Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Latest commit

 

History

History

README.md

🔐 PiQrypt — Cryptographic Proof for AI Agents

Prove what your AI did. Cryptographically.

Signed • Timestamped • Post-Quantum Ready • Tamper-Proof

PyPI License AISS


⚡ The Problem

AI agents make critical decisions autonomously: trades, diagnoses, approvals, actions.

But when something goes wrong:

  • Who did what?
  • Can it be proven?
  • Is the log tamper-proof?
  • Is it quantum-resistant?

Most systems rely on editable logs. Trust is not cryptographic.

❌ Traditional Logs
   ├─ Modifiable after the fact
   ├─ No cryptographic proof
   ├─ No legal standing
   └─ Vulnerable to quantum attacks

✅ The Solution

PiQrypt creates cryptographic audit trails for autonomous systems.

Every decision is:

Cryptographically signed (Ed25519 + Dilithium3)
Hash-chained (tamper-proof, blockchain-like)
Timestamped (RFC 3161 independent proof)
Post-quantum secured (NIST FIPS 204)
Court-admissible (legal standing)

No blockchain. No token. Just verifiable cryptography.

✅ PiQrypt Audit Trail
   ├─ Cryptographically signed (Ed25519/Dilithium3)
   ├─ Immutable hash chains (tamper-proof)
   ├─ Legal standing (court-admissible)
   └─ Quantum-resistant (50+ year proof)

💡 Why PiQrypt?

PiQrypt is the reference implementation of AISS and its Proof of Continuity Protocol (PCP).

It provides:

  • Cryptographic profiles (Classical and Hybrid Post-Quantum)
  • Deterministic event validation
  • Canonical history enforcement
  • Audit-ready certification export

For Developers

import piqrypt as aiss

# Sign every decision
event = aiss.stamp_event(
    private_key,
    agent_id,
    payload={"action": "buy", "symbol": "AAPL", "quantity": 100}
)

# Tamper-proof storage
aiss.store_event(event)

# Export for auditors
aiss.export_audit_chain("audit.json", certified=True)

<10ms per event. Local-first. No network dependency.


For Businesses

Industry Problem PiQrypt Solution
Finance SEC requires 7-year audit trail Cryptographic trade signatures
Healthcare HIPAA compliance for AI decisions Immutable diagnosis records
HR GDPR Art. 22 (explain AI decisions) Verifiable hiring audit
Autonomous Vehicles Legal liability for accidents Black box with crypto proof
Supply Chain Track AI inventory decisions Non-repudiable logistics trail

Compliance: SOC2 • ISO 27001 • HIPAA • GDPR • SEC/FINRA • NIST PQC


🎯 Quick Win: Instant Certification

Need one-time proof without integration?

Upload your log → Pay → Get certified bundle instantly.

Certification Tiers

🔹 Simple

€9

✅ Cryptographic signature
✅ Hash verification
✅ Public badge
✅ Export bundle

Simple Certification €9

🔸 Timestamp

€29

✅ Everything in Simple
RFC 3161 TSA timestamp
✅ Independent time proof
✅ GDPR/HIPAA ready

Timestamp Certification €29

🔶 Post-Quantum

€99

✅ Everything in Timestamp
Dilithium3 signature
✅ Encrypted archive
✅ 50+ year proof

Post-Quantum Bundle €99

How it works:

1. Export your audit trail:
   piqrypt export audit.json

2. Copy the JSON content:
   cat audit.json  # Copy output (Ctrl+A, Ctrl+C)

3. Click certification tier below

4. Stripe checkout opens → Paste JSON in "Audit Data" field

5. Complete payment

6. Receive certified bundle via email (< 5 minutes)

7. Verify: piqrypt certify-verify bundle.piqrypt-certified

That's it! No upload page, no complications. Just copy/paste → pay → receive.

Perfect for:

  • One-time audits
  • Proof of concept
  • Legal disputes
  • Compliance checks

🚀 For Builders: Install & Integrate

Want full control? Install PiQrypt and integrate into your agent.

Installation

pip install piqrypt

Requirements: Python 3.8+

Quick Start

import piqrypt as aiss

# 1. Create identity
private_key, public_key = aiss.generate_keypair()
agent_id = aiss.derive_agent_id(public_key)

# 2. Sign decision
event = aiss.stamp_event(
    private_key,
    agent_id,
    payload={
        "event_type": "trade_decision",
        "action": "buy",
        "symbol": "AAPL",
        "quantity": 100,
        "confidence": 0.95
    }
)

# 3. Store (tamper-proof)
aiss.store_event(event)

# 4. Export for audit
aiss.export_audit_chain("audit-q1-2026.json")

CLI:

piqrypt identity create my-agent.json
piqrypt stamp my-agent.json --payload '{"action": "test"}'
piqrypt export audit.json --certified
piqrypt verify audit.json

Full docs: Quick Start Guide


📊 Pricing: Free → Pro → Enterprise

🆓 Free Tier

Perfect for:

  • Indie developers
  • Prototypes
  • Testing PiQrypt

Includes:

  • 3 agents max
  • Ed25519 signatures
  • JSON storage
  • 50 exports/month
  • 1 Simple certification/month FREE 🔥
pip install piqrypt
# Free tier active immediately

⚡ Early-Bird Pro — €290/year

⏰ Limited-time adoption pricing

Perfect for startups, trading bots, automation workflows.

Includes:

  • 50 (vs 3 Free)
  • Ed25519 + Dilithium3 (post-quantum)
  • AES-256-GCM encrypted storage
  • Unlimited exports
  • 10 Simple certifications/month FREE
  • TSA timestamps (RFC 3161)
  • A2A handshake (agent-to-agent)
  • Email support (48h)
Early-Bird Pro €290/year

⏰ Lock in €290/year before Standard pricing. Limited slots.


🔥 Standard Pro — €390/year

Full premium package

Perfect for growing startups, fintech, compliance-critical systems.

Includes:

  • ✅ Everything in Early-Bird Pro
  • 50 certifications/month FREE (vs 10)
  • Trust scoring dashboard (I/V/D/F) [v1.6]
  • Visual badges (custom branding)
  • Priority support (24h vs 48h)
Standard Pro €390/year

🏢 Enterprise — Custom Pricing

Infrastructure de confiance

Perfect for banks, healthcare, government, autonomous vehicles.

Includes:

  • ✅ Everything in Standard Pro
  • HSM integration (hardware security)
  • REST API + GraphQL
  • Multi-tenant deployment
  • SSO (SAML, OAuth)
  • SLA 99.9% uptime
  • Dedicated support (24h, Slack, Phone)
  • On-premise option
  • SOC2/ISO 27001 audit support
Enterprise Contact

Pricing starts at €10,000/year.

OSS Exemption: Open-source projects get Pro for free. [Apply here](mailto:piqrypt@gmail.com?subject=OSS License Request).


🏗️ How It Works

System Architecture

AISS → Identity Standard PCP → Continuity Enforcement PiQrypt → Reference Implementation

┌─────────────────────────────────────────────────────────────┐
│            Your AI Agent / Application                      │
│  (Trading Bot, HR AI, Autonomous Vehicle, etc.)             │
└──────────────────────────┬──────────────────────────────────┘
                           ↓
                   Makes Decision
                           ↓
┌─────────────────────────────────────────────────────────────┐
│                 🔐 PIQRYPT LAYER                            │
│  • Canonicalize (RFC 8785)                                  │
│  • Sign (Ed25519 / Dilithium3)                              │
│  • Timestamp (RFC 3161 TSA)                                 │
│  • Chain (SHA-256 hash links)                               │
│  • Store (encrypted if Pro)                                 │
└──────────────────────────┬──────────────────────────────────┘
                           ↓
              Immutable Audit Trail
                           ↓
┌─────────────────────────────────────────────────────────────┐
│              Export for Auditors/Regulators                 │
│  • Certified bundles (.piqrypt-certified)                   │
│  • Court-admissible proof                                   │
│  • Compliance reports (SOC2, HIPAA, SEC)                    │
└─────────────────────────────────────────────────────────────┘

PiQrypt secures decision continuity — it doesn't replace your agent.


🌐 AISS Standard

PiQrypt is the reference implementation of AISS v1.1 (Agent Identity & Signature Standard).

What is AISS?

A vendor-neutral, open standard (MIT) for cryptographic audit trails of AI agents.

Repositories:

Think: TLS (standard) vs OpenSSL (implementation)


🔒 Security

Cryptography

Algorithm Standard Purpose
Ed25519 RFC 8032 Classical signatures (128-bit)
Dilithium3 NIST FIPS 204 Post-quantum signatures (256-bit PQ)
SHA-256 NIST FIPS 180-4 Hash chains
AES-256-GCM NIST FIPS 197 Encryption (Pro)

Guarantees

Integrity: Modification breaks chain
Non-repudiation: Agent can't deny actions
Authenticity: Signatures prove authorship
Freshness: Timestamps prove when
Post-quantum: Dilithium3 (50+ years)


🎯 Use Cases

1. Trading Bots (SEC Compliance)

# Sign every trade
event = aiss.stamp_event(priv, agent_id, {
    "event_type": "trade_executed",
    "symbol": "AAPL",
    "quantity": 100,
    "price": 150.25
})

Result: SEC Rule 17a-4 compliant audit trail.


2. Healthcare AI (HIPAA)

# Sign diagnosis
event = aiss.stamp_event(priv, agent_id, {
    "event_type": "diagnosis",
    "condition": "pneumonia",
    "confidence": 0.94,
    "patient_id_hash": sha256(patient_id)  # HIPAA compliant
})

Result: Court-admissible proof of AI recommendation.


3. HR Automation (GDPR Art. 22)

# Sign hiring decision
event = aiss.stamp_event(priv, agent_id, {
    "event_type": "candidate_evaluation",
    "decision": "accept",
    "reasons": ["Relevant experience", "Strong Python"],
    "protected_attributes_used": False  # EEOC
})

Result: GDPR-compliant audit with explanations.


📚 Documentation


🗺️ Roadmap

v1.5.0 (Current) ✅

  • A2A Handshake
  • AISS v1.1 separation
  • MCP Server
  • Pay-per certification

v1.6.0 (Q2 2026)

  • Trust Scoring (I/V/D/F)
  • Visual dashboard
  • A2A Network (DHT)

v1.7.0 (Q3 2026)

  • Witness network
  • HSM integration
  • Blockchain anchoring

📧 Contact & Support


📄 License

Core: MIT License — see LICENSE

e-Soleau: DSO2026006483 (INPI, 19/02/2026)


🚀 Get Started Today

One-time certification:

€9 Simple€29 Timestamp€99 Post-Quantum

Pro subscription:

Early-Bird €290/yearStandard €390/year

Enterprise:

Contact Sales


Free tier:

pip install piqrypt

Built with ❤️ for autonomous systems

PiQrypt — Cryptographic Proof for AI Agents