Demonstrate tool call limits.

Demo tool invocations to show governance in action.

Send a normal request to the trusted bank agent.

Demonstrate usage and cost tracking.

Demonstrate execution with user constraints.

Demonstrate the user override flow.

Demonstrate DoerAgent with prioritization.

Demonstrate ObserverAgent learning with prioritization.

Demonstrate processing multiple signals in sequence.

Demonstrate the Eval-DD workflow. The Old World: Write implementation → Write tests The New World: Write golden dataset → Write rubr

Demonstrate processing a file change event (IDE integration).

Demonstrate processing a log stream event (monitoring).

Demonstrate processing a text input (traditional chat).

Demonstrate the upgrade purge process.

Deny an escalation request. Returns True if found and updated.

Create a policy that denies all access.

Remove an agent from the registry.

Deserialize agent state from a dictionary. Args: state: Dictionary containing serialized agent state

Detach the current SpanSink.

detectCTEInnerVerb finds the first DML keyword at top-level paren depth in a WITH-prefixed query. Falls back to SELECT.

Detect the command from the last user message.

* For a CTE-prefixed query (`WITH ... AS (...) <verb> ...`), find the first * DML keyword that appears at top-level paren depth (i.e. not inside a CT

* Detect potential edge cases for an agent

detectHiddenInstructions catches zero-width and homoglyph characters.

detectRugPull flags oversized descriptions that embed instruction-like payloads.

detectSensitiveData checks for credit cards and SSNs

detectToolPoisoning looks for hidden prompt-injection instructions inside a tool's description (e.g. "ignore previous instructions").

detectTyposquatting compares the tool name against known common tool names and flags suspiciously similar names (Levenshtein distance ≤ 2, but not exa

Flag if current month transactions exceed 3x average.

Detect a coordination cluster starting from a seed account.

Find accounts that comment on the same issues as the seed.

Detect conflicts between official and practical sources. Looks for cases where: - Official docs say one thing

Account dormant > 180 days suddenly active.

Return changed areas that no workflow path filter currently covers.

Detect all PHI in text.

A→B→C→A circular flow.

Find repos that the seed forked, then check if other accounts forked the same repos.

Multiple transactions just under $10K CTR threshold.

Find accounts that filed issues in the same repos within 48 hours of the seed.

Compare two policies, returning changed fields as (self, other) tuples.

Return entries in *new* that are not byte-for-byte in *old*. Identity is (ecosystem, name, version, integrity). A version bump, a new depende

Compare two PolicyDocuments rule-by-rule. Return a list of change strings.

Disable an agent (admin action).

Close connection to Redis.

Close connection (no-op for memory).

Close connection to PostgreSQL.

Get list of discovered peer agents.

Auto-discover delegation links by scanning traces for DELEGATION spans. Scans all registered agent traces for spans of kind DELEGATION,

Auto-discover lockfiles in the working tree. When *base_ref* is supplied and resolves, we restrict the discovery to files changed in the diff

Discover markdown files under ``root/docs`` plus root-level ``*.md``. ``extra_paths`` overrides discovery when non-empty.

Download the CaaS benchmark corpus from Hugging Face. Args: local_dir: Local directory to download to. Defaults to cache.

Download the IATP benchmark dataset. Args: filename: Name of the file to download repo_id: Repository ID. De

Download a dataset file from Hugging Face Hub. Args: repo_id: Repository ID on HF Hub (e.g., "microsoft/amb-benchmarks"). fi

Break-the-glass emergency access. Bypasses normal access controls but triggers alerts.

Execute emergency command - bypasses normal checks.

Break-the-glass emergency access. Grants temporary access but triggers alerts.

Enable colors on *this* instance.

Mark the end of a conversation turn.

End the current turn within the session.

Apply the demo's host-side enforcement of an AGT verdict. Returns ``(blocked, transformed_policy_target)``. AGT D1 strictly rejects ``effect

Scan deprecated plugins and auto-transition those past EOL date. Returns: List of plugins that were transitioned to EOL.