Revoke every session belonging to an agent. Args: agent_id: Agent identifier whose sessions should be revoked. Returns:

Revoke an active elevation by ID. Raises: RingElevationError: If elevation not found or already inactive.

Roll back the rollout to the previous stable state. Args: reason: Human-readable explanation for the rollback, re

Return 'escalation' if keywords match, otherwise 'support'.

Return the dash/start line of the *idx*-th rule, or 1.

Flowise-compatible run method.

Flowise-compatible run method. Accepts and returns dicts.

Main loop: Task -> Act -> Reflect -> Evolve -> Retry

* Run security audit on agent code

Run a specific attack simulation

Execute a full canary rollout scenario (promote or rollback).

Compare full governed pipeline vs ungoverned execution.

Run git diff for the requested pathspecs and return stdout.

Run a complete prompt defense + governance check. Returns a dict with: - defense_check: PromptDefenseCheck evidence - governance: Gov

Send *n* simulated requests and record against SLIs.

A simple face agent that produces a plan based on keywords.

A simple mute agent that executes steps and returns structured data.

Persist the SBOM to disk as JSON. Args: path: Destination file path. format: ``"spdx"`` (default) or ``"cyclonedx"``.

Write the generated AGENTS.md to *path*.

Save agent state checkpoint.

Save system instructions to JSON file.

Save a plugin manifest to a YAML file. Args: manifest: The manifest to save. path: Directory or file path to write to. Retur

Scale down an agent type by removing replicas

Scale up an agent type by adding replicas

Run a comprehensive scan over multiple source dicts. Each source dict must contain a ``"label"`` key and at least one of: - ``"co

Scan code using CodeShield if available, otherwise return SAFE with warning.

Scan for dangerous code patterns using bandit (Python).

Recursively scan all Python files in a directory. Args: directory: Root directory to scan. exclude_tests: Skip files with 'test'

Scan a prompt using the configured mode (async).

scrubSensitiveData removes sensitive data from logs

Search bundles optionally filtered by component type.

Serialize agent state to a dictionary. Args: agent_id: Unique identifier for the agent agent_context

Set value with optional TTL.

Update the auth token for subsequent requests.

Set the active-agents gauge. Args: count: Number of currently active agents.

Set the active agents gauge. Args: count: Number of currently active agents.

Set baggage item that propagates with the trace. Baggage items are key-value pairs that travel with the trace across

Set cost budget for an agent.

Set a gauge metric

Register the incident detector (any object with open_incidents/all_incidents).

Set access policy for a tool. Args: tool_name: Name of the tool. policy: The access policy to apply.

Set registry size.

Set trust score for an agent.

Setup Prometheus metrics. Returns: MetricsCollector instance

Set up the prioritization framework with demo data.

Determine if recovery should be attempted for this error. Args: error: The exception that occurred manifest:

Return True if the file should be skipped.

* Show enterprise features information

Perform a graceful kernel shutdown. Sends ``SIGTERM`` to every registered agent, then destroys all agent contexts and transitions the

Sign this card with the given identity.

Sign a message with this identity's secret key.

SIGCONT — resume execution after a previous SIGSTOP. Args: kernel_id: Identifier of the kernel to resume.

SIGSTOP — pause all function invocations. While stopped, calls to :meth:`GovernedSemanticKernel.invoke` will block (``await asyncio.s

Project costs for running a model at a given request volume. Args: task: The task profile to simulate. model_name: Na

Push a structured frame (always valid JSON).

snapshotForPersist returns a deep-copied view of the current scores suitable for persisting outside the lock. Callers MUST hold tm.mu (any mode) when

Get snapshots filtered by SLO name and time range.

* Split `expr` on the literal separator `sep` only at positions that are * outside of single- or double-quoted string literals. A naive * `String.sp