Persist a new measurement.

Get state by key.

Append data to file.

Build a TimeContext for the current moment.

Join text parts. Args: parts: List of strings to join delimiter: Delimiter string R

Get an identity by DID.

* Push metrics to the configured endpoint. * * @param metrics - Governance metrics to export. * @throws Error if all retries are exhaus

Compile the governed graph, wrapping the checkpointer if provided.

Return the adapter class registered under *name*. Raises: KeyError: If no adapter is registered with that name.

Get a registered card by agent DID. Args: agent_did: The agent's decentralized identifier. Returns: The ``Tr

Split text by delimiter. Args: text: Text to split delimiter: Delimiter string max_split

Get a circuit breaker by name

Transform the result value if successful.

Replace text occurrences. Args: text: Input text old: String to find new: Replacement st

Create a successful result.

Check if path exists. Args: path: Path to check Returns: Dict with exists, is_file,

Get current datetime. Args: timezone_name: Timezone name (default: UTC) Returns: Di

Get a template by ID.

Read file as text.

Make a POST request. Args: url: URL to request (must be in allowed domains) data: Form data to send

Create directory.

Get an entry from cache.

Return a new policy that inherits from the base with *overrides*.

Get keys matching pattern.

Find runbooks matching an incident's type/severity. A runbook matches if any of its trigger_conditions match the incident. A conditio

Retrieve a registered backend by name. Args: name: Backend identifier. Returns: The registered backend.

Log an error at ERROR level.

Trim characters from text. Args: text: Text to trim chars: Characters to trim (default: whitespace)

Search for documents containing keyword

Generate a new DID for an agent. Uses 128 bits of random hex directly rather than hashing a seed that contained only 32 hex digits (8

Set state with optional TTL.

Parse a saga definition dict into a SagaDefinition. If schema_validation was enabled at construction, validates against the JSON sche

Request termination.

Remove an entry from cache.

Close the connection with optional code and reason.

Get SPIFFE identity for an agent. Args: agent_did: The agent's DID. Returns: The SPIFFEIdentity, or None if

Run pre-execution policy checks and return the legacy tuple. Args: ctx: Execution context for the governed operation.

Check if key exists.

Evaluate returns the decision for the given action and context. Rules are evaluated in order; first match wins. Default is Deny. Concurrency: the rul

Register event listener.

Create a new Shared Session.

Write a file.

Join an agent to a session via extended IATP handshake. Steps: 1. Parse IATP manifest (if adapter + manifest provided)

Generate a new verification identity with Ed25519 key pair. Args: agent_name: Human-readable name for the agent capab

ADK before_tool_callback — called before each tool execution. Compatible with ADK's ToolContext. If tool_context is not an ADK

Check self and parent.

Execute an action on behalf of an agent This is the main entry point for agent actions. It goes through the complete

Publish a message to a topic. This method supports both "fire and forget" (default) and "wait for verification" patt

Helper to run async in sync tests.

Read a document from VFS

Build an :class:`AgtRuntime` over a scripted or custom dispatcher.

Get a runbook by ID.

Replace the episode with the given ID.

Invoke tool on MCP server. Automatically attaches identity credentials. Raises: NotImplementedError: HTTP trans

NewPolicyEngine creates a PolicyEngine with the supplied rules.

Classify ticket category and priority.

Record a task cost and check budgets. Returns any alerts triggered. WARNING — this method records cost unconditionally; it does

Register an identity.

Record a task completion.

Resolve from self first, then parent.

Block until the process finishes (or *timeout* expires) and return its result.

Log appends a new entry to the audit chain. When MaxEntries is set and exceeded, the oldest entries are evicted and their final hash is retained as a

Create a new agent with specified permissions and quotas Args: agent_id: Unique identifier for the agent

Return a fixed base timestamp + offset.

Append an event and notify subscribers.

Sign content with IATP attestation.

Return the public key corresponding to the signing key.

Add an entry to the DLQ. Args: entry: DLQ entry to add Returns: True if added,

Record a good or bad event against the SLO.

Run post-execution validation and return the legacy tuple. Args: ctx: Execution context for the governed operation. o

Set attribute on current span.

Perform the health check synchronously. Returns: HealthCheckResult with status and details.

Evaluate a tool call against the gateway's policy stack. Args: agent_id: Agent identity attempting the tool invocation.

Send data to the client.