Skip to main content
Glama
elwsls

io.github.elwsls/verifiable-claim-seed

by elwsls

verifiable-claim-seed

기계 검증 가능한 클레임 계약 + 제로 의존성 게이트 + 실제 샘플. 재현 가능 ≠ 검증 가능: repro+frozen은 내부 일관성을 증명하며, 외부 정확성은 anchor가 담당합니다. 에이전트 우선: 이 파일보다 먼저 ai-catalog.json을 읽어 머신이 읽을 수 있는 매니페스트를 확인하세요.

mcp-name: io.github.elwsls/verifiable-claim-seed

install

pip install verifiable-claim-seed     # zero dependencies, Python stdlib only
verify-claim self-test                # prove the gate works in this environment

또는 저장소를 클론하고 게이트를 직접 실행하세요:

python3 verifiable_claim_seed/verify_claim.py self-test

Related MCP server: judgment-pack-runtime

entrypoints

역할

경로

contract

verifiable_claim_seed/schema/verifiable-claim-v1.schema.json

gate

verifiable_claim_seed/verify_claim.py

실제 샘플·우주

verifiable_claim_seed/claims/VC-20260815-001.json(ISS 궤도 고도, derived+frozen+repro)

실제 샘플·건강

verifiable_claim_seed/claims/VC-20260823-001.json(1만 보 기원, text-quote 앵커)· verifiable_claim_seed/claims/VC-20260823-002.json(걸음 수-사망 평탄화, text-quote 앵커)

frozen data

verifiable_claim_seed/data/iss_20260814.tle

소스 스냅샷

verifiable_claim_seed/data/wcrf-10000-steps-20260823.html(001 소스 스냅샷)· verifiable_claim_seed/data/pmc-9289978-20260823.html(002 소스 스냅샷)

repro script

verifiable_claim_seed/scripts/verify_iss.py

MCP server

verifiable_claim_seed/mcp_server.py(stdio, 명령 verifiable-claim-mcp / verifiable-claim-seed)

MCP agent sim

verifiable_claim_seed/mcp_agent_sim.py(낯선 에이전트가 전체 MCP 체인을 거치는 시뮬레이션, 무인 검증 가능)

MCP registry manifest

server.json(io.github.elwsls/verifiable-claim-seed, PyPI/stdio)

전시·개념

docs/news-appendix.md(인간 샘플, 비기계 선언——verify_tier는 schema tier와 독립적이며 게이트에 참여하지 않음)

전시·보도자료

docs/news-release-10000-steps.md(인간 샘플·보도자료, 비기계 선언, VC-20260823-001/002에 대응)

전시·학술 선언

docs/academic-claim-10000-steps.md(인간 샘플·학술 선언, 비기계 선언, VC-20260823-001/002에 대응)

verify

verify-claim self-test                              # pip 安装后
verify-claim verify <claim.json> [--report out.json]
# 仓库内直接跑:
python3 verifiable_claim_seed/verify_claim.py self-test

종료 코드: 0 전체 통과 / 1 하드 실패(구조/형식/선언이 참조하는 파일 누락) / 2 사용법·환경(명령줄 인자/검증할 선언 파일 누락) / 3 증거 계약 위반(해시 불일치/재현 불일치).

경로 의미론: 선언 내 data//scripts/ 경로는 패키지 루트(gate 스크립트가 있는 디렉터리) 기준으로 해석되며, 선언 JSON 기준이 아닙니다. 외부에서 복사해 온 단일 파일 선언을 검증하기 전에 전체 저장소 구조를 유지하거나, 선언 전체를 verifiable_claim_seed/claims/에 다시 넣으세요. text-quote 앵커의 바이트 스냅샷: anchor.mode=text-quote는 quote + locator + snapshot + snapshot_sha256(소스 스냅샷 파일 경로 + 64비트 해시)을 반드시 포함해야 합니다. gate는 스냅샷 해시를 바이트 단위로 검증하고, 스냅샷 텍스트를 추출해「조판 문자 정규화 + 공백 제거」의 컴팩트 비교를 수행합니다——인용문은 동결 스냅샷에 실제로 존재해야 합니다(HTML 엔티티/렌더링 공백은 오탐을 일으키지 않습니다). 기계가 검증하는 것은 "인용문이 이 스냅샷에 있다"는 것이며, 스냅샷이 실제 현실 소스인지는 여전히 수동/AI 검증이 필요합니다. repro.script는 Python: repro.script는 python3로 실행됩니다(subprocess, 120초 타임아웃)——스크립트는 Python이어야 합니다. 샌드박스 없음: 게이트는 격리하지 않으며, 경로가 패키지 루트를 벗어날 수 있고 호출자 권한으로 실행됩니다. 보안은 전적으로 "신뢰하는 선언만 검증"에 의존합니다. 제로 의존성 설명: verify_claim.py는 실제 검증기(순수 stdlib, jsonschema 라이브러리에 의존하지 않음)이고, schema/*.json은 계약 사양입니다——둘은 self-test의「schema-gate 계약 동기화」사례로 기계 검증되어 드리프트가 없습니다. anchor.sha256도 동일하게 고정됩니다: 저장소 내 파일을 가리키면 바이트 단위로 검증합니다(불일치 시 rc3). 보안 주의: verify는 선언의 repro.script를 실제로 실행합니다. 신뢰하는 선언만 검증하세요. 신뢰할 수 없는 출처의 선언을 검증하는 것은 해당 선언이 명시한 임의 코드를 로컬에서 실행하는 것과 같습니다. 설계 경계: 게이트는 "스크립트가 선언한 대로 출력하는지"를 검증하며, "스크립트 계산이 올바른지"는 검증하지 않습니다——위조된 repro.script가 올바른 해시 + 기대 값을 출력하면 rc0을 통과할 수 있습니다. 무결성은 동결된 입력 바이트(anchor/frozen)와 선언의 자기 일관성에서 오며, 수학에서 오는 것이 아닙니다. 따라서 "신뢰하는 선언만 검증"은 장식이 아니라 보안 전제입니다.

MCP server

verifiable-claim-mcp(또는 registry 시작 별칭 verifiable-claim-seed)는 세 가지 도구를 노출합니다(stdio, 제로 의존성):

  • self_test — gate 자체 점검, PASS/FAIL + 케이스 수

  • validate — 구조 + 해시 검사, 스크립트를 실행하지 않음(신뢰할 수 없는 선언에는 이 도구 사용)

  • verify — 전체 검증, 명시적으로 allow_execution=true가 필요함(선언 내 repro.script, 즉 임의 코드를 실행함); 이 플래그가 없으면 모두 거부

MCP registry: server.json(io.github.elwsls/verifiable-claim-seed, PyPI/stdio).

Claude Code 연결(pip install 후)——프로젝트 루트에 .mcp.json을 배치(저장소에 예시 포함), 새 세션에서 세 도구 자동 로드:

{ "mcpServers": { "verifiable-claim-seed": { "command": "python3", "args": ["verifiable_claim_seed/mcp_server.py"] } } }

uvx verifiable-claim-seed(PyPI 릴리스 후)도 사용할 수 있습니다. 낯선 에이전트의 엔드투엔드 검증 완료: 세 도구 발견 → validate 제로 실행 → verify가 allow_execution 부재로 거부 → 플래그 포함 시 통과.

License: MIT. 제로 의존성(Python stdlib).

Available Tools

3 tools
self_testA

Run the gate self-test: proves the tool works in this environment. Returns passed/exit_code/output.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It does disclose the return shape (passed/exit_code/output), which is useful, but it says nothing about whether the operation is safe/side-effect-free, whether it requires any setup, or how to interpret the passed/exit_code fields. For a zero-parameter self-test this is acceptable but minimal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short clauses with zero filler. The action verb is front-loaded and the return format is stated in a compact second clause. Every word earns its place; nothing is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is trivial in complexity: zero parameters, no annotations, no output schema, no nested objects. The description covers what it does, why it exists, and what it returns. The only minor gap is a potential note on how to interpret exit_code/passed beyond the raw field names, which is a small omission for an otherwise simple tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, which sets a baseline of 4 per the rubric. Schema coverage of properties is trivially 100% with an empty object, so there is nothing for the description to add about parameters. The description instead correctly documents the return format, which is more valuable here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific action ('Run the gate self-test') on a clear resource and adds purpose ('proves the tool works in this environment'). It is implicitly distinct from the sibling tools validate and verify, since it tests the environment/tool itself rather than validating some external input. Loses a point only for not explicitly contrasting with those siblings, but the purpose is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to call this tool versus the siblings validate or verify. There is a weak implication (use it to prove the environment works) but no explicit when-to-use, no exclusions, and no mention of whether this should be run before other tools or as a diagnostic. The agent must infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validateB

Check a claim's structure and anchor/frozen hashes WITHOUT executing any code. Safe for untrusted claims. Args: claim (claim JSON text) or claim_path (absolute file path).

ParametersJSON Schema
NameRequiredDescriptionDefault
claimNoClaim document as JSON text
claim_pathNoAbsolute path to a claim JSON file

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that no code is executed and explicitly labels the tool safe for untrusted claims, which are key behavioral traits. However, it omits the expected return format, error behavior, and any side effects (beyond implying read-only). This is adequate but not comprehensive for an unannotated tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences with zero waste. The core purpose and safety disclaimer are front-loaded, and argument types follow immediately. Every phrase earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple, but with no output schema, the description should explain what a successful or failed validation looks like (e.g., return value). It also omits any assumptions about file existence or claim format constraints. Given the tool's narrow scope, it's moderately complete but leaves the agent guessing about results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented. The description restates 'claim (claim JSON text)' and 'claim_path (absolute file path)' without adding new meaning beyond the schema. It clarifies the input types but adds marginal value over the existing parameter descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool checks a claim's structure and anchor/frozen hashes without executing code. It uses a specific verb ('Check') and names the resource. While it doesn't explicitly contrast with siblings (self_test, verify), the safety note and 'WITHOUT executing any code' hint at differentiation, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context (safe for untrusted claims) but gives no guidance on when to use this tool versus alternatives like verify or self_test. There is no mention of exclusions or prerequisites, leaving the agent to infer appropriate usage from name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verifyA

Full verification of a claim, INCLUDING executing its repro.script as arbitrary code with no sandbox. REQUIRES allow_execution=true; otherwise refused. Only call this on claims you trust. Args: claim or claim_path, allow_execution.

ParametersJSON Schema
NameRequiredDescriptionDefault
claimNoClaim document as JSON text
claim_pathNoAbsolute path to a claim JSON file
allow_executionYesMust be true; verify is refused without it

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly discloses that executing repro.script as arbitrary code with no sandbox carries security risk, and that it requires a permission flag. This is critical behavioral information beyond what annotations would provide (and no annotations are present, so the description carries full burden). It also states the refusal condition, fully disclosing the tool's execution behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences long, with the most critical information (execution risk and requirement) front-loaded. Every sentence adds value: what it does, the critical requirement, and the trust caveat. No filler or repetition of schema details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with three parameters, no output schema, and no annotations, the description covers the essential context: what it does, the dangerous execution behavior, the mandatory flag, and a safety warning. The only minor gap is not describing the return value, but since there's no output schema, the description could have stated what it returns; however, the primary usage risks are fully covered, and the tool is a verification action where the result is likely self-evident. Given the high stakes, this is comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents each parameter's type and purpose. The description adds clarifications: allow_execution must be true and is required, claim and claim_path are alternatives for specifying the claim. It doesn't add syntax examples or detailed formats, but given the schema is complete, this is adequate. The description reinforces the critical flag without redundancy.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool performs 'full verification of a claim' and explicitly mentions executing its repro.script as arbitrary code with no sandbox, which is a specific, high-stakes action. It also names its core requirement (allow_execution=true) and contrasts with siblings like validate and self_test by emphasizing execution, distinguishing it clearly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit conditions: 'REQUIRES allow_execution=true; otherwise refused' and 'Only call this on claims you trust.' This provides clear when-to-use guidance, though it doesn't explicitly name alternatives like validate or self_test as safer options. The context is strong enough for an agent to infer the trade-offs, but a direct comparison would improve it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updatesv1.3.1
    • First observedself_test
    • First observedvalidate
    • First observedverify

TDQS

A3.9/5.0

Scored across 3 tools

Disambiguation5/5

Each tool has a distinct purpose: self_test for environment validation, validate for safe structural checks, and verify for full execution-based verification. The descriptions clearly differentiate the safe versus risky operations, leaving no ambiguity.

Naming Consistency4/5

Tool names are single verbs (validate, verify) while self_test is a compound, creating a slight inconsistency. However, all names are clear action-oriented verbs and follow a predictable style, making the deviation minor.

Tool Count5/5

Three tools is well-scoped for a specialized verification server. Each tool serves a necessary function without redundancy or excess, fitting the server's narrow purpose perfectly.

Completeness4/5

The toolset covers the core verification lifecycle: environment testing, safe validation, and full execution-based verification. A minor gap is the absence of any claim creation or modification tools, but these may be out of scope for a verification-focused server.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables defining and verifying evidence contracts for claims in READMEs, releases, or product pages using constrained verifiers and generating hash-chained receipts and reports.
    5 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Serves offline document validation and evaluation operations of the Judgment Pack Specification to MCP clients over stdio, enabling agents to validate and evaluate JPS documents as tool calls. Supports conformance validation, experimental evaluation with disposition and error classes, and corpus testing.
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to locally verify nomue Protocol Release 1 Welch Records, performing scoped structural, digest, admissibility, computability, and two-sided Welch recomputation checks over stdio without requiring accounts, API keys, or network access.
    30 npm
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Provides read-only access to CWI's trust infrastructure, enabling Gear Ledger provenance queries, agent trust scoring via the Verdict Engine, and NEEDLE DROP ledger hash-chain verification over stdio.
    7
    MIT