Fix #104: [milestone Milestone 4 ] Add schemas/aep/memory-evidence.schema.json — tamper-evident memory read/wri...

[telleroutlook]

Fixes #104

Generated by claude-bot-go worker.

[telleroutlook]

Summary

Clean additive PR: new MemoryEvidence schema with index registration, valid/invalid fixtures, and a pytest conformance wrapper; no blockers.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:6 Root object omits additionalProperties:false while the nested signature object enforces it; for a tamper-evident record this permits unexpected top-level fields the optional signature may not cover.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Clean additive PR: new MemoryEvidence schema with index registration, valid/invalid fixtures, and a pytest conformance wrapper; no blockers.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 6,
      "issue": "Root object omits additionalProperties:false while the nested signature object enforces it; for a tamper-evident record this permits unexpected top-level fields the optional signature may not cover.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 1
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.15s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Additive PR adds a well-formed MemoryEvidence schema with valid/invalid fixtures and a pytest wrapper for the existing conformance harness; no compile errors, no test weakening, no API break.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:8 Top-level object omits additionalProperties: false even though the nested signature object sets it (line 25); for a tamper-evident evidence record, unexpected top-level fields will silently validate, which is inconsistent with the stricter nested envelope.
2. schemas/aep/memory-evidence.schema.json:13 digest and prior_digest are unstructured strings with no pattern/format constraint (e.g. a ^sha256:[0-9a-f]{64}$ regex), so malformed digests like 'base64sig==' or arbitrary text will pass validation.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Additive PR adds a well-formed MemoryEvidence schema with valid/invalid fixtures and a pytest wrapper for the existing conformance harness; no compile errors, no test weakening, no API break.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 8,
      "issue": "Top-level object omits additionalProperties: false even though the nested signature object sets it (line 25); for a tamper-evident evidence record, unexpected top-level fields will silently validate, which is inconsistent with the stricter nested envelope.",
      "kind": "suggestion"
    },
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 13,
      "issue": "digest and prior_digest are unstructured strings with no pattern/format constraint (e.g. a ^sha256:[0-9a-f]{64}$ regex), so malformed digests like 'base64sig==' or arbitrary text will pass validation.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 2
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.053s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

PR adds a new memory-evidence schema with consistent valid/invalid fixtures and a pytest conformance wrapper; all changes are additive and self-consistent.

Severity

none

Blocking findings

None.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "none",
  "summary": "PR adds a new memory-evidence schema with consistent valid/invalid fixtures and a pytest conformance wrapper; all changes are additive and self-consistent.",
  "findings": [],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 3
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 5.398s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Clean additive PR: new MemoryEvidence schema with index registration, correctly-formed valid/invalid fixtures, and a pytest conformance wrapper; no blockers.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:27 Top-level schema omits additionalProperties:false (only the signature sub-object enforces it); for a tamper-evident evidence record, unexpected fields would silently validate.
2. package-lock.json:1 New package-lock.json carries only package metadata with no resolved dependencies; appears unrelated to the schema additions and may be a stray artifact.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Clean additive PR: new MemoryEvidence schema with index registration, correctly-formed valid/invalid fixtures, and a pytest conformance wrapper; no blockers.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 27,
      "issue": "Top-level schema omits additionalProperties:false (only the signature sub-object enforces it); for a tamper-evident evidence record, unexpected fields would silently validate.",
      "kind": "suggestion"
    },
    {
      "file": "package-lock.json",
      "line": 1,
      "issue": "New package-lock.json carries only package metadata with no resolved dependencies; appears unrelated to the schema additions and may be a stray artifact.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 4
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.032s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Additive schema registration with valid/invalid fixtures and a pytest wrapper; no blockers identified.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:6 Root object declares type:object but omits additionalProperties:false, while the nested signature object enforces it — inconsistent strictness that permits stray top-level fields.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Additive schema registration with valid/invalid fixtures and a pytest wrapper; no blockers identified.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 6,
      "issue": "Root object declares type:object but omits additionalProperties:false, while the nested signature object enforces it — inconsistent strictness that permits stray top-level fields.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 5
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.119s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

PR adds the MemoryEvidence AEP schema with valid/invalid fixtures and a pytest conformance wrapper; no blockers, only minor schema-hardening suggestions.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:10 Top-level object lacks additionalProperties: false; for a record described as tamper-evident/non-repudiable, leaving the root open permits unexpected fields the signature envelope would then have to cover ambiguously. The nested signature object correctly locks this down (line 21), but the root does not.
2. schemas/aep/memory-evidence.schema.json:11 Schema uses required field timestamp_ms, but schemas/index.json describes the shared AEP envelope base as carrying created_at_ms; if MemoryEvidence is meant to share that envelope, the field-name divergence (and absence of created_at_ms) should be reconciled or documented as intentional.
3. tests/test_conformance.py:20 import conformance depends on tests/conformance.py existing out-of-diff; the module is not shown here, so a missing/stale file would surface as an ImportError at collection time — verify it is present in the target branch.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "PR adds the MemoryEvidence AEP schema with valid/invalid fixtures and a pytest conformance wrapper; no blockers, only minor schema-hardening suggestions.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 10,
      "issue": "Top-level object lacks `additionalProperties: false`; for a record described as tamper-evident/non-repudiable, leaving the root open permits unexpected fields the signature envelope would then have to cover ambiguously. The nested `signature` object correctly locks this down (line 21), but the root does not.",
      "kind": "suggestion"
    },
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 11,
      "issue": "Schema uses required field `timestamp_ms`, but schemas/index.json describes the shared AEP envelope base as carrying `created_at_ms`; if MemoryEvidence is meant to share that envelope, the field-name divergence (and absence of `created_at_ms`) should be reconciled or documented as intentional.",
      "kind": "suggestion"
    },
    {
      "file": "tests/test_conformance.py",
      "line": 20,
      "issue": "`import conformance` depends on tests/conformance.py existing out-of-diff; the module is not shown here, so a missing/stale file would surface as an ImportError at collection time — verify it is present in the target branch.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 6
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.248s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Additive PR adding the MemoryEvidence AEP schema, an index entry, valid/invalid fixtures, and a pytest conformance wrapper; no blockers found.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:6 Root object omits additionalProperties: false while the nested signature object enforces it, so unknown top-level fields would pass validation silently on a tamper-evident record.
2. tests/test_conformance.py:20 Imports the conformance module (tests/conformance.py) which is not present in this diff; if it is not already in the repo, pytest collection fails with ImportError.
3. package-lock.json:1 Introduces a new minimal npm lockfile at the root of an otherwise Python/schema project; confirm npm tooling is intended here.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Additive PR adding the MemoryEvidence AEP schema, an index entry, valid/invalid fixtures, and a pytest conformance wrapper; no blockers found.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 6,
      "issue": "Root object omits additionalProperties: false while the nested signature object enforces it, so unknown top-level fields would pass validation silently on a tamper-evident record.",
      "kind": "suggestion"
    },
    {
      "file": "tests/test_conformance.py",
      "line": 20,
      "issue": "Imports the conformance module (tests/conformance.py) which is not present in this diff; if it is not already in the repo, pytest collection fails with ImportError.",
      "kind": "suggestion"
    },
    {
      "file": "package-lock.json",
      "line": 1,
      "issue": "Introduces a new minimal npm lockfile at the root of an otherwise Python/schema project; confirm npm tooling is intended here.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 7
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.049s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Clean additive PR registering the MemoryEvidence schema with matching valid/invalid fixtures and a pytest conformance wrapper; no blockers, only minor suggestions.

Severity

low

Blocking findings

1. tests/test_conformance.py:17 Imports the conformance module which is not shown in this diff; if tests/conformance.py is not already present in the repo, pytest collection will fail with ImportError.
2. schemas/aep/memory-evidence.schema.json:6 Root object does not set additionalProperties:false while the nested signature object does; decide intentionally whether unknown top-level fields should be rejected for this evidence record.
3. package-lock.json:1 New package-lock.json introduced for @wasmagent/protocol@0.1.5 with no declared dependencies; per policy lock-file-only changes are suggestion-level, but confirm tracking this file aligns with the repo's existing build setup.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Clean additive PR registering the MemoryEvidence schema with matching valid/invalid fixtures and a pytest conformance wrapper; no blockers, only minor suggestions.",
  "findings": [
    {
      "file": "tests/test_conformance.py",
      "line": 17,
      "issue": "Imports the `conformance` module which is not shown in this diff; if tests/conformance.py is not already present in the repo, pytest collection will fail with ImportError.",
      "kind": "suggestion"
    },
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 6,
      "issue": "Root object does not set additionalProperties:false while the nested signature object does; decide intentionally whether unknown top-level fields should be rejected for this evidence record.",
      "kind": "suggestion"
    },
    {
      "file": "package-lock.json",
      "line": 1,
      "issue": "New package-lock.json introduced for @wasmagent/protocol@0.1.5 with no declared dependencies; per policy lock-file-only changes are suggestion-level, but confirm tracking this file aligns with the repo's existing build setup.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 8
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.051s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Summary

Clean additive PR: new MemoryEvidence schema with matching valid/invalid fixtures, index registration, and a pytest conformance wrapper; no blockers.

Severity

low

Blocking findings

1. schemas/aep/memory-evidence.schema.json:8 Top-level object omits additionalProperties:false while the nested signature object enforces it, allowing unexpected keys on the evidence record itself; inconsistent strictness.

Verdict

✅ Approved

Merge risk

low

Audit

• model: opus
• effort: high
• tokens: input=0, output=0

{
  "approved": true,
  "severity": "low",
  "summary": "Clean additive PR: new MemoryEvidence schema with matching valid/invalid fixtures, index registration, and a pytest conformance wrapper; no blockers.",
  "findings": [
    {
      "file": "schemas/aep/memory-evidence.schema.json",
      "line": 8,
      "issue": "Top-level object omits additionalProperties:false while the nested signature object enforces it, allowing unexpected keys on the evidence record itself; inconsistent strictness.",
      "kind": "suggestion"
    }
  ],
  "merge_risk": "low",
  "Model": "opus",
  "model": "claude-cli",
  "effort": "high",
  "tokens": {
    "input_tokens": 0,
    "output_tokens": 0
  },
  "same_verdict_count": 9
}

[telleroutlook]

Merge gate failed: go test ./... exited non-zero.

verify manifest: (defaults — no .claude-bot/verify.yml)
  [FAIL] pip-install (if [ -d .venv ]; then .venv/bin/pip install -e ".[dev]" -q; else pip install -e ".[dev]" -q 2>/dev/null || pip install -e . -q; fi) took 1.037s

Failing command output:
error: externally-managed-environment

× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
    python3-xyz, where xyz is the package you are trying to
    install.
    
    If you wish to install a non-Debian-packaged Python package,
    create a virtual environment using python3 -m venv path/to/venv.
    Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
    sure you have python3-full installed.
    
    If you wish to install a non-Debian packaged Python application,
    it may be easiest to use pipx install xyz, which will manage a
    virtual environment for you. Make sure you have pipx installed.
    
    See /usr/share/doc/python3.12/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

[telleroutlook]

Superseded by PR #152, which adds memory-evidence.schema.json with a more complete implementation. Closing the older version to avoid duplicates.