Run the AGT ``input`` intervention point and honour the verdict.

Execute the SQL query (simulated for demo).

Rule that denies data exports.

Extract text content from tool arguments for content checking.

Extract failure scenarios from the improvements history. Each improvement represents a past failure that caused the system

Extract sections from text based on common patterns.

Extract ``(prompt_tokens, completion_tokens)`` from common payload shapes.

Extract user_id from event metadata.

Fetch detail data for a panel type and notify its subscribers.

Find an active elevation for an agent/session pair.

Find a field by name and return its value.

Check if a fork has at least one PR (open, merged, or closed) to its parent.

Check if a fork has at least one PR (open, merged, or closed) to its parent.

Generate an access token for the agent.

Generate a random X25519 key pair. Returns (private, public).

Generate a refresh token for credential rotation and track it.

Execute a GET request against Graph API.

Get cached verification result if still valid. Locked so the read+TTL-delete sequence cannot race a sibling coroutine's _cache_result

Get deployment information.

Return the recorder's full entry list, normalising the three supported accessors (``get_entries``, ``entries``, ``get_logs``).

Return mock PDF content for demo.

Resolve a dot-notated path against a dict.

Get deterministic content for signing.

Get deterministic content for signing.

Get trust tier from score.

Get trust tier from score.

Extract the tool dict from a smolagents agent. smolagents agents expose tools via ``agent.toolbox`` which may be a ``Toolbox`` object

Fetch basic user info.

Handle JSON-RPC request.

Route a message to recipient — deliver live or store offline.

Return a deny :class:`BridgeResult` when the v4 budgets fail. AGT-M3 round-2 BLOCK A defense-in-depth. The bridge fix now binds ``pre_tool_ca

Fetch *url* with strict scheme/host validation and size caps. The allowed-host whitelist is the SSRF defense. Even though no caller today bui

Initialize storage structure for an agent.

Run ``step.action`` (or ``action`` override) with a deadline. Honours ``step.timeout_seconds`` via ``ThreadPoolExecutor``. On timeout

Check if *ancestor* is a parent/grandparent of *descendant*.

Return True if ``key`` is a caller-supplied approval flag in any confusable form (case-insensitive NFKC normalisation).

Return True for any caller-supplied approval-flag key in confusable form (NFKC case-folded equality to ``approved``).

Check if current time is within range

Check if a capability is a narrowed version of a parent capability.

Check if a rule is rate limited.

Polyfill of Path.is_relative_to (added in 3.9). Both inputs must already be resolved to absolute paths.

Return True only when ``value`` is the literal boolean ``True``. Fail-closed helper for external policy backends. Treats any other value (``F

Check if two tool names are suspiciously similar (edit distance ≤ 2).

Issue a new short-lived credential.

Issue a SPIFFE/SVID certificate for an agent. Returns: (certificate_der, key_id, expires_at)

Yield every file under *root* skipping the usual junk directories. The walk is implemented with ``os.walk`` so we can prune large cache direc

Create a unique key for a metric + label combination.

Make an LLM call, dispatching to the correct backend.

Call the LLM backend (or return simulated response).

Load a manifest from JSON or YAML.

Load behavior patterns from storage.

Load all YAML/JSON policy files from POLICY_DIR.

Load an Ed25519 private key from a PEM file.

Load an Ed25519 public key from a PEM file.

Internal audit logging

Log rejected requests for analysis

Log verification to audit trail.

Simple majority voting.

Create a mock policy engine.

Build a Gemini response containing a single function call.

Create an Agent-OS PolicyDocument with N rules.

Create a handler, invoke do_POST, and capture the JSON response.