Add context labelled as *warm*.

Analyze a message in conversation context. Considers both the message's own score and the trend of recent messages in this conversati

Create a governance callback for smolagents' native ``step_callbacks``. Returns a ``GovernanceStepCallback`` that can be passed directly to

Transition to handshaking phase.

Persist a pre-provisioned session token bound to an agent. Intended for environments that need deterministic bootstrap credentials (f

* Build a tooltip string for the violation counter status bar item. * * @param count - Total violation count for today. * @param breakdown - Severi

Check whether *from_did* may communicate with *to_did*. Same namespace (or shared lineage) → always allowed. Cross-namespace → only i

Cancel a run (SIGKILL equivalent). Immediately marks the run as cancelled locally and issues a cancel request to the OpenAI API. If

Check if an agent has a specific capability. Args: agent_did: The agent's decentralized identifier. capability: Capab

Check account age, repo velocity, follower ratios.

Check whether an action is allowed under the declared intent. This is the core method called by the kernel before executing each action.

Check text against blocked patterns.

Check a pyproject.toml for unregistered package dependencies.

Return a snapshot of all metrics as a framework-agnostic dict. Returns: Dictionary with metric names as keys and nested dicts/val

Return hash of last delta in the chain.

Compute ADR 0010 canonical report-data binding. The hash binds attestation evidence to the agent DID, handshake challenge, nonce, and Ed25519

Atomically check-and-record an alert for delivery. Returns ``True`` if the caller should deliver *alert*, in which case the alert is

Return the number of registered bundles.

Create and register a new challenge. Args: require_freshness: If True, include an RFC 9334 freshness nonce in the

Create a supervisor with default detection rules

Create a restricted globals dict with a whitelist of safe builtins. Only names in :data:`_SAFE_BUILTINS_WHITELIST` are exposed. Names in

Helper: Create a file change signal.

Return (manifest, registration_signature, private_key_bytes) with a real Ed25519 keypair.

Simulate data exfiltration attempt.

Delete a file.

* Detect which surfaces a rule targets. * Returns empty array for universal rules (no surface restriction).

Detect conflicting or contradictory policy settings. Returns: A list of human-readable warning strings describing each c

Analyze data and determine its type. Args: data: The response data Returns: str

Detect whether *data* represents a Copilot, Claude, or generic manifest. Returns: ``"copilot"``, ``"claude"``, or ``"generic"``.

Disable colors on *this* instance.

Discover governance.yaml files from ``action_path`` up to ``root``. Args: action_path: Path where the agent action originates. If it is a

Enable Mute Agent mode for an agent. The agent will only execute actions that match its defined capabilities and ret

Production enterprise policy with balanced defaults. Moderate limits with SQL injection and shell injection patterns blocked. Audit l

Compute Shannon entropy of the agent's action distribution. Returns ``None`` when fewer than ``min_actions`` have been recorded.

Inject errors into a target.

Escape HTML entities for safe rendering.

Evaluate an agent's trust score and determine routing tier.

Evaluate the condition against a context. Args: context: Dictionary containing the evaluation context

Evaluate metrics and make rollout decision. Returns: Decision dictionary from watchdog

Evaluate a troubleshooting conversation. Args: turn_count: Number of turns in the conversation resol

Execute a callable function in a Docker container. The function is serialized and executed inside an ephemeral container. The

Create declaration with recommended HIGH risk thresholds.

Manually open the circuit breaker.

Reconstruct an AgentIdentity from its JSON representation.

Return ``None`` if the operator has not opted into verification. Both ``AGENTMESH_ENTRA_AUDIENCE`` and ``AGENTMESH_ENTRA_TENANT_ID``

Create episode from JSON string.

Generate a valid AGENTS.md string from *config*. The output includes YAML frontmatter followed by Markdown sections for project overview, bui

Generate an Ed25519 key pair for IATP attestation signing. Returns: Tuple of (private_key_b64, public_key_b64) — both raw base64 enc

Generate an Ed25519 keypair. Returns: (private_key_bytes, verification_key_str) where verification_key_str has the format "e

Get an identity by DID.

Get or create a circuit breaker for an agent.

Return current baseline for a metric, or ``None``.

Get the current trace context.

Get valid endorsements for a peer from the endorsement registry. Returns an empty list if no endorsement registry is configured. Endo

Return the standby (inactive) environment.

Return the list of previous public keys with rotation timestamps. Returns: List of dicts with keys ``public_key``, ``verification

Get the last output, optionally filtered by worker type.

Get or create a reputation score for an agent. Args: agent_id: Agent identifier Returns: Reputation

Get all pending review items, optionally filtered by type. Args: review_type: Optional filter by review type

Retrieve a specific plugin manifest. When *version* is ``None`` the latest version (highest semver) is returned. Args: n

Get the current conversation state. Returns: The current conversation state

Get a tool by ID or name

Guard Anthropic messages calls. Anthropic streaming uses typed message events rather than OpenAI chat completion SSE chunks. Streamed calls f

Process a request through rate limiting then delegate to *handler*. Args: request: The incoming request. handler: The

Evaluate a policy decision. Request: {"agent_id": "...", "action": "...", "context": {...}} Response: {"allowed": bool, "decision": "

Centralized error handler for compliance CLI. Echoes the exception detail for known (user-facing) error classes so the operator can act on th

Get the health check if set.

Hibernate an agent by serializing its state to disk. This implements the "Serverless Agents" pattern - agents sitting idle

Produce propagation headers for an outgoing call. Returns a dict suitable for merging into HTTP headers / A2A metadata.

Snapshot for the ``input`` intervention point (AGT-SNAPSHOT §2.2).

Install this hook into sys.meta_path.

Check if action is allowed. Returns bool (non-raising).

Check if status indicates tool is usable.

Check if a path is accessible under this session's isolation. Args: path: Absolute path to check. Returns: T