Air-Gapped Companion Packages for Contract Filtering and Cryptographic Logging
The companion open-source packages (mcp-sentinel 1.1.2, iss-ledger-117 1.1.1, iss-agent-kit 0.1.1, and standalone verifier iss_verifier.py) are distributed under the Apache-2.0 license for offline installation inside isolated environments without external network dependencies.
These packages are intentionally omitted from the public PyPI index (an unrelated package of the same name on PyPI belongs to a third-party author). Installation is performed strictly from the verified offline bundle using the flags --no-index --find-links and validated against the SHA-256 digests below.
1. Distribution Files, Byte Sizes, and Full SHA-256 Digests
Every artifact listed in this table passes the clean-room offline acceptance suite kit-acceptance.py --dist (nineteen of nineteen checks passed, zero failures).
| Distribution Filename | Component Role & Measured Latency | Byte Size | Full SHA-256 Checksum |
|---|---|---|---|
mcp_sentinel-1.1.2-py3-none-any.whl |
In-path contract filter for HTTP and MCP tool calls (~0.016 ms in-memory, ~22.5 ms with disk ledger). |
31 573 B |
681a4db59a1a44e89a2b1386ec4b4f2e1fc23c1025c295b9ebf00fd5d20901ea |
mcp_sentinel-1.1.2.tar.gz |
Source distribution of mcp-sentinel 1.1.2 under the Apache-2.0 license for offline code inspection and reproducible builds. |
36 254 B |
abb88978db7b34a2f1f56e0eff42bcd1365b9cc0eb17e4a4380f7815e4f1b79e |
iss_ledger_117-1.1.1-py3-none-any.whl |
Append-only cryptographic journal implementing GOST R 34.11-2012 (Streebog-256) hash chains for tamper-evident event logging. |
30 396 B |
8d4ffe60f41ebd377c476f369655aaef5e0ac91858a3d294be37fd1e3100bc87 |
iss_ledger_117-1.1.1.tar.gz |
Source archive of iss-ledger-117 1.1.1 with standalone Streebog-256 digest implementation on the Python standard library. |
33 714 B |
6eccef523e24fa60fed29c78866ff12afbab092bd17d51642e00d34dfcea9fa5 |
iss_agent_kit-0.1.1-py3-none-any.whl |
Integration adapters binding autonomous agent tool calls directly to mcp-sentinel and iss-ledger-117. |
9 226 B |
7ed0ae9073f512a5cfd71b62904094ca36d0ae2fdb1b4bfff5900d3e368781c3 |
iss_agent_kit-0.1.1.tar.gz |
Source distribution of iss-agent-kit 0.1.1 packaged for clean-room offline installation without internet access. |
9 685 B |
0314047404888c29a231fc8710874f15bc2bd75e2b89ba7c4c882da3c792116a |
iss_verifier.py |
Single-file Python standard-library verifier that replays and validates every record in the audit hash chain. | 12 456 B |
1ff894574407307d33ec99115652bcaec4e53d06189178696d0db1c767a8608f |
2. Offline Installation and Standalone Hash-Chain Replay
The open package mcp-sentinel 1.1.2 evaluates baseline contracts and synthesized IMMUNE-* rules via deterministic pattern matching on the Python standard library without invoking external satisfiability modulo theories (SMT) solvers. Contract filtering takes approximately 0.016 milliseconds in process memory and approximately 22.5 milliseconds when writing a synchronous GOST R 34.11-2012 (Streebog-256) receipt to disk.
python -m venv .venv
.venv/bin/pip install --no-index --find-links ./dist mcp-sentinel==1.1.2 iss-ledger-117==1.1.1 iss-agent-kit==0.1.1
python iss_verifier.py --ledger audit.jsonlTo request the offline wheel bundle and the indra-core testbed package, contact info@isslan.ru.