chore(integritee): remove stale dormant func and tests

.github/dependabot.yml

@@ -7,13 +7,6 @@ updates:
     groups:
       python-dependencies:
         patterns: ["*"]
-  - package-ecosystem: pip
-    directory: "/clients/python"
-    schedule:
-      interval: weekly
-    groups:
-      python-client-dependencies:
-        patterns: ["*"]
   - package-ecosystem: github-actions
     directory: "/"
     schedule:

.github/workflows/ci.yaml

@@ -27,21 +27,14 @@ jobs:
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install -e ".[dev]" -e "./clients/python[dev]"
+          pip install -e ".[dev]"
 
       - name: Compile Python sources
         run: |
           python -m compileall -q \
             .github/actions \
             .github/workflows \
-            clients/python \
             tests
 
       - name: Test
-        # Suites that currently match the repo layout. Expand as scaffold tests catch up.
-        run: |
-          pytest \
-            tests/test_policy_actions.py \
-            tests/test_tng_client.py \
-            tests/test_versioned_baselines.py \
-            -v --tb=short
+        run: pytest -v --tb=short

README.md

@@ -13,7 +13,7 @@ This repository contains:
 ## How It Works
 
 ```
-podspec.yaml ─► genpolicy ─► Kata policy + initdata
+Blobheart podspec ─► genpolicy ─► Kata policy + initdata
                                      │
                                      ▼
               OVMF + UKI + baseline + initdata ─► cvm-measure ─► MRTD + RTMR[0-3]
@@ -42,20 +42,25 @@ TNG discovers the latest policy by fetching the latest GitHub release:
 GET /repos/cohere-ai/integritee/releases/latest
 ```
 
-Then downloads `{model}/attestation.sigstore.json` and verifies the Sigstore bundle
-locally before extracting the `policy_id` for ITA token requests.
+Then downloads `attestation-bundle.sigstore.json` and verifies the Sigstore bundle
+locally before extracting the `policy_id` for ITA token requests. The verified
+predicate is the authoritative source for the policy ID; consumers should read it
+from there rather than hardcoding it.
 
 ## For Auditors
 
-Every release contains per-model artifacts:
+Every release contains:
 
-- `{model}/measurements.json` -- expected TDX register values (MRTD, RTMR[0-3])
-- `{model}/kata-policy.rego` -- full Kata agent policy text
-- `{model}/predicate.json` -- complete in-toto predicate with all metadata
-- `{model}/attestation.sigstore.json` -- Sigstore bundle (verifiable against public Rekor)
+- `attestation-policy.rego` -- the composite ITA appraisal policy that was uploaded
+- `policy-manifest.yaml` -- every workload the policy covers
+- `policy-manifest-bundle.tar.gz` -- the manifest plus its content-addressed initdata
+- `predicate.json` -- in-toto predicate: per-target measurements and baseline refs,
+  `cvm_measure_version`, the `policy_id`, the manifest commit, and the chain link
+- `attestation-bundle.sigstore.json` -- Sigstore bundle over `attestation-policy.rego`,
+  verifiable against public Rekor
 
-Each model's Sigstore attestation includes a `previous_rekor_log_index` field that
-chains entries together, forming a per-model linked list in the public Rekor transparency log.
+The predicate includes a `previous_rekor_log_index` field that chains releases
+together, forming a linked list in the public Rekor transparency log.
 
 ## Repository Structure