# H/M Content Credentials Python adapter

Version: 0.1.0

Status: developer preview

## Install from the immutable wheel

    python -m pip install https://hogarmas.net/content-credentials/python/v0.1.0/hogarmas_content_credentials-0.1.0-py3-none-any.whl

This installs the H/M adapter and its declared official dependency,
c2pa-python 0.32.x. Python 3.10 or newer is required.

## Commands

    hm-c2pa inspect photo.jpg --output inspection.json
    hm-c2pa verify-envelope evidence-envelope.json
    hm-c2pa verify-audit audit-envelope.json
    hm-c2pa verify-package hm-evidence-package.zip

Source-media inspection delegates to the official Content Authenticity
Initiative c2pa-python Reader. Evidence-envelope, audit-report and BagIt package
verification are H/M interoperability contracts.

## Integrity

- Wheel: sha256:a624caac5b8a47b2cd3d583265d7960eb955e4fe7c2a35e9169cdcc32a6e5a7f
- Wheel bytes: 15117
- Source archive: sha256:0084fa59309d4579dd9a416a468f859ff984f4566ef2ca56f234dd3e998533e3
- Source archive bytes: 14634
- Machine manifest: /content-credentials/python/python-manifest.json

## Verified behavior

- Cross-language contract and package tests: 10 passed.
- Browser-generated BagIt evidence package: verified.
- Installed wheel: imported from site-packages.
- Official c2pa-python 0.32.6 fixture C.jpg: manifest present, validation state Valid.
- No-manifest PNG: returned as a neutral observation.

## Boundaries

The H/M package is not an official C2PA SDK. It wraps the official c2pa-python
SDK for media parsing and validation. The H/M Evidence Package is not an
official C2PA evidence-package standard. Checksums are not digital signatures,
do not authenticate the exporter and do not prove factual truth, authorship, AI
absence or legal compliance.

The package has not been published to PyPI. The immutable wheel and source
archive are served directly from hogarmas.net.