v0.1.1rc1 — a candidate on PyPI

A candidate, published to prove the pipeline. Same tree as v0.1.0 but for the packaging.

$ pip install --pre rag-security-protocol
$ python -c "import rsp.runtime"

The distribution is rag-security-protocol — rsp on PyPI belongs to an unrelated SSH proxy — and the package is still import rsp, the way beautifulsoup4 gives you bs4.

What this release is for

The name had never been used, the publish workflow had never run, and the trusted-publishing configuration had never been exercised. PyPI refuses a filename a second time even after a delete, so the first upload is the one that cannot be taken back. This is that upload, deliberately spent on a candidate.

It bought what it was meant to: the first attempt failed in the test step, before uv build, and uploaded nothing. nltk refuses to open a file with more than one link, and uv hardlinks from its cache by default — a hazard ci.yml had documented and the new workflow had not carried over. Measured: st_nlink is 2 under hardlink and 1 under copy.

Note on pip install

With no stable release yet published, a plain pip install rag-security-protocol resolves to this candidate — pip skips pre-releases only when a stable version can satisfy the requirement, and here none exists. Pin a version if that matters to you. It stops being true the moment 0.1.1 is out.

What is in it

Unchanged from v0.1.0: twenty-eight normative clauses, twenty-four with a conformance case and four with the reference host's tests; one host with no runtime dependencies; seven plugin adapters over the unmodified gitleaks binary; a conformance kit that imports none of it.

The installed package is rsp/ alone. conformance/ and plugins/ are deliberately not shipped — the kit is meant to be copied next to the plugin under test, so that what it checks is the protocol rather than a version of it that travelled with one host.

Read §10 before relying on K1. A LlamaIndex docstore left at its default keeps the whole document, including one the guard blocked. That is #120, open.