Assurance engines
Every row below maps to code that runs — verified in this repository's own
pytest tests/ -q (747 tests) and the cold-start CI job that installs from
a bare checkout and runs the offline kit end to end.
| Engine | Command | The finding nobody else produces |
|---|---|---|
| Collect | assurance collect probe |
Finds the vendor tool's own volatile headers before they produce a year of false drift alarms |
| Machine safety | assurance machine verify |
ISO/TS 15066 separation with Sh over Tr + Ts; unchecked is a first-class outcome |
| Machinery Annex III | assurance machinery coverage |
The staleness join — a sign-off from before a change, dated against the change itself |
| Fleet advisory | assurance fleet advisory |
HASH_MISMATCH — a label that contradicts the bytes on the machine, reported as exactly that |
| Watch | assurance watch run |
Exit 0 quiet, 1 findings, 2 could not see — "I could not look" never shares a code with "nothing moved" |
| Attest | assurance attest sign |
A hash chain catches editing; a counter-signature is what catches deletion |
| Offline kit | assurance kit run |
One command inside the plant — their ledger, their disk, a socket guard that proves nothing left |
| Supplier feeds | assurance supplier publish |
A supplier cannot silently un-publish; a withdrawal is a publication, not a deletion |
| Bridge | assurance bridge |
Field 5 (Member States) assembled from serial numbers, never guessed |
See Deploying the register for running the hosted API version of the free and paid routes above.