Compute a version hash for a module

Connect with Entra enabled. Returns (close_reason, error_payload).

Create an audit record for a query.

Create a JSON-RPC error response.

Create an A2A error response.

Create a PolicyEvaluator with test policies.

Create a mock that works as a context manager returning *data* on read().

Build the canonical delegation payload used for signatures.

Validate and convert a SHA-256 digest from bytes or hex string. Accepts either raw 32-byte digest or 64-character lowercase hex string. Raise

README and API docs must be present.

Helper method to emit a signal event to the stream. Reduces code duplication across signal emission methods.

Rough token estimation (4 chars per token).

Evaluate simple Cedar conditions: comparisons and 'in' operator.

Flat evaluation using the loaded policy list (original behavior).

Run the full governance pipeline for one retrieval call. Audit emission is wrapped in try/except/finally so a retrieval attempt is al

Execute the original method while intercepting tool calls. This is the core governance logic that checks tool calls against

Parse a URL or bare host string to a normalized hostname. Uses urlparse's `.hostname` property so userinfo (`user@host`) and explicit ports a

Extract parameter specifications from function signature. Args: func: The function to analyze Returns: List of ParameterSpec

Locate the AGT stock Rego library directory inside the repo.

Drain the queue and dispatch batches to sinks.

Format rejection reason based on agent configuration

Generate a unique event ID.

Generate actionable recommendations from results.

Generate IATP signature (simplified - production uses proper crypto).

Lazy import of adversarial testing components.

Get or create a per-agent token bucket.

Get HfApi instance, raising helpful error if not installed.

Get recommendation for common bandit findings.

Return callback dict without deprecation warning (internal use).

Get a thread-local database connection with WAL mode.

Caller must hold ``self._lock``.

Return (and lazily create) the :class:`ExecutionContext` for the active session. The bridge requires a v4 :class:`ExecutionContext` to derive

Return (and lazily create) the :class:`ExecutionContext` for ``agent_name``. The bridge requires a v4 :class:`ExecutionContext` to derive the

Get timezone object.

Return the usage record, resetting if the window has expired.

SIGKILL: Immediate termination. This is a KERNEL PANIC for agents. Non-maskable, non-catchable. Used when policy vio

Compute SHA-256 hash chaining this entry to the previous one.

True if `host` equals `rule` or is a proper subdomain of `rule`. Rule is normalized the same way as a parsed host (lowercased, trailing dot s

Derive a 32-byte shared secret from the concatenated DH outputs. Implements the KDF as specified by the Signal X3DH protocol §2.2: F = 0x

Chain KDF: derive message key + next chain key.

Root KDF: derive new root key + chain key from DH output.

1-indexed line number for a character offset in ``text``.

Convert an AST node to a literal value when possible. Non-literal nodes (function calls, names, attribute chains) are returned as a short ``a

Load policies from AGT_POLICY_DIR.

Load a submodule from *pkg_dir* without triggering __init__.py.

Construct a minimal :class:`BridgeResult` for patching.

Create unique key from labels

Create a GovernancePolicy with test-friendly defaults.

Create a minimal policy document with two rules.

Return a mock run that requires tool-call action.