Products
Bundle-first tooling designed for reviewer-ready output: generated, verified, and reviewable.
Technical modules
LEO
Builds deterministic evidence packs from scoped inputs.
- Inputs: scoped inputs + selected library + contracts/v1
- Deterministic pipeline (stable ordering)
- Outputs: pack.zip + DecisionPack.pdf/html + verify.json + SHA256.txt
- Does not: issue certifications; packages evidence for review
- Runs: Windows portable, offline
- Invokes: AEGIS for compile/render; emits verifier artifacts
AEGIS
Compiles reviewer-ready outputs from validated artifacts.
- Compiles library rules + evidence into reviewer-ready packs
- Enforces framework spine + coverage gates (where applicable)
- Renders: DecisionPack.pdf + DecisionPack.html + manifest/seal JSON
- Guarantees: deterministic structure + stable sections
- Offline: no cloud fetch; evidence must be provided/ingested
- Used by LEO in the compile stage
CupolaIncluded engine for provenance indexing and retrieval.
- Ingest -> Search -> Provenance (path/snippet/provenance tuple)
- Produces evidence hits consumed by compilation
- Deterministic JSON shapes + stable ordering
- Offline-first; local indexing
- Does not: invent evidence; retrieval only
- Supports local corpora for scoped runs
Open CupolaEPI CLI
Verifies integrity and manifests locally with tamper-evident checks.
- Verifies pack integrity + expected shapes
- PASS/FAIL + reasons (JSON)
- PowerShell-friendly for technical users
- Runs offline; Rust CLI
- Consumes pack.zip + emits verify.json
- Suitable for CI/local validation gates
EPI Viewer
Displays structured evidence for reviewer workflow.
- Non-technical review surface
- Drag-and-drop pack.zip, displays outcomes
- Uses bundled verifier via relative tools path
- Windows portable; offline
- Shows claim-to-evidence context for review
- Exports verify JSON for records
Contracts/v1Compatibility contract for module interoperability.
Public mirror of the interface used by the toolchain.
- Declares artifact shapes + schema_version
- Keeps tools interoperable without lock-in
- Compatibility surface for upgrades
- Versioned interface across LEO, AEGIS, Cupola, Viewer, CLI
- Used to validate manifests/seals and verifier outputs
- Supports incremental migration with explicit schema changes
Open Contracts/v1Additional products