AuditTrailMiddleware records start and completion audit entries.

CapabilityFor returns the handle name bound to the action class, or "" if absent.

CapabilityGuardMiddleware enforces allow/deny lists on tool usage.

Equals reports whether two deny receipts have identical fields.

ExecuteCode runs a command inside an existing sandbox session container.

ExtractProtocolFacetsWith is the same as ExtractProtocolFacets but accepts a caller-supplied registry. Mirrors the Python extract_protocol_facets(cont

GenerateCredentialKey generates a fresh AES-256-GCM key (32 random bytes).

MergeFromYAML appends rules from a YAML file to the engine's existing rule set. Use this when composing rules from multiple files; use LoadFromYAML wh

Name returns the backend name.

Name returns the backend name.

NewGitHubDiscoveryClient creates a GitHub API client using the standard public API.

NewGovernanceMiddlewareStack creates an empty stack.

NewSidecar creates a new sidecar instance

PolicyEvaluationMiddleware enforces policy before the next handler executes.

PromptDefenseMiddleware evaluates prompt content before execution.

Quarantine is a convenience method to move to the quarantined state.

RecordAuditEntry records an audit chain append.

RecordPolicyDecision records a policy evaluation result.

RecordTrustScore records a trust score update.

SLOTrackingMiddleware records operation outcomes against an SLO objective.

ScanGitHubRepositories scans GitHub repositories for configs and dependency markers.

ScanProcessCommands returns low-level findings from supplied command lines.

Verify checks a signature against data using the agent's public key.

WithGovernOperationKillSwitches enables kill switch enforcement for GovernOperation.

Initialize the federation engine with the given store. Args: store: Federation data store. Defaults to a new ``In

Initialize injection token. Args: name: Unique name for this token. default: Default value if not provided.

Initialize with a dictionary specification. Args: spec: Dict mapping field names to expected types s

Initialize the agent. Args: config: Agent configuration including ID, policies, and backend defer_timeout: Timeout in

Initialise the OpenAI Agents governance kernel. Args: policy: Full governance policy. When ``None`` a policy is

Initialise the smolagents governance kernel. Args: policy: Smolagents-specific :class:`PolicyConfig`. When ``None

Initialise a governed plan wrapper. Args: plan: The original Semantic Kernel plan object. wrapper: Parent governance

Initialise the PydanticAI governance kernel. Args: policy: Governance policy to enforce. When ``None`` the defaul

Initialize governed runner. Args: kernel: Agent OS KernelSpace with loaded policies fail_on_violation: If Tr

Construct a Bedrock returnControl action-group event.

Add default security policies

Extract agent ID from audit entries.

Map Agent OS DetectionResult to FirewallVerdict.

Periodically register / heartbeat with the mesh server.

Return the highest risk level from a set of check results.

Return True only when AGENT_OS_ENV explicitly opts into local mode. Same gating pattern as the unsafe execute mode in ``agent_os.server.app``

Resolve allowed signature algorithms from policy.

AMB (Agent Message Bus) health dashboard.

Analyze behavioral patterns. In production, would use historical patterns, velocity, etc.

Analyze dispute evidence and determine outcome. In production, this would: 1. Decrypt and parse logs 2. Repl

Analyze file change signals.

Analyze what the actual impact would be if executed

Analyze log stream signals.

Analyze a signal to understand what's happening. This is where the "intelligence" of the observer lives. In a real s

Analyze user action signals and learn patterns.

Apply backpressure delay to slow down the producer. Args: topic: The topic experiencing backpressure

Merge an AGT bridge verdict into the local validator outcomes. - ``allow``: append a synthetic passing outcome so the AGT path show

Apply consensus method to multiple model responses. This is where the CMVK algorithm is applied.

Rewrite a message's content in place per AGT D1.1 transform. Mirrors :meth:`_extract_content`. Strings are immutable so the AutoGen r

Apply default trust parameters against context.

Translate a network allowlist into an Azure egress policy. ``network_default`` controls the proxy's ``defaultAction``: * ``"deny"``

Filter records based on condition criteria.

Trim the policy chain at the first inherit: false boundary. Walks from most specific (last) toward root. The first policy with ``inherit: fal

Trim the chain at the first ``inherit: false`` document, per §2.2. Walks from most-specific (last) toward root.

Ensure the correct needs-review label is applied.

Apply a comparison operator.

Return the sibling bridge that escalates every tool call. AGT-M3 round-2 BLOCK B. Used by :meth:`before_tool_callback` when the kerne

Return a sibling bridge with ``require_human_approval=False``. Built lazily on first access. Used after the legacy v4 approval_callba

Async query with trust verification.

Assemble context from retrieved documents

Recursively verify that *actual* has the same key structure as *expected*.

Assess the risk level of a request (0.0 = no risk, 1.0 = maximum risk)

Assess the quality of document structure.

Assess priority and urgency of the file change.