sourcea-boot

One command. PASS or BLOCK before your agents run.

Run in 5 minutes

pip install sourcea-boot
sourcea-boot --json

Or clone for editable install:

git clone https://github.com/Noetfield-Systems/sourcea-boot.git
cd sourcea-boot
pip install -e .
sourcea-boot --json

Published on PyPI via GitHub Actions trusted publishing (OIDC — no long-lived token). See docs/PYPI_TRUSTED_PUBLISHING_SETUP.md.

Writes BOOT_REPORT.json in the current directory. Exit code 0 = PASS, 1 = BLOCK.

Expected output:

$ sourcea-boot --json
SOURCEA_BOOT PASS ok=true
  [PASS] policy_version: ...
  [PASS] provider: ...
  [PASS] receipt_fresh: ...
  [PASS] queue_truth: ...
REPORT=BOOT_REPORT.json

CI validation

Factory CI runs scripts/validate-sourcea-boot-v1.sh — four checks, PASS/BLOCK contract, BOOT_REPORT.json on disk.

What it checks

Check	Meaning
policy_version	Project policy / SSOT file not stale vs last brief
provider	LLM embedding provider configured (no fake-green hash mode when keys exist)
receipt_fresh	Last boot/gate receipt fresh (<8h) and ok
queue_truth	Agent queue head matches inbox truth (when queue files present)

SourceA factory mode

When run inside a SourceA monorepo (detects SOURCEA_UNIFIED_PORTFOLIO_COMMERCIAL_SSOT_LOCKED_v3.1.md), runs full factory spine checks against ~/.sina/.

Zero config

Works in any project. Optional config: .sourcea-boot.json in project root.

{
  "policy_file": "POLICY.md",
  "receipt_path": ".sourcea/boot-receipt.json",
  "max_receipt_age_hours": 8
}

Repository

https://github.com/Noetfield-Systems/sourcea-boot

License

MIT · SourceA · hello@sourcea.app