Write the boundary contract
Name contained relative files, formats, entity keys, time columns, expected grids, maximum ages, and resource ceilings.
Inspect contract schemaPaid local software · v1.1.0 · Private delivery
Temporal Boundary Auditor inspects declared event, availability, period, grid, duplication, and freshness rules behind a backward as-of join, then can compare caller-declared timestamp interpretations against an explicit reference series—locally, deterministically, and without copying row values into its evidence packet.
No account is required to run the delivered package. The implementation and delivery archive are not public downloads and are not published to GitHub. Public materials are synthetic evaluation evidence only.
A normal as-of join can select a later revision unless the boundary separately models when each value became knowable.
It does not build, repair, or serve training data. It audits a caller-declared boundary and retains aggregate evidence.
Keep pandas, DuckDB, Feast, Timefence, Hopsworks, or an internal control if it already covers availability, revisions, periods, grids, freshness, and the evidence you need.
Supported decision
Time-series and feature pipelines can join a context row whose event already happened but whose value was not yet available, use a period before it completed, silently accept off-grid timestamps or duplicate temporal keys, or carry context farther than the declared freshness window. The auditor makes those mechanical failure modes visible under a strict user-supplied contract.
Workflow
Name contained relative files, formats, entity keys, time columns, expected grids, maximum ages, and resource ceilings.
Inspect contract schemaEvaluate RFC 3339 timestamps, keys, ordering, grids, availability-aware matching, revision ambiguity, period completion, and freshness.
Open adversarial contractStore byte identities, counts, join summaries, rule findings, and explicit limitations without copying row values or source paths.
Inspect report schemaNew in v1.1.0
When a timestamp column may be UTC, a fixed offset, or a named local zone, the read-only probe measures backward-match coverage against an explicit RFC 3339 reference series. Candidate modes are supplied by the operator; the tool never invents a timezone or rewrites source data.
Compare explicit RFC 3339, fixed offsets from −840 to +840 minutes, and available IANA zones under a declared backward tolerance.
Inspect probe contractMatches stay within equal-length entity keys. Ambiguous and nonexistent local times are counted and excluded rather than silently folded or shifted.
Inspect DST-adversarial reportCoverage and the runner-up gap produce DOMINANT, AMBIGUOUS, INSUFFICIENT_COVERAGE, or REFERENCE_INVALID—not a claim about the true clock.
Inspect probe reportpython -m temporal_boundary_auditor probe-clock contract.json --out clock-output
A completed classification exits 0; invalid input or operation exits 1. The ranking can change with reference completeness, record density, tolerance, entities, omitted modes, daylight-saving transitions, or the local timezone database.
Licensed runtime
python -m temporal_boundary_auditor audit contract.json --out audit-output
Exit 0 means no error-severity findings, 2 means the audit completed with error-severity findings, and 1 means the contract, input, or operation was invalid. A zero exit is not proof that all temporal leakage is absent.
Licensed delivery
Request to buy
Send the legal-entity name, billing contact, country, intended Python version, and whether your evaluation inputs are CSV or JSON Lines. Do not send datasets, credentials, private source, customer data, or regulated data. A request is not an accepted order, and availability is not guaranteed until accepted in writing.