Join an agent to a session via the IATP handshake.

OpenID Connect discovery → JWKS URI for the tenant. We hardcode the well-known suffix rather than walking the OIDC discovery doc, bot

Create an AnthropicKernel with test policy.

Create a SmolagentsKernel with test configuration.

Create a PydanticAIKernel with test policy.

Return the governing kernel.

Return the governing kernel.

Return the governing kernel.

Return the governing kernel.

Return the governing kernel.

Return the governing kernel.

Create a KernelSpace with policy engine and flight recorder.

Create a KernelSpace without policy engine (permissive mode).

Whether the evidence claims a TEE-bound key origin.

Whether verified claims indicate TEE-bound key material.

Identifier of the acquired key.

Origin classification of this key.

Return the :class:`KeyOrigin` for keys from this store.

Generate a fresh Ed25519 key pair.

Generate a keypair and return (private_key_path, public_key_path).

Get keys matching pattern.

Get keys matching pattern.

Governed kickoff.

Emergency kill switch — immediately terminate a rogue agent.

Send SIGKILL to an agent (kernel panic).

Last-known SLO statuses (read-only copy).

Get the current leader ID

* Get entry count.

Return the number of entries currently stored.

Initialize hypervisor on startup, clean up on shutdown.

Application lifespan - startup and shutdown.

Initialize and cleanup resources.

Mirror of the pre-PR linear-scan logic.

Lint YAML policy files for common mistakes.

Get list of tools a principal can access. Args: principal: The principal to check. tool_names: List of tool names to

List all active identities.

List all registered agents with their ring assignments.

List all agents with their trust scores.

List all known agent DIDs. Returns: Sorted list of agent DID strings.

List agents with optional filters. Args: status: Filter by status min_trust_score: Filter by minimum trust s

List all registered agents

List all registered identity bindings.

List all agent budgets.

List all agents owned by an organization.

List capabilities granted to an agent.

List all checkpoint images for the agent.

List all session commitments.

List compliance events with filtering.

List directory contents. Args: path: Directory path pattern: Glob pattern (e.g., "*.txt")

List disputes with optional filtering.

List documents in a path

List all documents or filter by type. Args: doc_type: Optional document type filter Returns: List of documents

List all end-of-life plugin versions.

List escrows with optional filtering.

List available experiment logs in the repository. Args: repo_id: Repository ID to list from. config: HF configuration (u

List chaos experiments.

List all experiment files in the repository. Returns: List of file metadata dictionaries

List credential handle names (no values are printed).

List all registered identities.

List incidents with optional severity/state filters.

List messages in a thread. Args: thread_id: The thread whose messages to list. **kwargs: Additional parameters (e.g.

List available adversarial attack playbooks. Shows built-in playbooks from the chaos framework that can be executed with 'agt red-team attack

List installed plugins.

List installed plugins.

List all registered plugins

List all registered plugins (latest version of each). Args: type_filter: Optional filter by plugin type. Returns:

List all loaded policies.

List loaded policies.

List available toolkit presets.

List all provider slots and their current implementations.