Convert a capability manifest to a policy evaluation context. Args: manifest: The capability manifest Returns:

Convert MCP message to A2A format.

AND-merge an AGT :class:`BridgeResult` into a :class:`ShieldVerdict`. Rules: * A deny verdict from either layer wins. The merged ver

Render a Name/Attribute chain as a dotted string.

Ensure a datetime is timezone-aware and normalized to UTC. Naive datetimes are assumed to be UTC. Aware datetimes are converted.

Lowercase a hostname and strip a trailing dot. Returns None for empty/None inputs so callers can fail closed.

Metrics and logging must be configured.

Open a read/write session on the configured slot. Returns: A PKCS#11 session context manager.

Parse Cedar permit/forbid statements from policy content. Returns a list of dicts with keys: effect, action_constraint, has_principal_constra

Parse a single requirements.txt line into (name, version_spec). Returns ``None`` for blank lines, comments, and options.

Convert a human-friendly window string to seconds.

Return the *pct*-th percentile (0-100) of *data*.

Record execution for history and analytics

Record a response-scan decision in the audit log. Threat descriptions are logged but raw response content is redacted to avoid persis

Append a tool invocation record to the audit log.

Add tokens based on elapsed time.

Make an HTTP request with exponential backoff on rate limit errors. Honors `method` as the HTTP verb name (e.g. "get", "post"). The previous

Resolve a Rego path like 'input.agent.role' to a value.

Run a check script and return the risk level from its JSON output.

Run ``git`` with stdin closed, returning (rc, stdout, stderr). Stdout is hard-capped at ``MAX_GIT_STDOUT_BYTES`` to prevent attacker-controll

Execute Node code that uses dynamic import to load sanitize.mjs.

Resolve a trace file path, rejecting traversal attempts.

Write scores to disk atomically.

Persist inventory to disk.

Save safety corrections to disk.

Save the file system state to disk.

No critical vulnerabilities allowed.

Compute SHA-256 hex digest of a file.

Meets SLO targets for a minimum number of days.

Run a synchronous function *iterations* times and return latency stats.

Build a registration body with proof-of-possession for trust engine tests.

Requires minimum test coverage percentage.

Create an unsigned plugin manifest.

Internal validate entry point that runs validators and bridge. ``intervention_point`` is ``"input"`` for ``validate_input`` callers a

Validate InitializeResult before entering normal operation.

Validate regex pattern for safety.

Validate and normalize URL.

Accept an incoming encrypted channel from a verified peer. Args: peer_did: The initiating peer's DID. establishment:

Acquire a distributed lock

Add audit log entries to the dossier. Args: entries: List of ``AuditEntry`` records to include.

Register a policy delegation.

Add a step to the workflow history.

Add a cross-trace link.

Add a message to a thread with pre-execution policy checks. The message content is validated against the configured AGT manifest at t

Register a plugin with the kernel, tracking it for governance. The plugin name is recorded in the execution context for audit purpose

Add a custom policy rule

Helper to add a reasoning step to a chain

Add a trace report dict (from TracingReport.to_dict()).

Register a trust agreement.

Token usage tracking from LlmResponse.

Allocate a context window for *agent_id*. The scheduler decides the actual size based on remaining pool capacity and the tas

* Analyze code for policy violations

* Apply a single rule. Delegates to the rule's custom analyze function * if present, otherwise falls back to simple regex matching.

Governed async query.