Applications and SDKs

Ecosystem / auths-proof-apps

The current applications workspace contains 22 Rust packages plus TypeScript, Python, Go, and specification surfaces.

Developer surfaces

Surface	Role
auths-sdk	Trusted-context, verification, issuance, custody, and profile-decoded command facade
auths-enforcement	HTTP, gRPC, CI, MCP, and service-local enforcement entry points
auths-deployment	Replay- and blast-radius-safe deployment execution
auths-profile-kit	Deterministic fixtures and hostile-input scaffolding
@auths-dev/proof	Precompiled WASM with an idiomatic TypeScript API
Python auths-proof	Native verifier wheels with a three-byte-string interface
Independent Go verifier	Language-independent semantic and corpus conformance

Runtime invariant

canonical profile action
  -> pure Auths verification
  -> sealed VerifiedAction
  -> profile-decoded command
  -> atomic replay/budget claims
  -> ExecutableAction<Command>
  -> executor

Authenticated transport peers are additional local-policy facts. They cannot upgrade a denied or indeterminate Auths result.

Current profiles

• deployment-action
• edge-action
• git-action
• http-action
• mcp-tools-call
• supply-chain-action