Install

Python 3.11 or newer is required. Install the published 3.1.0 release from PyPI:

python -m pip install reward-lens==3.1.0

The base package includes the CLI, assay schemas, offline report assets, and dependencies for record verification and the evidence store. It includes compiled dependencies such as cryptography and jsonschema-rs. It does not require Node, Torch, a model download, or a GPU.

First audit

reward-lens init --example code-reward ./demo
reward-lens audit ./demo --offline
reward-lens doctor

The example deliberately contains defects. audit writes an assay record and offline report, reports blocking findings, and exits 2 with an unresolved decision. doctor shows which measurements the supplied inputs support and which need more access. This first audit does not claim that the reward system is sound.

Verified 3.1.0 downloads

The PyPI version and official GitHub Release contain the qualified 3.1.0 artifacts.

• reward_lens-3.1.0-py3-none-any.whl: SHA-256 ae6acb8bef70ce486b4e1f033b53222fbf86698eb935d8f9627dac8c7fb80eb3
• reward_lens-3.1.0.tar.gz: SHA-256 7bda3ed21cb33d92aa62ecd29453e201a2ecf06c11dd4bf9ce3c771635743a16

Download SHA256SUMS to check both files.

Optional integrations

Install an extra only for the capability you need. For example, python -m pip install "reward-lens[white-box]==3.1.0" adds Torch and Transformers for model inspection.

Extra	Capability
mcp	MCP server integration
trace	Columnar trace reading
train	Training-side model and TRL integration
white-box	Model weights, activations, and gradients
verifier	Program-grader analysis tools
record	Columnar record and tensor storage
organisms	Planted-model training tools
openenv	OpenEnv adapter
trackers	Local tracker SDK integrations
viz	Figure helpers
all	All declared optional integrations

The judge extra is reserved and currently declares no provider dependency. The sigstore extra installs the Sigstore package, but 3.1.0 still refuses external-identity signing with RL0704; offline Ed25519 export is the supported signing path. For a source checkout, uv sync --group dev installs the development group. There is no published dev extra.

The older getting-started examples document the 3.0 library and are marked as such. For the current 3.1.0 first-use path, run the audit above; model-based examples in the older pages have their own weight and hardware requirements.

For the maintained 3.1.0 API, CLI, and limitations, read the 3.1.0 product guide.