Caller must hold ``self._lock``.

Return (and lazily create) the :class:`ExecutionContext` for ``source_did``. The bridge requires a v4 :class:`ExecutionContext` to derive the

Navigate storage to get value at path.

Resolve peer identity from registry and produce a signed response. Returns ``None`` (causing handshake failure) when: - No registry i

Get names of loaded policies.

Get policy YAML based on strictness level.

Get running processes, platform-appropriate.

Get process info on Unix using ps.

Get process info on Windows using WMIC. WMIC's /format:csv emits `Node,CommandLine,ProcessId`. Command lines routinely contain commas (e.g. `

Get recent safety corrections relevant to the query. Returns formatted safety warnings for high-priority injection.

Get recommendation based on clause type and risk.

Get the minimum permission level required for an action type

Map resource to type category.

Return the revocation set for `revocation_url`. Returns: - A (possibly empty) set of revoked kids on success or 404.

Return the singleton RingBreachDetector for (agent_id, session_id).

Get human-readable label for source type.

Generate actionable suggestions based on the rule condition.

Resolve a GitHub token from env or gh CLI.

Resolve a GitHub token from env or gh CLI.

Extract trust context from state.

Get formatted user preferences for the personalization layer.

Extract violations from rollout.

Translate a glob pattern with ``**`` recursive wildcards to a regex. ``**`` matches zero or more path components (including ``/``); ``*`` mat

Handle incoming HTTP requests.

Route require_approval decisions through the approval handler.

Handle agent discovery request.

Handle an incoming WebSocket frame.

Handle handshake for establishing connection.

Handle task parameter negotiation. TODO: Implement actual negotiation logic with validation and governance. Currentl

Handle prompts/get - get a specific prompt. TODO: Implement actual prompt retrieval when needed.

Handle prompts/list - list available prompts. TODO: Implement actual prompt management when needed.

Handle a data query from another agent.

Handle resources/list - return list of available resources.

Handle resources/read — read a resource with governance. Determines the ``ActionType`` from the URI scheme and checks permissions bef

Handle a kernel signal. Same context-aware routing as ``_handle_violation``.

Handle task delegation (this agent delegating to another).

Handle a task request from another agent.

Handle tool calls with AGT 5.0 policy validation at the ``pre_tool_call`` intervention point.

Handle tools/call — execute a tool with governance. Maps the tool name to an ``ActionType``, checks permissions via the control plane

Handle tools/list - return list of available tools.

Handle policy violation during step.

Detect obfuscation attempts

Create SHA-256 hash of inputs for privacy-preserving audit.

Return a canonical JSON string of the fields covered by the hash.

Periodically send ping frames to keep the connection alive.

Return the host-side deny for ``require_human_approval=True``. Reachable only on the ``input`` intervention point when: * the policy sets ``

Send HTTP POST. Isolated for testability.

Convert bytes to human readable string.

Identify specific deviation factors

Identify which sections are likely most important.

Import the PR #908 sync utility by file path. The script lives under ``examples/`` and is not packaged as a normal module, so we use importli

Increment rate limit counter.

Index document for search

Initialize Claude Desktop integration.

Initialize sentry_sdk if installed; otherwise stay offline.

Initialize the SQLite database schema with WAL mode.

Initialize default safety rules.

Initialize optional runtime modules declared on the policy.

Initialize database schema.

Initialize standard mount points with memory backend.

Initialize syscall handlers.

Initialize default constitutional rules

Initialize default compliance requirements

Initialize patterns that flag potential policy violations. These are red flags that require human approval before updating wisdom.

Install default signal handlers.

Install a meta-path hook with depth tracking. Must be called while ``_SANDBOX_SHADOW_LOCK`` is held (i.e. between ``_enter_sys_modules_shadow