Skip to content

chore(marketplace): verify parmana-server - #314

Merged
imran-siddique merged 4 commits into
mainfrom
chore/verify-parmana-server
Oct 15, 2026
Merged

imran-siddique merged 4 commits into
mainfrom
chore/verify-parmana-server

Conversation

@imran-siddique

Copy link
Copy Markdown
Member

Flips parmana-server to Verified after #313. Reproduction steps from its README run clean on released packages; details are in the new README section.

🤖 Generated with Claude Code

Reproduced the README steps on released parmana 1.6.0 and
agentrust-trace 0.11.0 after #313: four references emitted, fixtures
regenerate byte for byte, 18 tests pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
@imran-siddique
imran-siddique requested review from a team and carloshvp as code owners October 13, 2026 16:56
imran-siddique and others added 3 commits October 13, 2026 12:00
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com>
@noah-ing

Copy link
Copy Markdown
Collaborator

I’ll review the offline reproduction and Verified-tier claims at 6315271, including the released-package fixture path and catalog consistency.

@noah-ing noah-ing left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed 6315271; no blocking findings for the explicitly scoped offline-fixture promotion.

Reproduced the README in a fresh Python 3.12 environment with released parmana==1.6.0 and agentrust-trace==0.11.0: four references emitted, references.json unchanged byte for byte, and all 18 integration tests passed. The tests verify the decision and approver signatures and reject altered amounts, outcomes, approval limits and the wrong signing key.

The 28 repository validation tests passed, as did manifest/compatibility validation, generated index/catalog checks, diff checks and a merge simulation against af507cb. The manifest correctly declares an external-evidence-source without a TRACE conformance level.

This supports the README's offline scope only: I did not rerun the originating Parmana server evaluation or exercise a real payment connector. The mock/no-observed-effect, supplied-key and example-resolver limitations remain explicit. Maintainers retain the tier/merge decision.

@rajnisht7 rajnisht7 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed head 6315271. Tier flip looks consistent across yaml, README, and catalog. Reproduction notes match the offline fixture path, and the limitations stay clear

@imran-siddique
imran-siddique merged commit 5612f39 into main Oct 15, 2026
36 checks passed
@imran-siddique
imran-siddique deleted the chore/verify-parmana-server branch October 15, 2026 01:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants