Skip to content

Add audited external quant screening API - #10

Merged
Sahil170595 merged 2 commits into
mainfrom
feat/external-screen-v1
Jun 15, 2026
Merged

Add audited external quant screening API#10
Sahil170595 merged 2 commits into
mainfrom
feat/external-screen-v1

Conversation

@Sahil170595

Copy link
Copy Markdown
Owner

Summary

  • add the public, aggregate-only /screen_external_manifest endpoint and collapsed UI panel
  • bind reports to a declared source lineage and frozen measurement protocol
  • reject impossible/ambiguous manifests, isolate the endpoint from the shared queue, and publish scorer/substrate provenance
  • harden Space deployment exclusions and make secret synchronization opt-in

Verification

  • 570 tests passed
  • Ruff, compileall, Bandit medium/high, and git diff --check passed
  • pip-audit clean except the documented PyTorch CVE exception
  • local gradio_client valid/rejected requests passed
  • Playwright desktop/mobile flow passed with zero console errors

Sahil170595 and others added 2 commits June 15, 2026 10:51
Public /screen_external_manifest endpoint that screens user-supplied AGGREGATE
evidence (no model download, no raw prompts, unsigned + provisional) via the
frozen RTSI screen.

- external_screen.py: strict manifest validation (32KB cap; NaN/inf/SHA/range
  rejection), reuse compute_rtsi/classify_risk/RTSI_WEIGHTS/feature_deltas,
  append delta to frozen 45-row substrate, per-feature contributions sum to
  score, refusal-collapse -> HIGH/ROUTE, both-zero -> UNKNOWN/INSUFFICIENT_SIGNAL.
- schemas/external_screen_v1.schema.json: frozen request contract (draft 2020-12).
- app.py (+86/-0, additive only): collapsed "Test your own quant - API-ready"
  accordion in Score a config; .click api_name="screen_external_manifest" public;
  all reflected metadata HTML-escaped.
- tests/test_external_screen.py (60) + tests/test_external_screen_ui.py (19).
- README / SECURITY_AUDIT / SUBMISSION / AGENT_TRACE docs.

Frozen substrate, score/cert semantics, providers, six tabs, and worker
concurrency unchanged. 556 tests pass; ruff/bandit/pip-audit clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@Sahil170595
Sahil170595 merged commit 83f5498 into main Jun 15, 2026
4 checks passed
@Sahil170595
Sahil170595 deleted the feat/external-screen-v1 branch June 15, 2026 15:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant