Read back the file and verify hash chain + HMAC signatures.

Verify that a rotation proof correctly links old and new keys. Args: old_public_key: Base64-encoded old public key. n

Verify the card's signature is valid. Returns: True if signature is valid, False otherwise

Evaluate an SLO and fire/resolve PagerDuty alerts as needed. Call this periodically (e.g. after each ``slo.record_event()``) or on a

Wrap a Semantic Kernel with governance. .. deprecated:: Use :meth:`as_filter` with ``kernel.add_filter()`` instead fo

AgentKillSwitchScope returns the kill switch scope for a specific agent.

CreateGovernanceMiddlewareStack creates a composed stack similar to the Python middleware factory.

Evaluate computes the current report for the named objective.

Execute runs the middleware stack and final handler.

NewDockerSandboxProvider creates a DockerSandboxProvider with the given base image. The constructor is non-blocking: Docker daemon reachability is pr

NewFacetRegistry returns an empty registry with no built-in extractors.

NewPromptDefenseEvaluator creates a prompt defense evaluator.

RecordEvent stores an event for the named objective.

ToJSON serialises the public portion of the identity (DID, public key, capabilities). The private key is deliberately excluded so the output is safe t

Minimal GitHub API helper (no third-party deps).

Send a single ASGI HTTP request and return (status, parsed JSON body).

Policy: wire_transfer over $100k is denied; high tool-call count triggers an escalation.

Check circuit state before a call

Run *fn* n times and return timing stats in milliseconds.

Cross product of role / action / resource_path covering edge cases.

Cache a token with an expiry timestamp.

Return a blocking response if the invocation has been cancelled.

Scan a string for policy-blocked patterns. Args: content: The text to scan. Returns: Tuple of (allowed: bool

Check for cross-server attack patterns. Two patterns are detected: 1. **Impersonation** — same `tool_name` registered from a

Check if huggingface_hub is installed.

Discover an advanced provider via entry_points.

Discover an advanced provider via entry_points.

Create a verdict for an Agent Shield SDK or runtime error. Distinct from a policy denial: the returned verdict carries ``metadata["so

Create a failed verification result.

Return ``(changed_files, insertions, deletions)`` via ``git diff --numstat``. Args: repo_path: Path to a git repository or worktree.

Get escrow by ID or raise error.

Return the ``ExecutionContext`` for *agent_name*, creating one if needed. Contexts are cached in ``_agent_contexts`` keyed by agent name so

Return installed version via importlib.metadata, or None.

Create a deterministic hash of action parameters for audit.

Generate human-readable interpretation of verification result.

Make a real LLM call, dispatching to the correct backend. Returns a normalized response object with .text and .tool_calls attributes. On API

Load a YAML or JSON file and return the parsed dict.

Load agent-plugin.yaml from a plugin directory.

Log an audit entry (thread-safe).

Log an identity lifecycle event.

Record a mutation in the audit log.

Create a minimal AuditEntry for testing.

Create a minimal ComplianceReport for testing.

Return a mock Gemini ``GenerativeModel`` (no SDK required).

Wrap a sandbox client in a poller mock matching ``LROPoller``.

Create a mock SK FunctionInvocationContext.

Create a sample trace with multiple spans.

Map a resource URI to an ActionType.

Map an MCP tool name to an ``ActionType``. Resolution order: 1. Exact match in ``self.tool_mapping`` (case-insensitive). 2. P

Perform a mutual trust handshake between two agents. Returns (result_a_sees_b, result_b_sees_a).

Print data as YAML to stdout.

Parse OSV API response into VulnerabilityRecord list.

Parse a YAML scalar value.

Queue a write operation.