LiquiLens Evidence Carrier

LiquiLens Evidence Carrier is a transport-neutral contract for moving financial evidence through files, warehouses, event buses, observability systems, data catalogs, FDC3 desktops, notebooks, citations, and AI agents without dropping provenance, rights, freshness, or authority boundaries.

The carrier is infrastructure for inspection and reproducibility. It is not an order, recommendation, credit rating, market-data entitlement, or endorsement by Bloomberg, LSEG, FactSet, FINOS, or any other platform.

The current signed and published core release is v0.19.0. Annotated tag object c3239bfc7c4d3c4b7fc5ce26e0f602962e7d4337 targets the allowlisted SSH-signed release commit 8f5738c9e77cc95b9a68543d478b9521f5595d61, tree acca6fa7aab75ebc91bf044e153c6468cd6f9c0c; remote main resolved to the same commit when the receipt was verified. The exact commit passed preflight run 33630656569, and release run 33630790150 published 23 assets at 2026-09-02T12:36:19Z. All 22 entries in the downloaded SHA256SUMS passed; its SHA-256 is c6d52cbf8794db6e478e3b2ea9e1ed8eee7757137650892a6a96fcbb839bb6bc. Attestation 44695012 binds the 22 non-manifest artifacts to the tagged source. The official MCP Registry record is active/latest at 0.19.0 and pins MCPB SHA-256 11db11aefafcc6c4ba558877d1f9892fc708150b3afbaa28a741e74435b9a91a.

Release v0.19.0 preserves every Trade Safety v1 schema byte and adds the deterministic adversarial corpus, dependency-free TypeScript-compatible Node raw-UTF8 verifier and authenticated paper-only order guard, OpenBB 0.2.0 hash-only verification, and MCP corpus discovery. Gateway 0.1.2 pins core 0.19.0 and remains a read-only, hash-only sandbox with no broker route. Container run 33630789998 published and smoke-tested the core multi-platform index at sha256:bdbfed2afa87f25e8ef88dffeb4ba7ab198854705528c0de5abe31552a170b9a; attestation 44695462 binds that digest to the tagged source. Separately, gateway run 33630790011 published and smoke-tested gateway index sha256:b5c43013da1fdddd9e6e56cab0e4f0f562e39ab25cc640869c5008e3457218e3; attestation 44695195 binds it to the same commit. These are package and registry artifacts, not a hosted gateway, live-order activation, or financial authority.

A later independent gateway-only publication used signed annotated tag trade-safety-gateway-v0.1.3, tag object 757c18928c8036910ab50c80ec073679d7434abf, targeting signed commit fa8e25ae8e0e992611706b8d66e951342d594243 and tree 7680694bf3397a0844f2388fb29067ff402f066d. Gateway run 33651560380 published and smoke-tested the amd64/arm64 index sha256:9b8f704547ecf6c43039b34149d6cca842de5d66cba13c040199cf5f3f216d61; attestation 44751184 binds that digest to the tagged source. The run recorded semantic, source-commit, and signed-tag-object aliases without moving latest or a core-* alias. There is no corresponding GitHub Release object and no hosted deployment or paid-route activation is claimed. See the exact gateway 0.1.3 publication receipt.

See docs/RELEASE-0.19.0.md for the complete release, Registry, artifact, and OCI receipt. GitHub reports the Release record itself as immutable: false; version-tag ruleset 21288366 blocks v* tag update and deletion with no bypass, and the current assets are checksum- and transparency-attested, but they are not described as platform-enforced immutable assets. The complete historical v0.18.0 receipt remains docs/RELEASE-0.18.0.md.

The immutable annotated v0.17.0 tag object cb85e527c2b74abf476fd9a01b73b2235ce976b7 targets protected-main merge edde9b92ad9851d2974b91326a8c3877f4386d3a, but its release run 33585764285 failed at the commit-signature gate before any artifact was built, attested, or published. There is no v0.17.0 GitHub release or official MCP Registry record. See docs/RELEASE-0.17.1.md for the unchanged recovery receipt and docs/RELEASE-0.17.0.md for the unchanged failed-attempt record.

Why it travels

One verified JSON object can be embedded in:

• FDC3 contexts and app-directory workflows;
• CloudEvents and OpenTelemetry logs;
• OpenLineage custom facets and data catalogs;
• Arrow or Parquet schema metadata;
• dbt warehouse tests, CSV, SQL, and spreadsheets;
• CSL-JSON citations and PROV-O knowledge graphs; and
• MCP or other agent responses.

Every full carrier preserves event_time <= knowledge_time <= as_of, source hashes, explicit redistribution rights, a content-derived identity, and an all-false execution/recommendation/credit-rating boundary. Restricted or unknown rights fail closed; incomplete or expired evidence is redacted to a separately identified reference rather than silently upgraded.

Install and verify

The installation guide covers ordinary conda-forge 0.15.0, the listed Dev Container Feature (Carrier 0.14.0), and SchemaStore editor setup. Those channels have their own versions; use the signed 0.19.0 wheel below for the current core release and Trade Safety verification.

# Source checkout (main may contain post-release documentation)
uv sync --locked
uv run liquilens-evidence --help

# Signed v0.19.0 wheel; checksum verified against the release manifest
python -m pip install 'https://github.com/beepboop2025/liquilens-evidence-carrier/releases/download/v0.19.0/liquilens_evidence-0.19.0-py3-none-any.whl#sha256=1adccb72376f50456fd16a979e372f802ae73ba35b766633bc3d8bd4ab5abcc8'
liquilens-evidence issue examples/descriptor.json > carrier.json
liquilens-evidence verify carrier.json --as-of 2026-08-24T12:00:00Z
liquilens-evidence convert carrier.json --format fdc3

Published release v0.19.0 provides a wheel and checksum manifest. The Python runtime has no third-party dependencies. A Node.js verifier is also included for cross-language liquilens-hash-tree-v1 identity checks:

node protocol/verify_hash_tree_v1.mjs --artifact evidence-carrier carrier.json
node protocol/verify_hash_tree_v1.mjs --artifact fleet-brief fleet-brief.json
node protocol/verify_hash_tree_v1.mjs --artifact trade-safety-receipt receipt.json

Canonical contract identities

The five Trade Safety identities above are stable schema $id values. LiquiLens Pages run 33592149926 succeeded at 2026-09-02T04:49:12Z for site revision 3ec660175c81c5b282715ee400eea2f771dc2610; its post-deploy gate retrieved all five URLs over HTTPS and matched their exact bytes to the hashes in protocol/catalog.json. This is schema-hosting proof, not a hosted Trade Safety gateway or live-order activation receipt.