ciris-verify
Python bindings for CIRISVerify hardware-rooted license verification
What it is and what it does
CIRISVerify is a Python wrapper around a hardware-rooted license verification system designed for the CIRIS ecosystem. It lets you check whether a software installation has a valid professional license, what capabilities are available under that license, and whether the system is running in community (unlicensed) mode. The package depends on pydantic for data validation and requires the separate CIRISVerify binary to perform actual verification.
The typical workflow is to initialize a verifier, call get_license_status() with a challenge nonce, and inspect the returned status object to decide whether to enable licensed features or operate in restricted community mode. The package enforces mandatory disclosure: you must display the disclosure text to users to ensure transparency about the agent's capabilities and licensing state. It also provides a MockCIRISVerify class for testing without the binary, and detailed error types (BinaryNotFoundError, BinaryTamperedError, VerificationFailedError) to handle different failure modes.
Use it for:
- Gate professional AI agent capabilities behind license verification, falling back to community mode when unlicensed.
- Verify license tier and display appropriate feature sets to users based on their subscription level.
- Detect binary tampering or integrity violations and halt operations immediately as a security safeguard.
- Test license-dependent code paths in CI/CD pipelines using MockCIRISVerify without requiring the binary.
- Handle offline scenarios gracefully using the LICENSED_PROFESSIONAL_GRACE status during grace periods.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Provides Python bindings to verify hardware-rooted software licenses through the CIRISVerify binary, checking license status and capability permissions with mandatory disclosure enforcement.
Yes, with conditions. Install if you are building within the CIRIS ecosystem and need to enforce license-based capability gating with hardware-rooted verification. The package is actively maintained, has no known vulnerabilities, and provides clear error handling and testing support. However, the separate binary dependency and AGPL-3.0-or-later license mean you must verify binary availability before deployment and review copyleft obligations for your use case.
Install
ciris-verify on PyPI
pip
pip install ciris-verifyuv
uv add ciris-verifypoetry
poetry add ciris-verifyInstalling ciris-verify
Before you install
Medium install friction: requires the separate CIRISVerify binary to be installed independently of the Python package. Active maintenance (released 2026-08-14, last commit 2026-08-14) with current Python support (3.10–3.13). Prebuilt wheels available for macOS, Linux, and Windows.
License in practice
AGPL-3.0-or-later: derivative works and modifications must be released under the same license. Suitable for open-source projects; proprietary or closed-source applications should review AGPL obligations carefully before adoption.
Quickstart
pip install ciris-verify
import os
from ciris_verify import CIRISVerify
verifier = CIRISVerify()
status = await verifier.get_license_status(challenge_nonce=os.urandom(32))
if status.allows_licensed_operation():
print(f"Tier: {status.license.tier}")
print(status.mandatory_disclosure.text)
The CIRISVerify binary must be installed separately; the Python package alone is not functional without it. Requires Python 3.10 or later.
Verify before relying
- Whether the mandatory disclosure enforcement is a hard requirement or advisory in production deployments.
- Performance characteristics and latency of license verification calls in high-concurrency scenarios.
- Behavior and fallback strategy when the binary is unavailable or verification fails in production.
Package facts
| License | AGPL-3.0-or-later (agpl) |
| Python support | supports the current Python release (>=3.10) |
| Install friction | medium — platform-specific wheel |
| Runtime dependencies | 1 — pydantic |
| Maintenance | actively maintained — 0 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 89,780/month — #13,636 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: ciris_verify-13.2.0-py3-none-macosx_10_12_x86_64.whl; ciris_verify-13.2.0-py3-none-macosx_11_0_arm64.whl; ciris_verify-13.2.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl; ciris_verify-13.2.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl; ciris_verify-13.2.0-py3-none-win_amd64.whl
Tags
More Cryptography packages
Certifi provides Mozilla's curated collection…
copyleft · top 100 on PyPI
cryptographycryptography provides cryptographic recipes and…
permissive · top 100 on PyPI
rsaPure-Python RSA encryption, decryption,…
permissive · top 1,000 on PyPI
pyOpenSSLpyOpenSSL wraps OpenSSL's SSL/TLS functionality…
permissive · top 1,000 on PyPI
azure-identityProvides Microsoft Entra ID token-based…
unclear · top 1,000 on PyPI
PyNaClPyNaCl provides Python bindings to libsodium…
permissive · top 1,000 on PyPI
ciris-serverEmbeds a Rust-based federation node that…
agpl · top 15,000 on PyPI
ciris-persistCIRISPersist provides unified, versioned…
agpl · top 15,000 on PyPI
DafnyRuntimePythonProvides the Python runtime library needed to…
permissive · top 15,000 on PyPI
signifyValidates and inspects Windows Authenticode…
permissive · top 15,000 on PyPI
securesystemslibSecuresystemslib provides a cryptography…
permissive · top 5,000 on PyPI
okta-jwt-verifierVerifies JWT tokens issued by Okta, checking…
permissive · top 15,000 on PyPI
ciris-edgeA Rust-based transport and replication layer…
agpl · top 15,000 on PyPI
vonage-verifyVonage Verify package provides Python…
permissive · top 15,000 on PyPI
service-identityVerifies that cryptography or pyOpenSSL…
permissive · top 5,000 on PyPI
vonage-verify-legacyProvides Python bindings for Vonage's legacy…
permissive · top 15,000 on PyPI