IRP

io.github.Noshadi-secPublished by GitHub account Noshadi-secv0.6.0Updated Oct 29, 2026

Turn a research paper into working code and prove, claim by claim, how close it gets.

Overview

AI-generated overview

Turns an arXiv research paper into working code, runs it, and records claim-by-claim verdicts in a verifiable evidence log.

What you can do
  • Fetch a paper from arXiv and read its sections, labels or PDF pages as text or page images
  • Record the paper's claims with success bars, and log guesses for details the paper omits
  • Map equations and algorithm steps to code lines, and build pinned uv or Docker environments
  • Run commands in the study's code directory and poll long runs, with output, exit code, time, memory and seeds saved
  • Extract measurements from run output and files, compare them to claims with four verdicts, and add notes
  • Write report.md and report.json from the evidence log, verify its hash chain, and show study status
When to use it
Useful when a computational paper (machine learning, algorithms, simulations) has no code or untrustworthy code and you want an agent to rebuild it and produce an auditable reproduction report. Less suited to checking existing official code against its README numbers.
Requirements
Runs locally as a stdio process via uvx from the irp-agents PyPI package; needs Python 3.11+ on macOS or Linux. Network access to arXiv; uv, and optionally Docker for isolated environments. Optional extras for Docling PDF parsing and Modal GPU sandboxes. No API keys or environment variables declared.
Before you install
Running a paper's code executes it with your permissions; a uv environment is not a sandbox, so use the Docker backend for untrusted code. Paid GPU runs on Modal require a budget set at the terminal and approval of a cost estimate. The server writes files, installs packages and runs commands in the study directory, and the agent's model provider sees tool results.

Installation

In SourceWeft

  1. Open IRP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

English · 简体中文 · 日本語 · 한국어 · Español · Italiano

IRP: Build any paper. Prove every claim.

One MCP server and CLI that lets your coding agent turn a research paper into working code, run it, and prove claim by claim how close it gets.

Give it a paper. Get back working code and a report you can check without trusting the agent.

[PyPI version] [MCP tool catalog] [Python 3.11+] [MIT license]

Quick start · How IRP works · The report · What you can reproduce · FAQ · Documentation

uvx irp-agents setup

[!IMPORTANT] Get IRP from Noshadi-sec/irp or the irp-agents package on PyPI. Follow the installation and release links from these official sources. A similar repository name or copied README does not establish that a download is official.


Found a paper with no code, or code you cannot trust? Ask your agent to build it with IRP. The agent reads the paper, records every number it claims, writes the implementation, runs it and compares the results. IRP does the fetching, running and record keeping, and refuses the shortcuts: a number typed by hand never counts, a shortened run never counts, and the report is written only from the evidence log.

IRP connects your agent (Claude Code, Codex or Cursor) to tools for paper intake, environments, runs, measurements and verdicts. You can use the same tools from your terminal. Everything runs locally; IRP never calls a model, and data goes only where you send it.

Quick start

Set up your agent

With uv installed, run:

bash
uvx irp-agents setup

Choose your agents, review the proposed changes, and approve them. Setup adds IRP's MCP server and its workflow skill, with backups of existing configuration. Restart your agent afterward.

Setup supports Claude Code, Codex and Cursor. Other MCP clients can use manual registration.

Ask your agent

text
Build arXiv 2501.12345 and check Table 2.

You get back a working code folder plus a report: every claim, the paper's number, your number, and a verdict.

Use the terminal

Every tool is also a command. Fetch a paper into a new study and read its outline:

bash
irp fetch 2501.12345 --study ~/studies/exampleirp section index --study ~/studies/example

To install the irp command for regular use:

bash
uv tool install irp-agentsirp --help

See the CLI guide for the full workflow from the terminal.

Check readiness

bash
irp doctor

Doctor checks Python, uv, git, Docker, GPUs, disk space and your agents' registrations, and changes nothing.

Update IRP

IRP changes quickly. For an installed command:

bash
irp update

With uvx, refresh your agent setup with uvx irp-agents@latest setup, review the plan, and restart your agent.

How IRP works

Your agent thinks; IRP acts and keeps the receipts. The agent reads the paper, writes code and decides what to run. Every action goes through one core, so the CLI and the MCP server behave the same, and every step lands in an append-only, hash-chained evidence log. The report is built from that log alone.

StageToolWhat it does
Intakefetch_paperDownloads the arXiv LaTeX source or the PDF, hashes it, splits it into sections
Intakeget_section, get_page_imageReturns one section's text with file and line numbers, or one page as an image for equations and figures
Claimsadd_claim, list_claimsRecords each claim: metric, value, where it appears, and the success bar
Planadd_guessRecords a missing detail, the choice made, and why
Planmap_methodLinks an equation or algorithm step to a file and line
Buildcreate_envMakes a uv environment or Docker image and writes the lock file
Runrun, run_statusRuns one command; saves output, exit code, time, memory, seed, commit and files
Runrun_remoteSame on a paid GPU provider, after a cost estimate and approval
Measureextract_metricsPulls numbers from logs and result files, with file and line
Judgecompare, add_notePuts claim and measurement side by side and gives one of four verdicts
Reportreport, verify, study_statusWrites report.md and report.json from the log; rechecks the hash chain

The workflow skill gives the agent six hard rules, and the tools enforce them wherever they can:

  1. Never type, estimate or copy a number as a result.
  2. Never change the paper's method to make a run succeed; record a guess instead.
  3. Report "could not run" with the blocking error instead of pushing through.
  4. Run the smallest faithful version first; shortened runs never count.
  5. Record every claim before writing any code.
  6. Ask before any paid compute.

The report

The report is the product: a person must be able to check every verdict without trusting the agent. It has five parts: the claim table, four verdicts (reproduced, close, not reproduced, could not run), the guess list, the method map from equations to code lines, and provenance (arXiv ID and version, file hashes, git commit, lock files, GPU, seeds, every command with its exit code, and a verify command that rechecks the hash chain).

The agent cannot finish until every claim has a verdict with evidence.

Example report.md (made-up numbers):

markdown
# Reproduction report: Example Paper (arXiv 2501.12345v2)
Result: 2 reproduced, 1 close, 1 could not run (of 4 claims)
| Claim | Where | Paper | Ours | Verdict || --- | --- | --- | --- | --- || c1 Test accuracy | Table 2, row 3 | 94.1% | 93.8% (3 seeds, std 0.2) | close || c2 Training loss | Figure 4 | 0.31 | 0.31 (3 seeds) | reproduced || c3 Speed-up | Section 5.2 | 2.0x | 2.1x | reproduced || c4 ImageNet top-1 | Table 3 | 81.2% | not run: needs 8 GPUs for 2 days | could not run |
## Guesses- g1 Warmup length not stated: used 5 epochs. Why: as in cited paper [12].
## Method map- Eq. 3 (loss) -> code/src/loss.py:41- Algorithm 1, line 4 -> code/src/train.py:88
## Provenance- Paper: arXiv 2501.12345v2, source and PDF hashes- Code: git commit 3f2a9c1 (clean)- Commands logged: 37, 37 with an exit code- Evidence log: 112 records, head sha256:…, verified- Verify: `irp verify --study ~/studies/example`

See evidence and report for every field.

What you can reproduce

IRP requires Python 3.11+ on macOS or Linux. Additional tools depend on the paper:

NeedWhat IRP usesRequirements and guide
Paper intakearXiv LaTeX source first, the PDF as fallback, page images for math and figuresNetwork access to arXiv; paper intake
Better PDF structureDocling for text and tablesOptional irp-agents[docling]; paper intake
Environmentsuv virtual environments with lock files, or Docker images for isolationuv, or Docker; environments
ComputeYour CPU or GPU; Modal GPU sandboxes after a cost estimate and approval (experimental)Optional irp-agents[modal]; compute
AgentsClaude Code, Codex, Cursor; any MCP client by handinstallation

IRP supports computational papers: machine learning, algorithms and simulations. It does not support wet-lab work or anything weapons-related.

Benchmark

Five light papers — official code exists, each runs on a CPU in minutes — rebuilt from the paper alone and checked claim by claim. Every number comes from a verified evidence log; re-check any study with irp verify --study benchmarks/studies/<name>.

PaperClaimsResult
Fashion-MNIST (1708.07747)31 reproduced, 1 close, 1 not reproduced
KMNIST (1812.01718)2both reproduced
MNIST-1D (2011.14439)1reproduced
fastText (1607.01759)1reproduced (92.86% vs 92.5%)
QMNIST (1905.10498)1reproduced (2.95% vs 2.95%)

Across 8 claims: 6 reproduced, 1 close, 1 not reproduced (87.5% reproduced or close), ~160s and $0 of paid compute per paper. Selection criteria and the full set are in benchmarks/golden/papers.json; the protocol and summarize.py are in benchmarks/.

If you build a paper with IRP, share the report in an issue with the paper, your question, and what you found.

FAQ

Which agents can use IRP?

Any agent that supports local MCP servers. Setup configures Claude Code, Codex and Cursor; other clients can use manual registration.

Does IRP call an AI model or upload my paper?

No. Your agent is the brain; IRP never calls a model and has no API key. It downloads papers from arXiv, installs packages through uv or Docker, and runs code on your machine. Your agent receives the tool results, and its model provider has its own data policy.

Is running a paper's code safe?

Running code is running code. A uv virtual environment is not a sandbox: the code runs with your permissions. Use create_env with backend: "docker" for code you did not write or do not trust, and runs mount only the study's code directory. See security.

What does "not reproduced" mean?

That this run, with the recorded guesses, did not reach the paper's number within the stated bar. The report says "not reproduced by this run" and lists every guess. It is evidence about one attempt, not a verdict on the paper; contact the authors before publishing it.

The paper has official code. Should I use IRP?

IRP builds missing code from the paper. To check that existing code reproduces its README's numbers, a tool such as paper-repro fits better. IRP is still useful for testing a paper by hiding its code and comparing your rebuild with it afterwards.

Can IRP spend money?

Only on paid GPU providers, only after you record a price and a budget at a terminal with irp budget, and only after you approve the estimate the agent shows you. The run's time limit equals the estimated hours.

What should I do if I hit a bug?

Update first; a recent release may already fix it (irp update, or uvx irp-agents@latest setup). If the problem persists, open an issue with your IRP version, the irp doctor --json output, the steps to reproduce and the error.

Documentation

Report vulnerabilities through SECURITY.md.

Disclaimer

See DISCLAIMER.md for responsible-use guidance. IRP is for lawful research, education and the verification of published computational work. A "not reproduced" verdict is evidence about one run, not a judgment of the paper or its authors.

Contributing

Contributions are welcome. Open an issue to report a bug or suggest a feature, or send a pull request.

See CONTRIBUTING.md for development setup and checks, testing for verification lanes, and the architecture map for the project structure.

License

MIT

IRP-authored code is licensed under MIT. Third-party material retains its own licenses and notices; see Third-party notices. Papers and datasets keep their authors' licenses; IRP never redistributes them.

Source: README.md at commit a64cab3

Tools

17

fetch_paper

Fetch paper

Create the study directory and fetch the paper into it: arXiv LaTeX source first (exact equations), the PDF as fallback and for page images. Records arXiv ID and version, file hashes and an outline of sections, tables, figures, equations and algorithms. Call this first; a study holds one paper.

Parameterspaperrequiredstudyrequiredparserpreferwith_pdf

get_section

Read a section

Read part of the paper with its original file and line numbers: a section, a table, figure, equation or algorithm, a LaTeX label, the abstract, a PDF page, a line range, or 'index' for the full outline. Use the shown file:line when recording claims and method map entries.

Parametersidrequiredstudyrequiredoffsetmax_lines

get_page_image

Look at a page

Render one page of the paper PDF as a PNG image, for equations, figures and tables that text extraction loses. Saved under paper/pages/.

Parametersdpipagerequiredstudyrequired

add_claim

Record a claim

Record one number the paper claims, before writing any code (rule 5): the metric, the value as printed, where it appears and the success bar. The value is checked against the paper text. Claims recorded after code exists are flagged in the report.

Parameterspagenotesstudyrequiredvaluerequiredwhererequiredmetricrequiredclose_absclose_relstatementrequiredcomparatorwhere_kindsource_file+4 more

list_claims

List claims

List every recorded claim with its success bar and current verdict.

Parametersstudyrequired

add_guess

Record a guess

Record a detail the paper left out, the choice made and why (rule 2: never change the method to make a run succeed; record a guess instead). Every guess appears in the report.

Parameterswhyrequiredstudyrequiredchoicerequiredclaimssourcemissingrequired

map_method

Map method to code

Link an equation or algorithm step in the paper to the file and line in code/ that implements it. The file's hash is recorded so the report flags mappings whose code changed later.

Parametersnotestudyrequiredend_linecode_filerequiredcode_linerequiredpaper_refpaper_elementrequired

create_env

Create environment

Build a pinned environment for the study's code: a uv virtual environment (fast, not a sandbox) or a Docker image (isolated). Writes the lock file and records its hash. Requires recorded claims (rule 5).

Parametersgpunamestudyrequiredpythonbackendpackagesbase_imagerequirementssystem_packages

run

Run a command

Run one command in code/ with the named environment. Saves stdout and stderr, exit code, time, peak memory, seed, the code commit and the hash of every file the run writes. Only scope 'full' can count toward a verdict (rule 4). Use wait=false and run_status for long runs.

Parameterscwdenvnoteseedwaitscopestudyrequiredcommitcommandrequirednetworktimeout_smemory_limit

run_status

Run status

Report a run's status, exit code and the last lines of its output; optionally wait for it to finish.

Parametersstudyrequiredrun_idrequiredwait_stail_lines

run_remote

Run on a GPU cloud

Run one command on a paid GPU provider (Modal today; RunPod and Hugging Face Jobs planned). Returns a cost estimate and refuses until the person approves it (rule 6) and the estimate fits the budget a person set with `irp budget`. The time limit equals the estimated hours.

Parametersenvgpurequirednoteseedwaithoursrequiredscopestudyrequiredcommandrequiredoutputsapprovedprovider+1 more

extract_metrics

Extract metrics

Pull numbers from a completed run's stdout, stderr or the files it wrote, by key, regex, JSON pointer or CSV column. Each measurement keeps its file, line and file hash. Numbers from any other source are refused (rule 1).

Parametersspecsrequiredstudyrequiredrun_idrequired

compare

Compare and judge

Put a claim beside its measurements and record one of four verdicts: reproduced, close, not reproduced, or could not run. Measurements must come from full-scope runs that exited 0; 'could not run' needs the blocking error (rule 3).

Parametersnotestudyrequiredreasonclaim_idrequiredunit_scalecould_not_runfailed_run_idblocking_errormeasurement_idscontext_measurement_ids

add_note

Record a note

Record a limitation, a forced deviation from the paper, something not checked, or an author contact.

Parameterskindrequiredtextrequiredstudyrequiredclaims

report

Write the report

Write report.md and report.json from the evidence log only: claim table, verdicts, guesses, method map and provenance. Refuses until every claim has a verdict with evidence (the completion gate) unless draft=true.

Parametersdraftstudyrequiredbundle

verify

Verify the evidence

Recheck the evidence log's hash chain and the hash of every recorded file; reports each problem.

Parametersstudyrequired

study_status

Study status

Show the study at a glance: paper, claims and verdicts, guesses, environments, runs, and what still blocks a final report. Use it to resume work.

Parametersstudyrequired

Version history

2
  1. v0.6.0LatestOct 21, 2026
  2. v0.5.0Oct 21, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts