Async evaluate using LLM.

Public access to the AGT ``input`` intervention point evaluation.

Public access to the AGT ``input`` intervention point evaluation.

Public access to the AGT ``input`` intervention point evaluation.

AGT ``output`` intervention point evaluation for an ADK result.

AGT ``output`` intervention point evaluation for tool results.

AGT ``pre_tool_call`` evaluation for an Anthropic tool-use block.

AGT ``pre_tool_call`` evaluation for a smolagents tool invocation.

AGT ``pre_tool_call`` evaluation for a Semantic Kernel function call.

AGT ``pre_tool_call`` evaluation for a MAF function invocation.

Return a deny ``BridgeResult`` if the call/token budget is exceeded. A governed ``.query()`` / ``.chat()`` is a budgeted operation in the

Context manager to measure execution latency.

Handle escrow expiration - credits returned to requester.

Export the audit chain.

Export the audit log.

Export audit entries as CloudEvents v1.0 JSON envelopes.

Export a cost record as a Phoenix span with cost attributes.

Export dashboard to JSON file.

Export an incident as a Phoenix span.

Export all entries as JSONL for compliance.

Export metrics in Prometheus text format

Export a replay session for external analysis. Args: session_id: Replay session identifier format: E

Export a single span without a full trace context. Convenience method for ad-hoc span creation. Args: name: Span name

Extract the content of the first fenced code block in a message.

Extract structured claim from project document

Extract trace context from incoming *headers*. Args: headers: Dict containing W3C traceparent / tracestate headers. Returns:

Return extracted bash blocks as ``(path, run_line, lines)`` tuples.

Extract package names from a pip install argument string.

Get all failed and errored runs.

FastAPI dependency that rejects untrusted requests.

Find all agents that advertise a specific capability. Args: capability: The capability to search for Returns:

Find registered cards that advertise a specific capability. Args: capability: Capability string to search for. Returns:

Find cards that have a specific capability attestation.

Find cards that support a specific protocol.

Combined fingerprint of all tools.

Flask decorator that rejects untrusted requests.

Manually flush the write buffer to disk.

Create declaration with relaxed LIMITED risk thresholds.

Force a consistency mode (e.g., when non-reversible actions are detected).

Format datetime to string. Args: iso_datetime: ISO format datetime string format: Output format (pre

Return a human-readable diff between this policy and other.

Format alert as OpsGenie Alert API payload.

Format alert as Slack incoming webhook payload.

Format alert as Microsoft Teams incoming webhook payload (Adaptive Card).

Build a signer from a base64-encoded shared secret. Args: base64_key: Shared secret encoded as ASCII base64 text. Return

Create an integration with Cedar policy evaluation. Convenience factory that configures a ``PolicyEvaluator`` with a ``CedarBackend``

Build a token bucket from a :class:`RateLimitConfig`.

Deserialize policy from a dictionary.

Create from dictionary.

Deserialize policy from a dictionary.

Create from dictionary.

Create from dictionary. Args: data: Dictionary with CloudEvent attributes Returns:

Create from dictionary.

Create from dictionary.

Create CloudEvent from HTTP headers (binary content mode). Args: headers: HTTP headers (case-insensitive) data: Request

Deserialize card from JSON dictionary.

Parse from CloudEvents JSON format. Args: json_str: JSON string to parse Returns:

Auto-discover from Azure IMDS (Instance Metadata Service).

Parse pyproject.toml and generate SBOM. Reads the ``[project]`` table for *version* and *dependencies*. Only the stdlib ``tomllib`` /

Create a simplified embedding from text

Deserialize policy from YAML string (minimal parser, no PyYAML dep).

Load a TrustPolicy from a YAML file. Args: path: Path to the YAML policy file. Returns: A fully-constructed

Load an OrgPolicy from a YAML string. Args: yaml_content: Raw YAML string. Returns: A fully-constructed ``Or

Generate a new challenge with a random nonce. Args: require_freshness: If True, include an RFC 9334 freshness non

* Generate test scenarios for an agent

Generate HIPAA compliance report.

Generate a compliance report. Args: framework: Framework to report on Returns:

Generate the full markdown benchmark report.

Generate a compliance report for a framework and time period. Args: framework: The compliance framework to report on.

Get value by key.