Performance metrics dashboard.

Append entry to persist file.

Try the OpenAI planner; fall back to a stub plan on any failure.

Return the minimal policy context included in the external digest. This helper intentionally limits the digest input to a smallest-stable int

Return True iff the policy is *default-deny*. Default-deny means: in the absence of an explicit-allow rule matching the request, the policy d

Poll run status with governance checks.

Poll SQS queue for messages.

Evaluate a complete async stream response before disclosure.

Create or update the contributor-check comment (idempotent).

Print formatted contradiction report

Background worker that delivers messages in priority order. Args: topic: The topic to process

Process pending broadcast events.

Process a signal in dry-run mode (no actions taken). This analyzes the signal and determines: 1. What was observed

Legacy v4 PolicyEvaluator-backed processing.

Legacy v4 allow/deny-list processing.

AGT 5.0 AdapterRuntimeBridge-backed processing.

AGT 5.0 AdapterRuntimeBridge-backed processing.

Project the named tool entry from the manifest catalog. Matches the engine's tool projection at tool intervention points.

Remove signals outside the correlation window.

Remove scope chain fingerprints outside replay window.

Poll the kernel for violations recorded during the current step. Used when no ``on_policy_violation`` hook was wired. The kernel is e

Remove expired challenges to prevent unbounded growth. Caller must hold self._challenges_lock — this method only runs from within ini

Purge redundant safety corrections from prioritization framework. Similar logic: if the new model handles a failure scenario

Execute query with trust verification.

Query OSV.dev API for vulnerabilities.

Query agent reputation.

Sleep if the response indicates we are close to the rate limit.

Read from audit log.

Read JSON-RPC messages from stdin (MCP client).

Read responses from target MCP server.

Read the content_hash of the last entry in the file.

Read the result dict from the multiprocessing Queue.

Main loop for readiness checks

Rebuild response with only clean nodes after content scanning.

Receive messages from Azure Service Bus.

Generate recommended actions for a shadow agent.

Record fingerprint with bounded memory growth.

Redact a sensitive value for safe logging.

Redact a sensitive value for safe logging.

Add tokens accrued since the last refill.

Register default executors for common action types

Register default signal normalizers.

Register MCP tools with governance.

Build an inline Rego accessor for a dot-separated snapshot field. Args: field: dotted path such as ``tool_call.args.amount_usd`` or

Render the body of a `_match[i]` rule for a given operator. Returns None for unsupported operators; the caller turns the rule into a fail-closed

Remove a replica

Render a v5 manifest snippet replacing a v4 ``CedarBackend`` call.

Render the v5 replacement snippet for a v4 ``GovernancePolicy``. The bridge ships a ``Manifest.from_governance_policy`` helper on the v5 surf

Render a Rego module emitting an AGT verdict from rule conditions. Each rule becomes one ``verdict`` branch keyed on its index. Field paths a

Render the bridge Rego module body.

Replay logs against Control Plane and compare. This is the core Arbiter logic - deterministically determines which a

Return the repository root, anchored via git to avoid editable-install path drift.

Fail closed unless the upstream returned a 2xx event-stream response.

Raise if the grpcio library is not installed.

Raise ImportError if redis package is not installed.

Raise if the websockets library is not installed.