Metadata-Version: 2.4
Name: pail-eval
Version: 1.1.0
Summary: Public client for PAIL governance, token, RCA, and RAG contract evaluators
Author: PAIL
License: MIT
Requires-Python: >=3.10
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: certifi>=2024.7.4
Dynamic: license-file

# PAIL Public Evaluation Kit 1.1.0

This kit reproduces PAIL's public AI Governance, Token Efficiency, RCA, and RAG
contracts. It includes clients, frozen samples, result schemas, OpenAPI, Docker, and
smoke assertions. It contains no private PAIL core, cognition rules, model weights,
memory, customer data, or actuation code.

Do not submit secrets, personal data, regulated records, credentials, or proprietary
source code to a public evaluation endpoint. Use synthetic or sanitized fixtures.

## Python

Install this local package:

```bash
python3 -m pip install .
pail-eval governance samples/governance.json
pail-eval tokens samples/tokens.json
pail-eval rca samples/rca.json
pail-eval rag samples/rag.json
```

The package metadata is ready for `pip install pail-eval`, but the name is not claimed
as published on PyPI until a maintainer account and release process are configured.

## Node

Node.js 18 or later is required.

```bash
node pail_eval.mjs governance < samples/governance.json
node smoke.mjs
```

The Node CLI accepts payload JSON only on standard input and rejects inputs over 64
KiB. Custom endpoints must be HTTPS origins; HTTP is accepted only for loopback
development hosts.

The Python package installs `certifi` as its only runtime dependency and always verifies
HTTPS certificates against that CA bundle. Running the source file without installing
the package falls back to Python's operating-system trust store; verification is never
disabled.

Set `PAIL_PUBLIC_URL` to evaluate another deployment.

## Docker

```bash
docker build -t pail-eval:1.1.0 .
docker run --rm pail-eval:1.1.0 health
docker run --rm pail-eval:1.1.0 rag samples/rag.json
```

## Approved sandbox

Set an API key only for an approved tenant. The public evaluators do not require one.

```bash
export PAIL_API_KEY=pail_replace_me
export PAIL_PUBLIC_URL=https://ancient-intelligence-lab.kakarotvira06.workers.dev
```

Authenticated evaluations save a summary and input digest for up to 14 days. Raw RAG
records and RCA timelines are removed from persisted history.

## Contract boundary

- The four public evaluators do not call an LLM.
- Governance output is not certification or legal advice.
- Token proof preservation is not an answer-quality guarantee.
- RCA cause fields remain suspected, not proven.
- RAG evaluates one explicit anchor across at most 50 records.
- `schemas/` describes response contracts; `openapi.yaml` describes request routes.
