Metadata-Version: 2.4
Name: genesis-mesh
Version: 1.9.2
Summary: Sovereign trust, identity, and communication fabric for AI agents, edge systems, and distributed infrastructure.
Author-email: Genesis Mesh Labs <contact@genesismesh.org>
Maintainer-email: Genesis Mesh Labs <contact@genesismesh.org>
License-Expression: MIT
Project-URL: Homepage, https://genesismesh.org
Project-URL: Documentation, https://docs.genesismesh.org
Project-URL: Repository, https://github.com/GenesisMeshLabs/genesismesh
Project-URL: Issues, https://github.com/GenesisMeshLabs/genesismesh/issues
Project-URL: Releases, https://github.com/GenesisMeshLabs/genesismesh/releases
Project-URL: Live Deployment, https://na.genesismesh.org
Keywords: mesh,p2p,noise-protocol,ed25519,decentralized,trust,identity,revocation,sovereign,agents
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: System Administrators
Classifier: Topic :: System :: Networking
Classifier: Topic :: Security :: Cryptography
Classifier: Operating System :: POSIX :: Linux
Classifier: Operating System :: MacOS
Classifier: Operating System :: Microsoft :: Windows
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Framework :: Flask
Requires-Python: >=3.12
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: cryptography==50.0.0
Requires-Dist: PyNaCl==1.6.2
Requires-Dist: requests==2.34.2
Requires-Dist: Flask==3.1.3
Requires-Dist: pydantic==2.13.4
Requires-Dist: python-dateutil==2.9.0.post0
Requires-Dist: click==8.4.1
Requires-Dist: dissononce==0.34.3
Requires-Dist: websockets==16.0
Requires-Dist: gunicorn==22.0.0
Provides-Extra: postgres
Requires-Dist: psycopg[binary]==3.3.6; extra == "postgres"
Provides-Extra: dev
Requires-Dist: pytest==9.0.3; extra == "dev"
Requires-Dist: pytest-asyncio==1.4.0; extra == "dev"
Requires-Dist: mypy==2.1.0; extra == "dev"
Requires-Dist: ruff==0.17.1; extra == "dev"
Requires-Dist: hypothesis==6.170.0; extra == "dev"
Requires-Dist: pytest-cov==7.1.0; extra == "dev"
Requires-Dist: coverage==7.16.2; extra == "dev"
Requires-Dist: pip-audit==2.10.0; extra == "dev"
Requires-Dist: pre-commit==4.4.0; extra == "dev"
Provides-Extra: docs
Requires-Dist: sphinx==9.1.0; extra == "docs"
Requires-Dist: furo==2025.12.19; extra == "docs"
Requires-Dist: myst-parser==5.1.0; extra == "docs"
Requires-Dist: sphinxcontrib-mermaid==2.0.2; extra == "docs"
Dynamic: license-file

<h1>
  <img src="genesis_mesh/na_service/operator_console/static/logo.svg" alt="Genesis Mesh logo" width="80" align="absmiddle">
  Genesis Mesh
</h1>

[![PyPI](https://img.shields.io/pypi/v/genesis-mesh)](https://pypi.org/project/genesis-mesh/)
[![Python](https://img.shields.io/pypi/pyversions/genesis-mesh)](https://pypi.org/project/genesis-mesh/)
[![CI](https://github.com/GenesisMeshLabs/genesismesh/actions/workflows/ci.yml/badge.svg)](https://github.com/GenesisMeshLabs/genesismesh/actions/workflows/ci.yml)
[![Interoperability](https://github.com/GenesisMeshLabs/genesismesh/actions/workflows/interop.yml/badge.svg)](https://github.com/GenesisMeshLabs/genesismesh/actions/workflows/interop.yml)
[![Docs](https://img.shields.io/badge/docs-online-blue)](https://docs.genesismesh.org)
[![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)

Genesis Mesh is a protocol for sovereign communities to establish, delegate,
recognize, and revoke trust across organizational boundaries. It gives AI
agents, edge systems, and distributed infrastructure a portable trust fabric:
cryptographic identity, signed attestations, delegated authority, cross-sovereign
recognition, revocation propagation, and auditable trust state — without a
shared root of trust between sovereigns.

## Status

Genesis Mesh 1.x is the current release line (1.9.2 today). The surfaces
listed as stable in the [public contract](https://docs.genesismesh.org/reference/public-contract.html)
follow [`DEPRECATION_POLICY.md`](DEPRECATION_POLICY.md) for the whole 1.x line,
and upgrades from 0.59 onward are rehearsed in CI. The Rust SDK, the edge agent
and the gateway are beta. Federation between separately operated sovereigns is
not yet proven in production: a second, separately implemented sovereign and an
operator outside Genesis Core are still pending.

## Installation

```bash
pip install genesis-mesh
```

Requires Python 3.12 or later.

The Network Authority and the gateway also ship as signed container images,
`ghcr.io/genesismeshlabs/genesis-mesh` and
`ghcr.io/genesismeshlabs/genesis-mesh-gateway`, for `linux/amd64` and
`linux/arm64`. Verify them before deploying: see
[Container Images](https://docs.genesismesh.org/operations/container-images.html).

## Components

Each component has its own repository and releases at the same version as the
Network Authority. The [stability page](https://docs.genesismesh.org/stability.html)
says what each one promises.

- **SDKs:** TypeScript (`genesis-mesh-sdk` on npm), Go
  (`github.com/GenesisMeshLabs/sdk-go`), .NET (`genesismesh-sdk-dotnet` on
  NuGet) and Rust (`genesis-mesh-sdk`, a Git dependency; beta). See
  [SDK Clients](https://docs.genesismesh.org/sdk/index.html).
- **`genesis-mesh-verify`:** a standalone verifier for evidence exports, audit
  packs and key histories, released with the Rust SDK. See
  [The Rust Verifier](https://docs.genesismesh.org/operations/independent-verification.html).
- **`genesis-mesh-edge` (beta):** the edge agent, which acts for one device;
  static binaries with the Rust SDK release and the image
  `ghcr.io/genesismeshlabs/genesis-mesh-edge`. See
  [Edge agent](https://docs.genesismesh.org/operations/edge-agent.html).
- **MCP server (development, outside the release train):**
  [`genesismesh-mcp`](https://github.com/GenesisMeshLabs/genesismesh-mcp), which
  gives AI assistants and agents the Network Authority's operations, offline
  verification and signing as Model Context Protocol tools, over stdio or
  Streamable HTTP with OAuth. Pinned to the release it supports. See
  [MCP Server](https://docs.genesismesh.org/concepts/mcp-server.html).
- **Gateway (beta):** `genesis-mesh-gateway`, a Rust service that checks
  signed join certificates against its policy, follows the authorities'
  revocation lists and forwards scoped calls to them. See
  [Rust Gateway](https://docs.genesismesh.org/concepts/rust-gateway.html).

## Quick start

```bash
# Initialize keys, genesis block, and CLI config (run once).
genesis-mesh init

# Start the Network Authority.
genesis-mesh na start

# In a second terminal — create an invite and join.
INVITE_TOKEN=$(genesis-mesh admin invite --role anchor)
genesis-mesh join --na http://127.0.0.1:8443 --token "$INVITE_TOKEN"

# Inspect trust state.
genesis-mesh status
```

Or run the full local smoke test in one command:

```bash
genesis-mesh dev up
```

## HTTP API

The Network Authority's HTTP API covers every protocol operation. The
[public contract](https://docs.genesismesh.org/reference/public-contract.html)
marks each route stable or beta. The SDKs call the API, and can also verify
signed records offline, without asking the NA.

Full HTTP reference: [docs/api/trust-http.md](docs/api/trust-http.md)

## Documentation

Full documentation, operator guides, protocol RFCs, and example walkthroughs:

**[docs.genesismesh.org](https://docs.genesismesh.org)**

## Contributing

See [CONTRIBUTING.md](CONTRIBUTING.md) for development setup, branch naming,
commit style, and the protocol-change process, and
[docs/development/architecture.md](docs/development/architecture.md) for the
package map, the layer rules and where a change goes.

## Security

Vulnerability reports: [github.com/GenesisMeshLabs/genesismesh/security/advisories/new](https://github.com/GenesisMeshLabs/genesismesh/security/advisories/new)

See [SECURITY.md](SECURITY.md) for the threat model and disclosure policy.

## License

[MIT](LICENSE)
