Initial public release of Prooflint, a local-first evidence gate for AI-security findings and AI-assisted vulnerability reports.
Highlights:
- Ten deterministic evidence-hygiene rules (PL001–PL010)
- Markdown and JSON finding formats
- Tamper-evident evidence manifests
- Text, JSON, and SARIF output
- Strict path confinement and atomic output handling
- 198 tests on Python 3.11 and 3.13 with 96% branch coverage
- Reproducible wheel and source distribution with SHA256SUMS
Prooflint does not scan targets, execute proof-of-concept payloads, prove exploitability, or submit reports. It helps researchers make authorized findings reviewable and reproducible.