PyPI - agenticdome-python-sdk - Versions diffs - 1.1.2__tar.gz → 1.1.4__tar.gz - Mend

agenticdome-python-sdk 1.1.2tar.gz → 1.1.4tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (56) hide show

{agenticdome_python_sdk-1.1.2/agenticdome_python_sdk.egg-info → agenticdome_python_sdk-1.1.4}/PKG-INFO RENAMED Viewed

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.1.2
+Version: 1.1.4
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License: Proprietary
-Project-URL: Homepage, https://au.agenticdome.io
+Project-URL: Homepage, https://www.agenticdome.io
 Project-URL: Repository, https://github.com/agenticdome/agenticdome-python-sdk
 Project-URL: Documentation, https://github.com/agenticdome/agenticdome-python-sdk#readme
 Project-URL: Issues, https://github.com/agenticdome/agenticdome-python-sdk/issues
@@ -27,56 +27,59 @@ License-File: LICENSE
 Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai; extra == "crewai"
+Requires-Dist: crewai==1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
+Provides-Extra: pop
+Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai; extra == "pydanticai"
+Requires-Dist: pydantic-ai==2.14.1; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai; extra == "pydantic"
+Requires-Dist: pydantic-ai==2.14.1; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
-Requires-Dist: langgraph; extra == "langgraph"
-Requires-Dist: langchain-core; extra == "langgraph"
+Requires-Dist: langgraph==1.2.9; extra == "langgraph"
+Requires-Dist: langchain-core==1.5.0; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects; extra == "foundry"
-Requires-Dist: azure-identity; extra == "foundry"
+Requires-Dist: azure-ai-projects==2.3.0; extra == "foundry"
+Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno; extra == "agno"
+Requires-Dist: agno==2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents; extra == "openai-agents"
+Requires-Dist: openai-agents==0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
-Requires-Dist: mcp; extra == "mcp"
+Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3; extra == "bedrock"
+Requires-Dist: boto3==1.43.52; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3; extra == "aws-bedrock"
+Requires-Dist: boto3==1.43.52; extra == "aws-bedrock"
 Provides-Extra: llamaindex
-Requires-Dist: llama-index; extra == "llamaindex"
+Requires-Dist: llama-index==0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
-Requires-Dist: llama-index; extra == "llama-index"
+Requires-Dist: llama-index==0.14.23; extra == "llama-index"
 Provides-Extra: google-adk
-Requires-Dist: google-adk; extra == "google-adk"
+Requires-Dist: google-adk==2.5.0; extra == "google-adk"
 Provides-Extra: adk
-Requires-Dist: google-adk; extra == "adk"
+Requires-Dist: google-adk==2.5.0; extra == "adk"
 Provides-Extra: all
-Requires-Dist: crewai; extra == "all"
+Requires-Dist: crewai==1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
-Requires-Dist: pydantic-ai; extra == "all"
+Requires-Dist: cryptography>=42.0.0; extra == "all"
+Requires-Dist: pydantic-ai==2.14.1; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
-Requires-Dist: langgraph; extra == "all"
-Requires-Dist: langchain-core; extra == "all"
-Requires-Dist: agno; extra == "all"
-Requires-Dist: azure-ai-projects; extra == "all"
-Requires-Dist: azure-identity; extra == "all"
-Requires-Dist: openai-agents; extra == "all"
-Requires-Dist: mcp; extra == "all"
-Requires-Dist: boto3; extra == "all"
-Requires-Dist: llama-index; extra == "all"
-Requires-Dist: google-adk; extra == "all"
+Requires-Dist: langgraph==1.2.9; extra == "all"
+Requires-Dist: langchain-core==1.5.0; extra == "all"
+Requires-Dist: agno==2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects==2.3.0; extra == "all"
+Requires-Dist: azure-identity==1.25.3; extra == "all"
+Requires-Dist: openai-agents==0.18.3; extra == "all"
+Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
+Requires-Dist: boto3==1.43.52; extra == "all"
+Requires-Dist: llama-index==0.14.23; extra == "all"
+Requires-Dist: google-adk==2.5.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
 Requires-Dist: ruff>=0.5.0; extra == "dev"
@@ -155,7 +158,7 @@ Your local Python runtime executes agents, tools, workflows, and framework-speci
 [ LOCAL ENTERPRISE RUNTIME PERIMETER ]                     [ AGENTICDOME CENTRAL PLANE ]
 +-------------------------------------------------+          +-----------------------------+
-| Python Agent Runtime                            |          | https://au.agenticdome.io   |
+| Python Agent Runtime                            |          | https://demo-sidecar.agenticdome.io   |
 | CrewAI / PydanticAI / LangGraph / Microsoft AF / AI Foundry / Agno / OpenAI Agents / MCP Hosts / Bedrock / Google ADK / LlamaIndex |          | Centralized Policy Engine   |
 +-------------------------------------------------+          +-----------------------------+
      |                         |              ^                            ^
@@ -225,15 +228,48 @@ Authorizes tool calls before execution using:
 AgenticDome can transparently authorize multi-agent delegation workflows and issue decision tokens that bind:
+- Originating human subject, when present
+- Ordered and nested agent actor chain
 - Source manager agent
 - Target specialist agent
 - Tool name
 - Tool arguments
 - Session ID
+- Trace and lineage root/parent IDs
+- Intent digest, policy binding, authorized scopes, and trust epochs
 - Tenant context
 - Policy decision
-This helps prevent unauthorized lateral privilege escalation between agents.
+Execution verification consumes the server-side call budget and checks revocation state. Optional proof-bound decisions use a DPoP-style signed JWT tied to the decision token hash; sending the public-key thumbprint alone is not treated as proof.
+Install the proof helper extra and create a runtime-held key:
+```bash
+pip install "agenticdome-python-sdk[pop]"
+```
+```python
+from agenticdome_sdk import create_dpop_proof, generate_rsa_proof_key
+proof_key = generate_rsa_proof_key()
+# Pass proof_key["thumbprint"] as proof_thumbprint when authorizing.
+proof = create_dpop_proof(
+    proof_key["private_key_pem"],
+    access_token=decision_token,
+    method="POST",
+    uri="/a2a",
+)
+client.a2a_verify_decision_token_rpc(
+    decision_token,
+    tool_name=tool_name,
+    tool_args=tool_args,
+    agent_id=worker_id,
+    source_agent_id=manager_id,
+    proof_token=proof,
+)
+```
+This helps prevent unauthorized lateral privilege escalation and stolen-token replay between agents.
 ### Inline Output Data Loss Prevention, DLP
@@ -302,6 +338,7 @@ Install the extra for the framework you use:
 | AWS Bedrock / Bedrock Agents | `pip install "agenticdome-python-sdk[bedrock]"` |
 | MCP host / gateway | `pip install "agenticdome-python-sdk[mcp]"` |
 | Redis token storage | `pip install "agenticdome-python-sdk[redis]"` |
+| Proof-of-possession helpers | `pip install "agenticdome-python-sdk[pop]"` |
 | All optional integrations | `pip install "agenticdome-python-sdk[all]"` |
 Some adapters are dependency-light at import time. Google ADK, LlamaIndex, Bedrock, MCP, and Microsoft helpers can wrap local boundaries without forcing one exact runtime stack; install the framework packages your application actually uses.
@@ -315,8 +352,8 @@ Set these environment variables in your local shell, container, CI/CD environmen
 ### Required Variables
 ```bash
-# Regional gateway base URL.
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+# Tenant runtime sidecar URL. Do not use the control-plane website URL here.
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 # Secure access token generated in the AgenticDome console.
 export AGENTICDOME_API_KEY="your_api_key_abc123..."
@@ -409,7 +446,7 @@ Set these values in the same place you configure your Python application runtime
 Minimum production configuration:
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_API_KEY="your_api_key"
 export AGENTICDOME_TENANT_ID="your_tenant_id"
 export AGENTICDOME_FAIL_CLOSED="true"
@@ -569,7 +606,7 @@ secure_refund = firewall.wrap_delegated_tool_handler(
 | Environment Variable | Type | Default | Description |
 | :--- | :--- | :--- | :--- |
-| `AGENTICDOME_API_BASE` | string | required | AgenticDome regional API and console endpoint, for example `https://au.agenticdome.io`. |
+| `AGENTICDOME_API_BASE` | string | required | Tenant runtime sidecar origin, for example `https://demo-sidecar.agenticdome.io`. This is separate from the control-plane console URL. |
 | `AGENTICDOME_API_KEY` | string | required | API key generated in the AgenticDome console. |
 | `AGENTICDOME_TENANT_ID` | string | required | Tenant or organization isolation namespace. |
 | `AGENTICDOME_PLATFORM` | string | framework-specific | Runtime platform label included in policy context. |
@@ -777,7 +814,7 @@ Use the core client when you own the runtime loop or have a custom gateway. This
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -1132,7 +1169,7 @@ pip install "agenticdome-python-sdk[pydanticai]"
 [ PYDANTICAI AGENT RUNTIME PERIMETER ]            [ AGENTICDOME CONTROL PLANE ]
 +-------------------------------------------------+          +-----------------------------+
-| Agent.run() Execution Loop                      |          | https://au.agenticdome.io   |
+| Agent.run() Execution Loop                      |          | https://demo-sidecar.agenticdome.io   |
 +-------------------------------------------------+          +-----------------------------+
      |                         |              ^                            ^
      | 1. before_runner_init   | 4. after     | Verdict / DLP                |
@@ -1261,7 +1298,7 @@ PydanticAI lifecycle hook APIs have evolved. Current PydanticAI documents `pydan
 - If compatible legacy lifecycle decorators are available, `attach_to_agent()` attaches prompt ingress and egress DLP hooks.
 - If native `Hooks` capabilities are available, `create_hooks()` returns a capability object you can pass into `Agent(..., capabilities=[...])`.
 - If lifecycle decorators are not available, `@firewall.secure_tool(...)` still protects tool execution.
-- In production mode, configure API base, API key, tenant ID, and stable session IDs.
+- In production mode, configure the tenant runtime sidecar, API key, tenant ID, and stable session IDs.
 - `AGENTICDOME_BLOCK_ON_SENSITIVE_OUTPUT=true` means AgenticDome may ask Mesh to block sensitive output; the SDK only blocks when the policy response verdict is `BLOCKED`.
 ---
@@ -1297,7 +1334,7 @@ pip install "agenticdome-python-sdk[langgraph]"
 [ LANGGRAPH STATEGRAPH RUNTIME ]                    [ AGENTICDOME CONTROL PLANE ]
 +-----------------------------------------------+     +-----------------------------+
-| StateGraph / CompiledStateGraph               |     | https://au.agenticdome.io   |
+| StateGraph / CompiledStateGraph               |     | https://demo-sidecar.agenticdome.io   |
 +-----------------------------------------------+     +-----------------------------+
      |                  |                 ^                       ^
      | 1. user message  | 2. tool calls   | 4. verdict / token    | validate
@@ -1512,7 +1549,7 @@ Install the Microsoft Agent Framework packages used by your application separate
 [ MICROSOFT AGENT FRAMEWORK PYTHON RUNTIME ]       [ AGENTICDOME CONTROL PLANE ]
 +------------------------------------------------+   +-----------------------------+
-| Agent.run / Workflow.run / Function Tool       |   | https://au.agenticdome.io   |
+| Agent.run / Workflow.run / Function Tool       |   | https://demo-sidecar.agenticdome.io   |
 +------------------------------------------------+   +-----------------------------+
      |                    |                 ^                     ^
      | 1. input text      | 2. tool args    | verdict / token      | validate
@@ -1709,7 +1746,7 @@ The Foundry integration supports:
 - Direct tool-argument stripping, lightweight JSON-schema validation, and sanitized-argument execution when AgenticDome returns safer arguments
 - Enterprise identity context propagation for Entra IDs, roles/scopes, Foundry project IDs, and Purview or sensitivity labels
 - Production-mode stable session ID enforcement and output-sanitization requirements
-- Output DLP through Mesh using the required AgenticDome API base URL, API key, and tenant ID
+- Output DLP through Mesh using the required tenant runtime sidecar URL, API key, and tenant ID
 - Structured-output preservation by parsing sanitized JSON back to dictionaries/lists where possible
 - Local rate limits, input/output/tool-argument size limits, retries, circuit breaker behavior, audit logging, and OpenTelemetry span events
 - Streaming response sanitization through `sanitize_streaming_response()`
@@ -1735,7 +1772,7 @@ If your application uses Microsoft Agent Framework hosted agents, install the Fo
 Foundry threat-contract calls use bearer authentication:
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_BEARER_TOKEN="your_foundry_threat_contract_bearer_token"
 ```
@@ -1894,7 +1931,7 @@ from agenticdome_sdk.microsoft_ai_foundry import (
 - Production deployments should pass a stable `session_id`, `run_id`, `trace_id`, `conversation_id`, or `thread_id`; generated fallback IDs are intended for local development only.
 - Pass Entra identity, roles/scopes, Foundry project IDs, and Purview/sensitivity labels on `ctx` or `policy_context` so server-side policy can make identity-aware decisions.
 - If a Foundry hosted tool executes entirely inside a remote provider runtime, this local Python SDK can protect the local request/response boundary but cannot inspect inside the remote execution environment.
-- Microsoft AI Foundry requires the standard AgenticDome API base URL, API key, and tenant ID. Threat-contract prompt and tool analysis also require `AGENTICDOME_BEARER_TOKEN`.
+- Microsoft AI Foundry requires the tenant runtime sidecar URL, API key, and tenant ID. Threat-contract prompt and tool analysis also require `AGENTICDOME_BEARER_TOKEN`.
 Official references:
@@ -2991,7 +3028,7 @@ If you need to call AgenticDome APIs manually, use the core SDK client.
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3012,7 +3049,7 @@ client.report_incident(
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3040,7 +3077,7 @@ print(result)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3076,7 +3113,7 @@ print(result)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3113,7 +3150,7 @@ print(authorization)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3144,7 +3181,7 @@ print(verification)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3193,7 +3230,7 @@ In-memory token storage is suitable for local development and single-process wor
 ## Recommended Production Settings
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_API_KEY="your_api_key"
 export AGENTICDOME_TENANT_ID="your_tenant_id"
@@ -3418,7 +3455,7 @@ For strict security-policy validation, add:
 export AGENTICDOME_LIVE_EXPECT_STRICT=1
 ```
-The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+The live tenant suite performs real `guardrail_validate()` and `mesh_validate()` calls, verifies that one request can carry an originating human subject and upstream agent actor together, and queries the tenant's active threat-signature bundle through the public SDK method. With `AGENTICDOME_LIVE_EXPECT_STRICT=1`, it additionally requires sensitive output enforcement plus a signed bundle whose provenance is `agenticdome_private_collection`. Framework-specific behavior remains covered by the offline adapter test matrix above.
 ---

{agenticdome_python_sdk-1.1.2 → agenticdome_python_sdk-1.1.4}/README.md RENAMED Viewed

@@ -68,7 +68,7 @@ Your local Python runtime executes agents, tools, workflows, and framework-speci
 [ LOCAL ENTERPRISE RUNTIME PERIMETER ]                     [ AGENTICDOME CENTRAL PLANE ]
 +-------------------------------------------------+          +-----------------------------+
-| Python Agent Runtime                            |          | https://au.agenticdome.io   |
+| Python Agent Runtime                            |          | https://demo-sidecar.agenticdome.io   |
 | CrewAI / PydanticAI / LangGraph / Microsoft AF / AI Foundry / Agno / OpenAI Agents / MCP Hosts / Bedrock / Google ADK / LlamaIndex |          | Centralized Policy Engine   |
 +-------------------------------------------------+          +-----------------------------+
      |                         |              ^                            ^
@@ -138,15 +138,48 @@ Authorizes tool calls before execution using:
 AgenticDome can transparently authorize multi-agent delegation workflows and issue decision tokens that bind:
+- Originating human subject, when present
+- Ordered and nested agent actor chain
 - Source manager agent
 - Target specialist agent
 - Tool name
 - Tool arguments
 - Session ID
+- Trace and lineage root/parent IDs
+- Intent digest, policy binding, authorized scopes, and trust epochs
 - Tenant context
 - Policy decision
-This helps prevent unauthorized lateral privilege escalation between agents.
+Execution verification consumes the server-side call budget and checks revocation state. Optional proof-bound decisions use a DPoP-style signed JWT tied to the decision token hash; sending the public-key thumbprint alone is not treated as proof.
+Install the proof helper extra and create a runtime-held key:
+```bash
+pip install "agenticdome-python-sdk[pop]"
+```
+```python
+from agenticdome_sdk import create_dpop_proof, generate_rsa_proof_key
+proof_key = generate_rsa_proof_key()
+# Pass proof_key["thumbprint"] as proof_thumbprint when authorizing.
+proof = create_dpop_proof(
+    proof_key["private_key_pem"],
+    access_token=decision_token,
+    method="POST",
+    uri="/a2a",
+)
+client.a2a_verify_decision_token_rpc(
+    decision_token,
+    tool_name=tool_name,
+    tool_args=tool_args,
+    agent_id=worker_id,
+    source_agent_id=manager_id,
+    proof_token=proof,
+)
+```
+This helps prevent unauthorized lateral privilege escalation and stolen-token replay between agents.
 ### Inline Output Data Loss Prevention, DLP
@@ -215,6 +248,7 @@ Install the extra for the framework you use:
 | AWS Bedrock / Bedrock Agents | `pip install "agenticdome-python-sdk[bedrock]"` |
 | MCP host / gateway | `pip install "agenticdome-python-sdk[mcp]"` |
 | Redis token storage | `pip install "agenticdome-python-sdk[redis]"` |
+| Proof-of-possession helpers | `pip install "agenticdome-python-sdk[pop]"` |
 | All optional integrations | `pip install "agenticdome-python-sdk[all]"` |
 Some adapters are dependency-light at import time. Google ADK, LlamaIndex, Bedrock, MCP, and Microsoft helpers can wrap local boundaries without forcing one exact runtime stack; install the framework packages your application actually uses.
@@ -228,8 +262,8 @@ Set these environment variables in your local shell, container, CI/CD environmen
 ### Required Variables
 ```bash
-# Regional gateway base URL.
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+# Tenant runtime sidecar URL. Do not use the control-plane website URL here.
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 # Secure access token generated in the AgenticDome console.
 export AGENTICDOME_API_KEY="your_api_key_abc123..."
@@ -322,7 +356,7 @@ Set these values in the same place you configure your Python application runtime
 Minimum production configuration:
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_API_KEY="your_api_key"
 export AGENTICDOME_TENANT_ID="your_tenant_id"
 export AGENTICDOME_FAIL_CLOSED="true"
@@ -482,7 +516,7 @@ secure_refund = firewall.wrap_delegated_tool_handler(
 | Environment Variable | Type | Default | Description |
 | :--- | :--- | :--- | :--- |
-| `AGENTICDOME_API_BASE` | string | required | AgenticDome regional API and console endpoint, for example `https://au.agenticdome.io`. |
+| `AGENTICDOME_API_BASE` | string | required | Tenant runtime sidecar origin, for example `https://demo-sidecar.agenticdome.io`. This is separate from the control-plane console URL. |
 | `AGENTICDOME_API_KEY` | string | required | API key generated in the AgenticDome console. |
 | `AGENTICDOME_TENANT_ID` | string | required | Tenant or organization isolation namespace. |
 | `AGENTICDOME_PLATFORM` | string | framework-specific | Runtime platform label included in policy context. |
@@ -690,7 +724,7 @@ Use the core client when you own the runtime loop or have a custom gateway. This
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -1045,7 +1079,7 @@ pip install "agenticdome-python-sdk[pydanticai]"
 [ PYDANTICAI AGENT RUNTIME PERIMETER ]            [ AGENTICDOME CONTROL PLANE ]
 +-------------------------------------------------+          +-----------------------------+
-| Agent.run() Execution Loop                      |          | https://au.agenticdome.io   |
+| Agent.run() Execution Loop                      |          | https://demo-sidecar.agenticdome.io   |
 +-------------------------------------------------+          +-----------------------------+
      |                         |              ^                            ^
      | 1. before_runner_init   | 4. after     | Verdict / DLP                |
@@ -1174,7 +1208,7 @@ PydanticAI lifecycle hook APIs have evolved. Current PydanticAI documents `pydan
 - If compatible legacy lifecycle decorators are available, `attach_to_agent()` attaches prompt ingress and egress DLP hooks.
 - If native `Hooks` capabilities are available, `create_hooks()` returns a capability object you can pass into `Agent(..., capabilities=[...])`.
 - If lifecycle decorators are not available, `@firewall.secure_tool(...)` still protects tool execution.
-- In production mode, configure API base, API key, tenant ID, and stable session IDs.
+- In production mode, configure the tenant runtime sidecar, API key, tenant ID, and stable session IDs.
 - `AGENTICDOME_BLOCK_ON_SENSITIVE_OUTPUT=true` means AgenticDome may ask Mesh to block sensitive output; the SDK only blocks when the policy response verdict is `BLOCKED`.
 ---
@@ -1210,7 +1244,7 @@ pip install "agenticdome-python-sdk[langgraph]"
 [ LANGGRAPH STATEGRAPH RUNTIME ]                    [ AGENTICDOME CONTROL PLANE ]
 +-----------------------------------------------+     +-----------------------------+
-| StateGraph / CompiledStateGraph               |     | https://au.agenticdome.io   |
+| StateGraph / CompiledStateGraph               |     | https://demo-sidecar.agenticdome.io   |
 +-----------------------------------------------+     +-----------------------------+
      |                  |                 ^                       ^
      | 1. user message  | 2. tool calls   | 4. verdict / token    | validate
@@ -1425,7 +1459,7 @@ Install the Microsoft Agent Framework packages used by your application separate
 [ MICROSOFT AGENT FRAMEWORK PYTHON RUNTIME ]       [ AGENTICDOME CONTROL PLANE ]
 +------------------------------------------------+   +-----------------------------+
-| Agent.run / Workflow.run / Function Tool       |   | https://au.agenticdome.io   |
+| Agent.run / Workflow.run / Function Tool       |   | https://demo-sidecar.agenticdome.io   |
 +------------------------------------------------+   +-----------------------------+
      |                    |                 ^                     ^
      | 1. input text      | 2. tool args    | verdict / token      | validate
@@ -1622,7 +1656,7 @@ The Foundry integration supports:
 - Direct tool-argument stripping, lightweight JSON-schema validation, and sanitized-argument execution when AgenticDome returns safer arguments
 - Enterprise identity context propagation for Entra IDs, roles/scopes, Foundry project IDs, and Purview or sensitivity labels
 - Production-mode stable session ID enforcement and output-sanitization requirements
-- Output DLP through Mesh using the required AgenticDome API base URL, API key, and tenant ID
+- Output DLP through Mesh using the required tenant runtime sidecar URL, API key, and tenant ID
 - Structured-output preservation by parsing sanitized JSON back to dictionaries/lists where possible
 - Local rate limits, input/output/tool-argument size limits, retries, circuit breaker behavior, audit logging, and OpenTelemetry span events
 - Streaming response sanitization through `sanitize_streaming_response()`
@@ -1648,7 +1682,7 @@ If your application uses Microsoft Agent Framework hosted agents, install the Fo
 Foundry threat-contract calls use bearer authentication:
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_BEARER_TOKEN="your_foundry_threat_contract_bearer_token"
 ```
@@ -1807,7 +1841,7 @@ from agenticdome_sdk.microsoft_ai_foundry import (
 - Production deployments should pass a stable `session_id`, `run_id`, `trace_id`, `conversation_id`, or `thread_id`; generated fallback IDs are intended for local development only.
 - Pass Entra identity, roles/scopes, Foundry project IDs, and Purview/sensitivity labels on `ctx` or `policy_context` so server-side policy can make identity-aware decisions.
 - If a Foundry hosted tool executes entirely inside a remote provider runtime, this local Python SDK can protect the local request/response boundary but cannot inspect inside the remote execution environment.
-- Microsoft AI Foundry requires the standard AgenticDome API base URL, API key, and tenant ID. Threat-contract prompt and tool analysis also require `AGENTICDOME_BEARER_TOKEN`.
+- Microsoft AI Foundry requires the tenant runtime sidecar URL, API key, and tenant ID. Threat-contract prompt and tool analysis also require `AGENTICDOME_BEARER_TOKEN`.
 Official references:
@@ -2904,7 +2938,7 @@ If you need to call AgenticDome APIs manually, use the core SDK client.
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -2925,7 +2959,7 @@ client.report_incident(
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -2953,7 +2987,7 @@ print(result)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -2989,7 +3023,7 @@ print(result)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3026,7 +3060,7 @@ print(authorization)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3057,7 +3091,7 @@ print(verification)
 from agenticdome_sdk.client import AgentGuardClient
 client = AgentGuardClient(
-    api_base="https://au.agenticdome.io",
+    api_base="https://demo-sidecar.agenticdome.io",
     api_key="your-api-key",
     tenant_id="your-tenant-id",
     timeout=20,
@@ -3106,7 +3140,7 @@ In-memory token storage is suitable for local development and single-process wor
 ## Recommended Production Settings
 ```bash
-export AGENTICDOME_API_BASE="https://au.agenticdome.io"
+export AGENTICDOME_API_BASE="https://demo-sidecar.agenticdome.io"
 export AGENTICDOME_API_KEY="your_api_key"
 export AGENTICDOME_TENANT_ID="your_tenant_id"
@@ -3331,7 +3365,7 @@ For strict security-policy validation, add:
 export AGENTICDOME_LIVE_EXPECT_STRICT=1
 ```
-The live tenant test performs real `guardrail_validate()` and `mesh_validate()` calls through the core client. Framework-specific behavior remains covered by the offline adapter test matrix above, because those tests assert where each framework boundary calls the shared AgenticDome client and how it handles policy decisions.
+The live tenant suite performs real `guardrail_validate()` and `mesh_validate()` calls, verifies that one request can carry an originating human subject and upstream agent actor together, and queries the tenant's active threat-signature bundle through the public SDK method. With `AGENTICDOME_LIVE_EXPECT_STRICT=1`, it additionally requires sensitive output enforcement plus a signed bundle whose provenance is `agenticdome_private_collection`. Framework-specific behavior remains covered by the offline adapter test matrix above.
 ---

agenticdome-python-sdk 1.1.2__tar.gz → 1.1.4__tar.gz

agenticdome-python-sdk 1.1.2tar.gz → 1.1.4tar.gz