CheckedFlow 0.1.0

CheckedFlow 0.1.0 is an experimental Python runtime for signed work, shared budgets, independent verification and conditional reuse of generated procedures.

The deterministic core keeps execution authority, consensus order and verification acceptance separate. Four fixed administrative organizations use CometBFT 0.40 for consensus, while workers run generated Python in Linux gVisor sandboxes. The reference generator completes bounded integer-array tasks and compares reuse against generation from scratch.

Agent interoperability

• A2A 1.0: all 11 standard service operations over JSON-RPC, HTTP+JSON and optional gRPC; durable task observations, authenticated pagination, streaming, signed cancellation and restricted HTTPS push delivery.
• MCP: stdio, Streamable HTTP and legacy SSE; tools, resources/templates, review prompt, completion, resource subscriptions and optional OAuth resource-server authentication.
• Both adapters use the same mission-bound gateway and original signed command envelope. Transport authentication cannot grant execution or administrative authority.

See the conformance matrix for exact protocol roles and application limits.

Installation

python -m pip install checkedflow==0.1.0
checkedflow example
python -m checkedflow.data.examples.sdk

For agent gateways and distributed adapters:

python -m pip install 'checkedflow[agents,distributed]==0.1.0'

Python 3.12 or later is required. CometBFT and gVisor are separate external processes. The SDK examples work without a cluster; the full sandboxed demonstration requires Linux.

Validation and provenance

• 158 unit, contract, property and adapter tests on Windows and Linux, Python 3.12, 3.13 and 3.14.
• Eight required real CometBFT/gVisor qualification cases, including formation/reuse, cross-protocol access, competing leases, network partitions, quorum loss and sandbox limits.
• Core statement coverage 100%; branch coverage 98.53%. All five selected invariant mutations detected.
• Ruff, strict mypy, Bandit, architecture/determinism checks, schemas, document links, actionlint, isolated package installation, artifact leakage checks and locked runtime dependency audit passed.

The tagged Python 3.13/3.14 suite reports one SQLite resource warning in its crash-simulation fixture. The production store closes its connections; the fixture and package-discovery teardown were corrected separately on main without changing the release tag or runtime code.

The attached wheel and sdist are the exact workflow artifacts submitted to PyPI through OIDC Trusted Publishing, without rebuilding. SHA256SUMS.json identifies both files. PyPI publication includes provenance attestations.

Source: cbe6ad8. Release qualification and publication workflow.

This is a bounded reference implementation, not a production security certification or a proof of general program correctness. The reference domain has 31 inputs. Colocated test nodes do not establish organizational independence, and protocol acknowledgments do not establish verification acceptance. Deployment-specific TLS, OAuth issuers and external webhook receivers need their own qualification.

Start with the README, tutorial, security audit, and agent guide.

Licensed under Apache-2.0.