Skip to content

v1.0.0 — Production Stable

Choose a tag to compare

@bradleygauthier bradleygauthier released this 07 Apr 05:35
· 22 commits to main since this release

The governed knowledge store for autonomous organizations. Production-stable API lock.

Install

pip install qp-vault

What is qp-vault?

Every document has a trust tier that weights search results. Every chunk has a SHA3-256 content ID. Every mutation is auditable. The entire vault is verifiable via Merkle tree. Content is screened by an AI-powered Membrane before indexing. Access is controlled by RBAC. Air-gap native. Post-quantum ready.

1.0 Highlights

  • 28 public API operations with stable signatures
  • 543 tests, mypy strict 0 errors, 100/100 security score
  • Trust-weighted hybrid search (unique: no vector DB does this)
  • Knowledge lifecycle with temporal validity and supersession chains
  • Membrane content screening (regex + LLM-based, air-gap safe)
  • Post-quantum cryptography: ML-KEM-768 (FIPS 203) + ML-DSA-65 (FIPS 204)
  • RBAC: Reader / Writer / Admin roles enforced at API boundary
  • Multi-tenancy: tenant lock enforcement, atomic quotas
  • 19 docs including migration, deployment, and troubleshooting guides

New in 1.0 (vs v0.16)

  • vault.upsert(source, name=...): add-or-replace atomically
  • vault.get_multiple(resource_ids): batch retrieval
  • Migration guide (docs/migration.md)
  • Deployment guide (docs/deployment.md)
  • Troubleshooting guide (docs/troubleshooting.md)
  • Classifier: Production/Stable

Breaking Changes (from v0.x)

# Parameter renames
vault.add(source, trust_tier="canonical")      # was: trust=
vault.search(query, min_trust_tier="working")  # was: trust_min=
LayerDefaults(trust_tier="canonical")          # was: trust=

See migration guide for details.

Stats

Metric Value
Tests 543 passing
Source files 57 (mypy strict)
Docs 19 files
Security score 100/100
FIPS KATs SHA3-256, AES-256-GCM, ML-KEM-768

Full changelog