bundle_release

Overview

The bundle_release tool generates a complete evidence package for legal deposit. This bundle can be uploaded to copyright registration services like SafeCreative, INPI, or USPTO.

Parameters

project string requis

Project ID as configured in SESHAT.

tag string requis

Git tag for the release (e.g., v1.0.0).

output_path string

Repertoire de sortie personnalise. Par defaut : {repo}/releases/.

Bundle Contents

The generated bundle includes:

File	Description
`{project}_{tag}_source.zip`	Complete source archive at tag
`RD_REPORT.md`	R&D hours summary for tax credits
`PROOF_CHAIN.json`	All proof entries (fingerprints, IP Secure contribution IDs, eIDAS certificate URLs) with Merkle root
`MANIFEST.json`	SHA-512 hashes of all files

Optional Files (if enabled)

File	Requires	Description
`IPFS_PROOF.json`	`ENABLE_IPFS=true`	IPFS CID and encryption details
`SIGNATURE.pqc.json`	`ENABLE_PQC=true`	Post-quantum hybrid signature

Response

{
  "project": "my-project",
  "tag": "v1.0.0",
  "bundle_path": "/exports/my-project_v1.0.0/",
  "files": [
    "my-project_v1.0.0_source.zip",
    "RD_REPORT.md",
    "PROOF_CHAIN.json",
    "MANIFEST.json",
    "IPFS_PROOF.json",
    "SIGNATURE.pqc.json"
  ],
  "merkle_root": "sha512:abc123...",
  "total_hours": 156.5,
  "attestation_count": 42,
  "ipsecure_contribution_id": "BundleContribXY",
  "ipsecure_certificate_url": "https://certigna.fr/cert/bundle-v1.0.pdf"
}

Generated Files

RD_REPORT.md

# R&D Report - my-project v1.0.0

## Summary
- **Total Hours**: 156.5
- **Period**: 2025-06-01 to 2026-01-16
- **Attestation Count**: 42

## Hours by Class
| Class | Hours | Percentage |
|-------|-------|------------|
| S - Strategic | 45.0 | 28.8% |
| A - Advanced | 78.5 | 50.2% |
| C - Common | 33.0 | 21.0% |

## Certified Notes
| Date | File | Hours | Class | IP Secure |
|------|------|-------|-------|-----------|
| 2026-05-15 | research/ml-integration.md | 4.0 | S | mwMWTpjmu3 |
| ... | ... | ... | ... | ... |

PROOF_CHAIN.json

{
  "version": "1.0.0",
  "project": "my-project",
  "tag": "v1.0.0",
  "generated_at": "2026-01-16T12:00:00Z",
  "merkle_root": {
    "algorithm": "sha512",
    "full": "abc123...",
    "short": "abc123"
  },
  "attestations": [
    {
      "category": "research",
      "fingerprint": "sha512:...",
      "ipsecure_contribution_id": "mwMWTpjmu3",
      "ipsecure_certificate_url": "https://certigna.fr/cert/abc123.pdf",
      "timestamp": "2026-01-15T10:00:00Z"
    }
  ],
  "bundle_attestation": {
    "ipsecure_contribution_id": "BundleContribXY",
    "ipsecure_certificate_url": "https://certigna.fr/cert/bundle-v1.0.pdf"
  }
}

MANIFEST.json

{
  "files": [
    {
      "path": "src/index.ts",
      "sha512": "abc123...",
      "size": 4521
    }
  ],
  "total_files": 68,
  "total_size": 398765
}

Workflow

Ensure all PRs sealed

Verify recent PRs are attested before bundling.
Create and seal tag
Fenêtre de terminal
```
git tag v1.0.0
git push origin v1.0.0
```
Then seal the tag with the seal tool.

Generate bundle

Generate legal bundle for project "my-project" tag "v1.0.0"

Upload to registry

Upload the bundle to SafeCreative, INPI, or your chosen service.

Use Cases

Upload the complete bundle to SafeCreative or equivalent. The PROOF_CHAIN.json provides verifiable timestamps.

R&D Tax Credits

Use RD_REPORT.md as supporting documentation for CIR/CII applications. The eIDAS certificates (Certigna QTSP) prove the work timeline with legal value (Règlement UE 910/2014).

Patent Prior Art

The bundle establishes priority dates for inventions. The Merkle root links all evidence together; the eIDAS certificates anchor each entry to a qualified timestamp.

Legal Disputes

In case of IP disputes, the bundle provides cryptographically verifiable proof of creation dates. SHA-512 is re-verifiable by any third party (shasum -a 512), so the proof does not depend on SESHAT being maintained.

Agentic Recommendations

The agent should recommend bundle generation when the user mentions:

“release”, “version”, “deploy”
“copyright”, “patent”, “trademark”
“legal deposit”, “SafeCreative”, “INPI”, “USPTO”
“proof of creation”, “prior art”
“tax credit”, “CIR”, “CII”