Metadata-Version: 2.5
Name: cernus-core
Version: 0.1.0
Summary: Cernus core: canonical security model, versioned JSON Schema contracts, plugin SDK, and deterministic triage policy engine for deployed applications.
Project-URL: Homepage, https://github.com/Inceptium-ai/cernus-framework
Project-URL: Repository, https://github.com/Inceptium-ai/cernus-framework
Project-URL: Issues, https://github.com/Inceptium-ai/cernus-framework/issues
Author-email: Inceptium <opensource@inceptium.ai>
License-Expression: Apache-2.0
License-File: LICENSE
Keywords: compliance,devsecops,fedramp,oscal,sarif,sbom,vulnerability-management
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.12
Requires-Dist: jsonschema>=4.21
Description-Content-Type: text/markdown

# cernus-core

The open core of [Cernus](https://github.com/Inceptium-ai/cernus-framework):
runtime security, continuous compliance, and ATO evidence for deployed
applications.

`cernus-core` has no server, no database, and no network calls of its own. It gives you:

- **Contracts** (`contracts/*.schema.json`) — versioned JSON Schemas for
  `Finding`, `Asset`, `System`, `Deployment`, `PolicySet`, `Decision`,
  `ControlResult`, `EvidenceRecord`, and the `IngestBatch` envelope. Any tool
  can produce or consume Cernus objects; the schemas ship inside the wheel.
- **Model** (`cernus_core.model`) — dataclasses for those objects, with stable
  fingerprints for deduplication.
- **Plugin SDK** (`cernus_core.plugins`) — `Connector` (turn a tool's output
  into an `IngestBatch`), `Scanner` (invoke a tool you already have),
  `Exporter` (write OSCAL/SARIF). Plugins register via entry points; built-ins
  win on name collision; a broken plugin is reported, never fatal.
- **Policy engine** (`cernus_core.policy`) — deterministic, priority-ordered,
  first-match triage rules with a recorded reason per decision, and an explicit
  *unmatched* outcome that becomes the human-review queue.

Most people want the CLI: `pip install cernus-cli`.

## License

Apache-2.0.
