Return a mock run object with status 'completed'.

Create an AuditEntry with the current API.

Create a handler, invoke do_GET, and capture the JSON response.

Create a fake CrewAI hook decorator that captures the function.

Create a test AgentIdentity via the real factory.

Create a mock container with exec_run support.

Create a mock Docker client with sensible defaults.

Create a mock LangChain memory with save_context.

Create a mock TraceExporter with export_span_simple.

Create a minimal trust policy for evaluator tests.

Create a minimal Policy for testing.

Create a PolicyDocument with *num_rules* rules.

Create a registry, signer, and trusted-keys dict for testing.

Build a per-sandbox SandboxClient mock that mirrors the SDK surface.

Create a minimal SLO for testing (no SLIs needed for status forcing).

Generate a sponsor Ed25519 keypair.

Create a sample trace with parent-child spans.

Map a capability to an ActionType.

Map a LangChain tool name to an ActionType. This uses both the provided mapping and pattern matching to handle vario

Escape the small set of Markdown metacharacters we actually emit.

Lowercase and replace spaces/hyphens with underscores.

Handle a successful call

The single source of truth for AEGIS profile semantics. A request is allowed iff: * principal_role matches the profile's role, AND *

Parse skills from bullet list.

Parse VFS URI into agent_id and path.

Recompute content hash using cached trace data. Looks up the immutable fields (timestamp, agent_id, etc.) from the in-memory ``_trace

Record a violation in the audit trail.

Record an interaction and update the trust store.

Create a span record, buffer it, and forward to sink if attached.

Test-only helper to clear the shared detector registry.

Construct a vault from environment-configured key/path.

Execute with trust verification.

Run Agent OS PromptInjectionDetector — always available.

Run an async coroutine synchronously.

Search GitHub issues/PRs.

Search GitHub issues/PRs.

Pick the hardened image if it's available locally, else legacy. Tries to query the local Docker daemon for ``HARDENED_IMAGE_TAG``. An

Generate Nexus signature for resolution.

Start an OTel span if tracing is enabled. Returns a context token.

Run *fn* for *iterations* and collect per-call latencies.

Return the engine's transformed policy target when the verdict was ``Decision.TRANSFORM`` in enforce mode, otherwise the fallback. Per AGT D1

Return the engine's transformed policy target when the verdict was ``Decision.TRANSFORM`` in enforce mode, otherwise the fallback. Mirrors `_

Transition to a new state.

Transition to a new circuit state

Translate message between protocols.

Translate an Agent Shield SDK verdict to AGT ``ShieldVerdict``. Maps the SDK's boolean-truthy result and optional ``reason`` / ``poli

Trigger all callbacks for an event

Trigger all callbacks for an event

Update trust score based on action.

Raise if the requested runtime is not installed.

Validate tools against policy

Register audit listeners on all relevant event types.

Create a decorator that wraps a function with a span. Args: span_name: Name for the OTel span. attr_extractor: Callab