavioral evidence (markdown rendering + behavioral collector for submission to the CNCF conformance program).
- attestation — recipe-test attestation pipeline (signed in-toto Statement plus supporting bundle).
- verifier — offline verification for recipe-evidence bundles produced by `aicr validate --emit-attestation`.
This file exists only to give the umbrella package a package-level doc comment. The subpackages contain all the runtime code.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package allowlist loads and validates the maintained signer allowlist at recipes/evidence/allowlist.yaml.
|
Package allowlist loads and validates the maintained signer allowlist at recipes/evidence/allowlist.yaml. |
|
Package attestation implements the recipe-test-attestation evidence kind defined in ADR-007 (docs/design/007-recipe-evidence.md).
|
Package attestation implements the recipe-test-attestation evidence kind defined in ADR-007 (docs/design/007-recipe-evidence.md). |
|
Package cncf renders CNCF AI Conformance evidence markdown from CTRF reports.
|
Package cncf renders CNCF AI Conformance evidence markdown from CTRF reports. |
|
internal
|
|
|
boundedio
Package boundedio puts blocking local-filesystem work behind a cancellation boundary so the evidence publish/sign/verify paths cannot hang indefinitely on a dead NFS/FUSE mount.
|
Package boundedio puts blocking local-filesystem work behind a cancellation boundary so the evidence publish/sign/verify paths cannot hang indefinitely on a dead NFS/FUSE mount. |
|
Package project synthesizes the source-keyed evidence tree that the GP4 corroborate consensus generator consumes.
|
Package project synthesizes the source-keyed evidence tree that the GP4 corroborate consensus generator consumes. |
|
Package redact minimizes the sensitive operational detail an evidence bundle physically ships, while leaving the cryptographic verification story intact.
|
Package redact minimizes the sensitive operational detail an evidence bundle physically ships, while leaving the cryptographic verification story intact. |
|
Package verifier implements `aicr evidence verify`: offline verification of a recipe-evidence bundle (v1 or v2) produced by `aicr validate --emit-attestation`.
|
Package verifier implements `aicr evidence verify`: offline verification of a recipe-evidence bundle (v1 or v2) produced by `aicr validate --emit-attestation`. |
Click to show internal directories.
Click to hide internal directories.