── helpers ──────────────────────────────────────────────────────────────────

Return whether a string contains any known credential pattern. Args: value: String content to inspect. Returns:

Check if a governance category is covered. Args: category: The category to check. Returns: ``True`` if the c

Check if this agreement covers the given org pair. If ``mutual`` is ``True``, order doesn't matter. If ``False``, only org_a trusts o

Create a new user context with TTL.

Create all agent metric instruments from a single meter. Args: meter: OpenTelemetry ``Meter`` instance. trust_score_callback: Opt

Create a context cache for a specific provider. Args: provider: Provider name or CacheProvider enum **kwargs: Additional

Create a ghost text response for IDE autocomplete.

Convenience function to create a governed OpenAI client. This creates both the agent in the control plane and the adapter, providing

Convenience function to create a governed LangChain client. This creates both the agent in the control plane and the adapter, provid

Create a new metadata manifest.

Create a policy review for a proposed wisdom update. This implements the human approval workflow for memory updates.

Create a channel as the responder. Args: key_manager: The responder's X3DH key manager. establishment: The ChannelEst

Create a strategic sample review for this interaction. Args: query: User query agent_response: Agent

Create a custom policy by merging overrides onto default values. Any keyword argument accepted by GovernancePolicy can be provided. U

Delegate a task to a peer only if the peer is trusted. Args: task: The task to delegate. peer_did: DID of the peer ag

Remove a checkpoint image.

Delete an agent's keypair from memory. Args: agent_id: Agent identifier. Raises: KeyError: If no keypair exi

Return a denial for an input blocked-pattern match.

Return a denial for a human-approval requirement.

Return a denial for a tool outside the configured allow-list.

Return a denial for exceeding the configured execution timeout.

Detect if an action is anomalous for this agent. Args: agent_id: Agent identifier action: Action to

Detect PII patterns (SSN, email, phone) in *text*.

Check if *agent_did* has shifted behaviour recently. Uses KL divergence between the recent action distribution and the histo

Compute the diff between two versions of an SLO spec. Returns an SLODiff showing what changed, whether the target was tightened or loosened,

Discover agents matching criteria.

Discover agents matching criteria. Args: capability_filter: Filter by capability (e.g., "pdf_ocr") m

Get edges (unchanged from input).

Return the effective scopes held by a given DID in this chain.

Write *entry* as a JSON line. Thread-safe within a single process; see the class docstring for multi-process notes.

Escalate *action* up the hierarchy starting above *from_level*. Each level is consulted in descending order. If the action reaches l

Mock CSV escape matching extension.ts

Evaluate an action against the policy bundle. Args: action: The action the agent wants to perform. justification: Opt

Evaluate text against constitutional rules. Args: text: Text to evaluate (prompt, response, etc.) co

Evaluate a system prompt read from a file. Args: path: Path to a text file containing the system prompt. Returns:

Thread-safe synchronous policy evaluation. Uses the read side of the RW lock so multiple threads may evaluate concurrently while poli

Execute this step asynchronously.

Execute a workflow (Deterministic State Machine). Args: workflow_name: Name of the workflow to execute

Export the full log as a JSON string.

Export a governance decision event.

Extract MCP server names from any manifest format. Args: data: Raw manifest dictionary. Returns: List of MCP server name str

* Fetch a peer's pre-key bundle for X3DH initiation. Atomically * consumes one OPK on the registry side. Returns null on 404 (no * bundle publis

Find all packages with pyproject.toml or setup.py.

Flush buffered events to configured destinations. Returns: Number of events successfully exported.

Return all batched alerts and clear the batch.

Manually close the circuit breaker.

Format finding for CLI output.

Format a :class:`BatchResult` as JSON, markdown, or plain text. Args: result: The batch evaluation result to format. fmt: Output

Create an X3DH key manager from Ed25519 identity keys. Args: private_key: 64-byte Ed25519 secret key. public_key: 32-

Create from an ExecutionResult with optional transformation.

Import an AgentIdentity from a JWK Set. Args: jwks: A dict representing a JWK Set. kid: Optional key ID to filter by.

Parse requirements.txt and generate SBOM.

Parse a W3C traceparent header value.

Generate a provenance attestation for an artifact. Args: artifact_path: Path to the artifact file (e.g., .tar.gz, .whl).

Generate and save latency comparison and overhead breakdown charts.

Get value by key.

* Get policy by ID.

Get health status for all agents

Retrieve audit logs with optional filtering. Args: event_type: Filter by event type user_id: Filter

Return the circuit breaker for *agent_id*, or None if not registered.

Get or create the global configuration.

Get the resource constraints for a given ring. Args: ring: The execution ring. Returns: ResourceConstraints

Return the current depth of the scope chain.

Read configuration from environment variables.

Return trust history, optionally filtered by agent DID. Args: did: If provided, return only entries for this agent. Retu

Return items labelled *hot*.

Get the number of in-flight operations

Return non-secret metadata for a credential, or None.

Get environment metrics.

Get information about a known peer.

Retrieve a specific plugin manifest. When *version* is ``None`` the latest version (highest semver) is returned. Args: n

Retrieve the public key for an agent. Args: agent_id: Agent identifier. Returns: Raw Ed25519 public key byte

Get recent observations.

Get all rulesets that should be applied to a repo.