semvec/pypi-packages huggingface dataset:
loraprov 0.1.2
Tamper‑evident signatures and license lineage for LoRA / adapter files
License: Apache-2.0
Requires Python: <4.0,>=3.9

# LoRA‑Provenance `loraprov`

[![CI](https://github.com/KeithTyser/lora-provenance/actions/workflows/ci.yml/badge.svg)](https://github.com/KeithTyser/lora-provenance/actions/workflows/ci.yml)  
![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)  
![PyPI](https://img.shields.io/pypi/v/loraprov)<br>
📚 **Docs:** <https://keithtyser.github.io/lora-provenance>

Tamper‑evident **signatures** and **license lineage** for any LoRA / adapter file.

---

## Quick‑start

```bash
# install (after first PyPI release)
pip install loraprov

# generate a signing key
loraprov key generate alice

# sign an adapter
loraprov sign adapter.safetensors --parent-sha 6efa... --license MIT --key alice

# verify before deploying
loraprov verify adapter.safetensors
```

*Tip&nbsp;→* to protect Hugging Face pushes, enable the [pre‑upload filter](docs/hf_filter.md).  
Need compliance docs? `loraprov sbom adapter.safetensors` exports a **CycloneDX SBOM** instantly.

---

## Architecture

```mermaid
flowchart LR
    A[Developer] --> B["loraprov sign"]
    B --> C["Signed Adapter"]
    C --> D["loraprov verify<br/>(CI / Prod)"]
    B --> E["HF filter"]
    E --> C
    C --> F["SBOM export"]
```

---

## Why use LoRA‑Provenance?

| Problem | Benefit |
|---------|---------|
| Poisoned adapters | Signature mismatch blocks deployment |
| License ambiguity | License + parent SHA embedded at sign‑time |
| Compliance (EU AI Act, NIST AI RMF) | One‑line SBOM and full provenance chain |
| Reproducibility | Cite an immutable SHA‑256 instead of a URL |

---

## Roadmap

- WebAssembly verifier (browser demo)  
- Hardware‑backed keys (YubiKey)  
- Lineage visualizer (interactive graph)

---

### Contributing

1. `git clone …` → `poetry install`  
2. `poetry run pytest` (tests + lint)  
3. Open a PR – CI must stay green

Licensed under **Apache‑2.0** © 2025 Keith Tyser & contributors.
ks-assistant-core 2025.4.18
Open-source home automation platform running on Python 3.
License: Apache-2.0
Requires Python: >=3.12.0
Keywords: home, automation

KS Assistant |Chat Status|
=================================================================================

Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server.

Check out `home-assistant.io <https://home-assistant.io>`__ for `a
demo <https://demo.home-assistant.io>`__, `installation instructions <https://home-assistant.io/getting-started/>`__,
`tutorials <https://home-assistant.io/getting-started/automation/>`__ and `documentation <https://home-assistant.io/docs/>`__.

This is a project of the `Open Home Foundation <https://www.openhomefoundation.org/>`__.

|screenshot-states|

Featured integrations
---------------------

|screenshot-integrations|

The system is built using a modular approach so support for other devices or actions can be implemented easily. See also the `section on architecture <https://developers.home-assistant.io/docs/architecture_index/>`__ and the `section on creating your own
components <https://developers.home-assistant.io/docs/creating_component_index/>`__.

If you run into issues while using KS Assistant or during development
of a component, check the `KS Assistant help section <https://home-assistant.io/help/>`__ of our website for further help and information.

.. |Chat Status| image:: https://img.shields.io/discord/330944238910963714.svg
   :target: https://www.home-assistant.io/join-chat/
.. |screenshot-states| image:: https://raw.githubusercontent.com/home-assistant/core/dev/.github/assets/screenshot-states.png
   :target: https://demo.home-assistant.io
.. |screenshot-integrations| image:: https://raw.githubusercontent.com/home-assistant/core/dev/.github/assets/screenshot-integrations.png
   :target: https://home-assistant.io/integrations/