Set up internal callbacks between components

Set up default action-to-control mappings.

Setup default security policies for IATP.

Set up all governance layers for the demo.

Set up hooks to capture violations. Sets ``self._hooks_wired = True`` only when the kernel actually accepted the callback registratio

Set up kernel hooks to capture violations and signals.

Configure OTel SDK to export to OpenLit's OTLP endpoint.

Setup FastAPI routes.

Replace blocked entries in ``sys.modules`` with trap proxies. Closes the ``sys.modules['os'].system(...)`` escape that the import hoo

Return True if the two namespaces share a parent–child lineage.

Return Ed25519 signature over the escrow message.

Generate Nexus signature for escrow.

Return Ed25519 signature over the manifest hash for registration/update.

Generate Arbiter signature for resolution.

Attempt to sign the attestation with cosign. Returns the Sigstore bundle dict, or None if cosign is unavailable.

Return SequenceMatcher ratio between two strings.

Generate a simulated execution result

Simulate a single attack step against the experiment's defences.

Run one handshake and return elapsed time in seconds.

Slash agent reputation.

Approximate GitHub/MkDocs heading-to-anchor slugification. Lower-cases, strips Markdown formatting, replaces spaces with hyphens, drops chara

Translate an AGT snapshot dict to the ACS evaluate_intervention_point input. ACS expects the snapshot at the top level. AGT snapshots already

Split content into sections.

Read a Streamable HTTP SSE response until the matching JSON-RPC id.

Start a single agent

Start a leader election

Perform basic static analysis.

Policy expressed as a custom Rego rule that delegates to the agt.redact stock library to compute a transform verdict. This is the realistic us

Calculate drift between strings using character-level comparison.

Recursively strip approval keys from ``value`` (dict / list). Returns a deep copy of ``value`` with every NFKC-case-folded ``approved`` key r

Return a deep copy with every approval-flag key removed at every depth (defense against case / NFKC-confusable / nested bypasses).

Remove fenced code blocks so their content can't be mistaken for headings. A code fence may contain text that looks like a ``##`` heading or a

Calculate structural drift between two texts. Analyzes structure like line count, indentation, code patterns. Pure function - no side ef

Resolve a subject reference using the narrowest stable fallback chain. Prefer the direct audit resource first, then `target_did`, then an explici

Submit rollout to store.

Return a copy of ``payload`` with placeholders replaced by values. Only placeholder names present in ``resolved`` are substituted; any other

Surface an observation to the user. This is called when confidence exceeds threshold. In a real system, this might s

Main sync loop.

Recalculate and sync reputation scores.

Sync an existing rollout — check if advance or rollback needed.

Map syscall type to a tool name for policy engine.

Extract a readable dbt test name from a dbt unique_id.

Test a failure scenario against the new model with baseline instructions only. Args: query: The original query t

Extract timestamp from audit entries.

Check for timed-out disputes.

Normalise an Anthropic payload to a JSON-serialisable body.

Normalise an AutoGen payload to a JSON-serialisable body. v4 callers passed dicts like ``{"recipient": ..., "message": ...}`` to :met

Minimal YAML serializer (no external dependency).

Transform input for a worker (Transformer Middleware). This is the "secret sauce" that manages data flow.

Transform output from a worker (Transformer Middleware).

Return a deterministic mtime signature for the ATR source tree.

Trigger callbacks for an event

Trigger automatic credential revocation.

Trigger callbacks for state change

Map numeric score to trust level label.

Return list of trusted proxy IPs/CIDRs. When set, DID headers are only trusted from these source IPs. Empty list (default) means trus

Return True only when the caller-supplied ``X-User-Override`` header can be trusted to satisfy a "requires user confirmation" warning. Histor

Return True only when ``X-User-Override`` matches the secret server-side ``IATP_TRUSTED_USER_OVERRIDE_TOKEN``. Mirrors the hardening applied

Require all models to agree.