Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
93 changes: 61 additions & 32 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
# scientific-computing-toolkit
# scientific-computing-toolkit

This repository is a portfolio space for scientific-computing infrastructure,
systems tooling, and supply-chain-security experiments that favor deterministic
behavior, auditable outputs, and clear release evidence.

## Current Flagship Tool

[`tools/sbom-diff-and-risk`](tools/sbom-diff-and-risk/README.md) is the
current flagship tool. It compares SBOMs and dependency manifests, produces
JSON, Markdown, and SARIF review artifacts, supports local policy checks, and
Expand All @@ -19,29 +19,38 @@ evidence.
## Supporting Spatiotemporal Diagnostics Project

[`projects/precipitation-anomaly-diagnostics`](projects/precipitation-anomaly-diagnostics/README.md)
is a public-safe scientific-data diagnostics mini-lab. It demonstrates a
reproducible workflow for precipitation anomaly preprocessing, EOF analysis,
representative-period selection, composite analysis, and reviewer-friendly
scientific interpretation.
is the compact reviewer-facing mini-lab. It demonstrates a reproducible workflow
for precipitation anomaly preprocessing, EOF analysis, representative-period
selection, composite analysis, and reviewer-friendly scientific interpretation.

[`projects/precipitation-anomaly-diagnostics-lab`](projects/precipitation-anomaly-diagnostics-lab/README.md)
is a companion public-safe climate-diagnostics lab focused on configurable
precipitation anomaly diagnostics, EOF/PC analysis, composite circulation
checks, correlation/regression utilities, and explicit data-redistribution
boundaries.
is the extended lab variant with configurable diagnostics utilities. It expands
the workflow with EOF/PC analysis, composite circulation checks,
correlation/regression utilities, MCA-style coupled-field diagnostics, synthetic
demonstration charts, and explicit data-redistribution boundaries.

## Scope Boundary

`sbom-diff-and-risk` remains the flagship release-facing tool in this repository.

The precipitation diagnostics projects are supporting scientific-data mini-labs.
They demonstrate reproducible analysis workflows, data-policy boundaries, and
reviewer-friendly interpretation, but they are not part of the
`sbom-diff-and-risk` release surface and should not be read as a separate
meteorology portfolio.

## Why This Repository Exists

Scientific and security-oriented engineering often needs small, inspectable
tools that make evidence easier to review. This repository collects projects
that emphasize:
- deterministic local analysis
- machine-readable security and review output
- conservative policy checks
- explicit provenance and release verification boundaries
- documentation that separates tool behavior from distribution evidence

- deterministic local analysis
- machine-readable security and review output
- conservative policy checks
- explicit provenance and release verification boundaries
- documentation that separates tool behavior from distribution evidence

## Project Map

Project:
Expand All @@ -54,7 +63,7 @@ What to review:
Deterministic SBOM/dependency diffing, JSON/Markdown/SARIF output, local policy
checks, policy decision explainability, optional provenance and Scorecard
evidence.

Useful entry points:

- [`sbom-diff-and-risk` README](tools/sbom-diff-and-risk/README.md)
Expand All @@ -68,7 +77,7 @@ Project:
[`precipitation-anomaly-diagnostics`](projects/precipitation-anomaly-diagnostics/README.md)

Status:
Public-safe mini-lab.
Public-safe compact reviewer-facing mini-lab.

What to review:
Sanitized climate-diagnostics workflow, small derived example artifacts,
Expand All @@ -84,7 +93,27 @@ Useful entry points:
- [Methodology](projects/precipitation-anomaly-diagnostics/docs/methodology.md)
- [Inference framework](projects/precipitation-anomaly-diagnostics/docs/inference-framework.md)
- [Example report](projects/precipitation-anomaly-diagnostics/reports/example-report.md)


Project:
[`precipitation-anomaly-diagnostics-lab`](projects/precipitation-anomaly-diagnostics-lab/README.md)

Status:
Public-safe extended lab variant with configurable diagnostics utilities.

What to review:
Detailed calculation methods, inference boundaries, configurable analysis
scripts, synthetic chart generation, and a synthetic inference report.

This extended lab is a supporting scientific-data project and is not part of
the `sbom-diff-and-risk` release surface.

Useful entry points:

- [`precipitation-anomaly-diagnostics-lab` README](projects/precipitation-anomaly-diagnostics-lab/README.md)
- [Calculation methods](projects/precipitation-anomaly-diagnostics-lab/docs/calculation-methods.md)
- [Inference analysis](projects/precipitation-anomaly-diagnostics-lab/docs/inference-analysis.md)
- [Synthetic inference report](projects/precipitation-anomaly-diagnostics-lab/examples/synthetic-inference-report.md)

## Verification and Release Evidence

`sbom-diff-and-risk` has separate verification surfaces. They are related, but
Expand All @@ -101,18 +130,18 @@ they do not prove the same thing.

The TestPyPI Trusted Publishing dry-run has been validated. Production PyPI
publishing is intentionally deferred.

## What This Repository Does Not Claim
- It does not claim that `sbom-diff-and-risk` is a vulnerability scanner.

- It does not claim that `sbom-diff-and-risk` is a vulnerability scanner.
- It does not claim to resolve CVEs, advisories, exploitability, or package
safety verdicts.
- It does not treat optional provenance or Scorecard evidence as proof that a dependency is safe.
- It does not imply that production PyPI publishing is enabled.
- It does not treat optional provenance or Scorecard evidence as proof that a dependency is safe.
- It does not imply that production PyPI publishing is enabled.
- It does not treat GitHub release verification, GitHub workflow artifact
attestations, and PyPI Trusted Publishing provenance as interchangeable
evidence.

## Reviewer Quick Path

For `sbom-diff-and-risk`, use the
Expand All @@ -129,13 +158,13 @@ the review question:
4. Release evidence:
use the [verification guide](tools/sbom-diff-and-risk/docs/verification.md)
and [release provenance docs](tools/sbom-diff-and-risk/docs/release-provenance.md).
## Status

## Status

- Current flagship release: `sbom-diff-and-risk` `v0.9.0`
- GitHub Release assets: available for `v0.9.0`
- TestPyPI Trusted Publishing dry-run: completed
- Production PyPI publishing: intentionally deferred

[release-notes-v090]: tools/sbom-diff-and-risk/RELEASE_NOTES_v0.9.0.md

8 changes: 8 additions & 0 deletions projects/precipitation-anomaly-diagnostics-lab/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,14 @@

This repository is a public-safe scientific-computing mini-lab for gridded climate diagnostics. It focuses on precipitation anomaly analysis, climatology and standard deviation fields, representative-year selection, EOF/PC diagnostics, composite circulation analysis, correlation and regression checks, trend diagnostics, and MCA-style coupled-field analysis.

Repository role:
This is the extended precipitation diagnostics lab variant with configurable
diagnostics utilities. It is a supporting scientific-data project inside
`scientific-computing-toolkit`, not part of the `sbom-diff-and-risk` release
surface and not a separate meteorology portfolio. For the compact
reviewer-facing version, see
[`projects/precipitation-anomaly-diagnostics`](../precipitation-anomaly-diagnostics/README.md).

The project is maintained under the pseudonymous technical identity `stacknil`. It is not an official institutional project and does not include raw course materials, restricted datasets, or personal identifiers.

## Workflow
Expand Down
6 changes: 6 additions & 0 deletions projects/precipitation-anomaly-diagnostics/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,12 @@
A compact spatiotemporal diagnostics module for reproducible precipitation
anomaly analysis.

Repository role:
This is the compact reviewer-facing precipitation diagnostics mini-lab. It is a
supporting scientific-data project inside `scientific-computing-toolkit`, not
part of the `sbom-diff-and-risk` release surface and not a separate meteorology
portfolio.

This project demonstrates how to turn gridded scientific data into a
reviewable analysis workflow:

Expand Down