Neutralize CR/LF/control-byte injection in log fields. Attacker-controlled fields (``action``, ``intent_id``, ``agent_id``) flow into ``logge

Neutralize CR/LF/tab in attacker-controlled log fields to prevent log-injection / forgery via line-oriented log shippers.

Save the current processing checkpoint.

Write the signed manifest back to disk.

Save circuit breaker state to file.

Save documents to disk.

Save user preferences to disk.

Recursively scrub strings inside dicts, lists, and scalars.

Convert a version string to a comparable tuple.

Send feedback to Helicone API via urllib.

Return a compact, sorted JSON string for *entry*. When include_context is True, uses Pydantic model_dump for full fidelity. When Fals

Determine if an exception should be counted as a failure

Generate Nexus signature for registration.

Cache skipped message keys for out-of-order delivery.

Store a credential in the index.

A strict policy that blocks dangerous patterns and tools.

Return ``text`` with fenced code block contents replaced by blanks. Keeps line numbering stable so downstream line reporting matches the orig

Create a short summary of data for display.

Run an async function *iterations* times and return latency stats.

Normalise a LlamaIndex payload to a JSON-serialisable body.

Normalise a smolagents payload to a JSON-serialisable body. smolagents tool args may be dicts or strings; tool results may also be di

Normalise a CrewAI payload to a JSON-serialisable body. v4 callers passed dicts and CrewAI-specific objects to :meth:`pre_execute`; t

Normalise a LangChain input payload to a JSON-serialisable body.

Trigger callbacks for an event

Minimum trust score threshold.

Update tier based on score.

Update violation rate gauge.

Use a registered tool through the kernel. Args: tool_name: Name of the tool to use params: Parameters to pass to the

ISO-8601 UTC timestamp with second precision, per AGT-SNAPSHOT §1.

Validate an API path string.

Validate and warn about the apiVersion field in a policy document. Args: data: Parsed policy dict (from YAML/JSON). Raises:

Validate file extension.

Validate checkpoint fingerprint on resume — detect stale-auth.

Validate an identifier string (agent DID, action ID, etc.).

Validate flight recorder logs.

Check memory content for PII, secrets, and blocked patterns. Raises :class:`PolicyViolationError` if the content being written to mem

Validate every step in a plan against allowed capabilities. Returns list of step indices that are denied.

Reject URLs with dangerous schemes or known SSRF targets.

Verify the SHA-256 digest of a file against an expected hex string. Uses ``hmac.compare_digest`` for a timing-safe comparison to avoid leakin

Check agent trust score against threshold. Args: context: Description of the operation being verified. Returns:

Return a manifest copy with PII fields redacted by allowlist. Only the agent's owner (DID-matched authenticated caller) or an administrator m

Add governance hooks to individual agent and its tools. When ``deep_hooks_enabled`` is ``True`` on the kernel, this a

Replace a single tool method with a governed wrapper. Args: tool: The LangChain tool object. tool_name: Human-readabl

Map an accountability export into an EEOAP-like example statement. This mapping does not import or invoke external validators and does not imply

Governed async chat.

Enable opt-in shell interception for this process.

Mark a plugin version as actively maintained.