REVIEWED 2026-09-08
Inspect what each component does, where the evidence lives, and what remains open.
This is a dated review of repository source, package metadata, and retrieved GitHub workflow results. Source was read at the commits below. Product tests were not executed during this audit; CI results are snapshots, not live monitors or independent assurance.
Execution kernel
PyPI lists 1.0.0rc2, uploaded August 23. The inspected monorepo uses a 1.0.0rc1 fallback. These are different artifacts; release reconciliation remains open.
81de59eabacdAt the inspected monorepo commit, python-gove-zone failed its Python 3.11 test step; the Python 3.12 test job was cancelled. Packaging smoke and platform-lock jobs passed. No tests were rerun for this review.
Inspect CI evidencePython policy library
GitHub release v2.12.0 was published August 15. Package maturity is Beta; individual adapters have their own stability labels.
963977e63b51The inspected head passed Python 3.10-3.13 tests, package checks, docs checks, and governance regression gates. Main CI excludes slow, benchmark, and end-to-end tests.
Inspect CI evidenceMulti-agent coordination
1.1.0 is inspected source metadata. Current package publication was not independently verified. The project separates its core API, advanced integrations, and research modules.
f40af8dea690Default Python 3.11/3.12 tests, type checks, and package checks passed. Overall CI failed when one PostgreSQL authority-store outbox test timed out.
Inspect CI evidenceSelf-hosted HTTP service
3.0.2 is inspected source metadata. No GitHub releases were returned in this audit; current PyPI publication was not independently verified.
e4ecaf56b31aThe inspected head has a green CI run covering selected smoke, regression, conformance, and critical-path suites. It is not a run of every repository test or proof of production operation.
Inspect CI evidenceInfrastructure policy companion
An early companion pack in the ACGS monorepo. This audit verified source and example workflows, not a managed service or independently published package.
81de59eabacdThe repository contains CFT tests and a path-filtered workflow. No CFT run appeared in the 12 workflow runs returned for the inspected monorepo head. No package tests were rerun for this review.
Inspect CI evidenceCLAIM BOUNDARIES
Installing a package does not mediate every action. A kernel receipt check, a Lite validation result, a peer vote, and a bus acceptance response are different contracts.
Only gove-zone’s referenced PyPI artifact and ACGS-Lite’s GitHub release are independently identified here as published artifacts. Other version labels describe inspected source metadata.
Green selected checks do not establish production readiness. Failed or missing runs are shown above. No uptime, latency, customer-count, or current benchmark claim is made.
Policy outcomes and control mappings do not establish certification or regulatory approval. Identity, storage, operations, and deployment evidence need separate review.