agenticdome-python-sdk 1.2.28__tar.gz → 1.2.29__tar.gz

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.28
+Version: 1.2.29
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -31,21 +31,22 @@ License-File: LICENSE
 License-File: NOTICE
 Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
+Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -54,18 +55,18 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
@@ -75,30 +76,30 @@ Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "all"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "all"
+Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "all"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -2336,7 +2337,7 @@ Start with the dedicated [MCP Host and Gateway Action Firewall guide](https://gi
 pip install "agenticdome-python-sdk[mcp]"
 ```
 
-**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=1.28.1`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface, and CrewAI 1.15.5 declares `mcp~=1.28.1` for combined installs. Keep the ceiling until an isolated MCP 2.x certification passes the native imports, adapter checks, preserved 1.x floor, and package gates. The AgenticDome firewall itself is plain-JSON-RPC and dependency-light, but installing the base SDK beside an independently managed MCP 2.x transport does not constitute a formally certified MCP 2.x support claim.
+**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=2.2.0`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface used by the earlier native compatibility test. AgenticDome's transport-independent JSON-RPC firewall has since passed the isolated MCP 2.x certification matrix through 2.2.0 while preserving the 1.26.0 floor. CrewAI 1.15.x combined installations can still resolve the narrower MCP 1.28.x line according to CrewAI's dependency constraint; this does not reduce the independently certified AgenticDome range.
 
 **Wrap the forwarding boundary** — the full host flow is `JSON-RPC request → rate limit / upstream prompt screen → method authorization → optional delegation-token verification → third-party MCP server → list filtering / result sanitization → client`:
 
@@ -2606,6 +2607,30 @@ result = client.mesh_validate(
 print(result)
 ```
 
+**Multimodal content descriptors:**
+
+Use `inspect_content()` when a document, image, audio or video processor has
+already produced bounded text, a transcript, trusted sensitivity labels, or a
+content digest. The active tenant policy is evaluated inside the assigned
+AgenticDome runtime. OCR, transcription and proprietary classification are not
+shipped in this public SDK, and the returned evidence does not retain raw
+content.
+
+```python
+verdict = client.inspect_content(
+    direction="output",
+    content_parts=[{
+        "modality": "image",
+        "mime_type": "image/png",
+        "content_sha256": "sha256:" + image_digest,
+        "labels": ["phi"],
+    }],
+    policy_context={"request_purpose": "clinical-summary-delivery"},
+)
+if verdict["verdict"] == "BLOCKED":
+    raise PermissionError(verdict["reason"])
+```
+
 **Incident reporting:**
 
 ```python
@@ -2719,6 +2744,34 @@ Plus, for every production deployment:
 
 ---
 
+## Verified Action lifecycle evidence
+
+Use `VerifiedActionReporter` for executable tool calls, function calls, MCP operations and external side effects that should appear in **Verified Actions**. It is not intended for health checks or every policy lookup.
+
+```bash
+export AGENTICDOME_EVIDENCE_API_BASE="https://your-control-plane.example"
+export AGENTICDOME_EVIDENCE_TOKEN="<portal-token-scoped-to-evidence:write>"
+```
+
+```python
+from agenticdome_sdk import VerifiedActionReporter, verified_action
+
+evidence = VerifiedActionReporter.from_env(tenant_id="your-tenant-id")
+
+@verified_action(
+    reporter=evidence,
+    operation_type="function_call",
+    executor_type="function",
+    target_type="service",
+)
+def refresh_customer_record(customer_id: str):
+    ...
+```
+
+The reporter uses a bounded, non-blocking queue and retains hashes plus normalized lifecycle metadata only. It never sends raw arguments, results, prompts, source, or credentials. The dedicated evidence token is separate from the Runtime / SDK key: authorization stays on the assigned sidecar and evidence-delivery failure never changes its allow/deny decision. Integrations built on the shared framework `secure_tool` / `wrap_tool_handler` boundary and the MCP host/gateway wrapper report the same lifecycle automatically when these optional evidence variables are present; other custom boundaries can use the decorator above.
+
+---
+
 ## Source Installation and Verification
 
 Most customers should install the published package from PyPI. Contributors evaluating the public source can run the public tests from the SDK root:

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/README.md

@@ -2224,7 +2224,7 @@ Start with the dedicated [MCP Host and Gateway Action Firewall guide](https://gi
 pip install "agenticdome-python-sdk[mcp]"
 ```
 
-**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=1.28.1`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface, and CrewAI 1.15.5 declares `mcp~=1.28.1` for combined installs. Keep the ceiling until an isolated MCP 2.x certification passes the native imports, adapter checks, preserved 1.x floor, and package gates. The AgenticDome firewall itself is plain-JSON-RPC and dependency-light, but installing the base SDK beside an independently managed MCP 2.x transport does not constitute a formally certified MCP 2.x support claim.
+**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=2.2.0`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface used by the earlier native compatibility test. AgenticDome's transport-independent JSON-RPC firewall has since passed the isolated MCP 2.x certification matrix through 2.2.0 while preserving the 1.26.0 floor. CrewAI 1.15.x combined installations can still resolve the narrower MCP 1.28.x line according to CrewAI's dependency constraint; this does not reduce the independently certified AgenticDome range.
 
 **Wrap the forwarding boundary** — the full host flow is `JSON-RPC request → rate limit / upstream prompt screen → method authorization → optional delegation-token verification → third-party MCP server → list filtering / result sanitization → client`:
 
@@ -2494,6 +2494,30 @@ result = client.mesh_validate(
 print(result)
 ```
 
+**Multimodal content descriptors:**
+
+Use `inspect_content()` when a document, image, audio or video processor has
+already produced bounded text, a transcript, trusted sensitivity labels, or a
+content digest. The active tenant policy is evaluated inside the assigned
+AgenticDome runtime. OCR, transcription and proprietary classification are not
+shipped in this public SDK, and the returned evidence does not retain raw
+content.
+
+```python
+verdict = client.inspect_content(
+    direction="output",
+    content_parts=[{
+        "modality": "image",
+        "mime_type": "image/png",
+        "content_sha256": "sha256:" + image_digest,
+        "labels": ["phi"],
+    }],
+    policy_context={"request_purpose": "clinical-summary-delivery"},
+)
+if verdict["verdict"] == "BLOCKED":
+    raise PermissionError(verdict["reason"])
+```
+
 **Incident reporting:**
 
 ```python
@@ -2607,6 +2631,34 @@ Plus, for every production deployment:
 
 ---
 
+## Verified Action lifecycle evidence
+
+Use `VerifiedActionReporter` for executable tool calls, function calls, MCP operations and external side effects that should appear in **Verified Actions**. It is not intended for health checks or every policy lookup.
+
+```bash
+export AGENTICDOME_EVIDENCE_API_BASE="https://your-control-plane.example"
+export AGENTICDOME_EVIDENCE_TOKEN="<portal-token-scoped-to-evidence:write>"
+```
+
+```python
+from agenticdome_sdk import VerifiedActionReporter, verified_action
+
+evidence = VerifiedActionReporter.from_env(tenant_id="your-tenant-id")
+
+@verified_action(
+    reporter=evidence,
+    operation_type="function_call",
+    executor_type="function",
+    target_type="service",
+)
+def refresh_customer_record(customer_id: str):
+    ...
+```
+
+The reporter uses a bounded, non-blocking queue and retains hashes plus normalized lifecycle metadata only. It never sends raw arguments, results, prompts, source, or credentials. The dedicated evidence token is separate from the Runtime / SDK key: authorization stays on the assigned sidecar and evidence-delivery failure never changes its allow/deny decision. Integrations built on the shared framework `secure_tool` / `wrap_tool_handler` boundary and the MCP host/gateway wrapper report the same lifecycle automatically when these optional evidence variables are present; other custom boundaries can use the decorator above.
+
+---
+
 ## Source Installation and Verification
 
 Most customers should install the published package from PyPI. Contributors evaluating the public source can run the public tests from the SDK root:

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/agenticdome_python_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agenticdome-python-sdk
-Version: 1.2.28
+Version: 1.2.29
 Summary: Official Python SDK for AgenticDome security guardrails, DLP, tool authorization, and multi-agent delegation enforcement.
 Author: AgenticDome
 License-Expression: Apache-2.0
@@ -31,21 +31,22 @@ License-File: LICENSE
 License-File: NOTICE
 Requires-Dist: requests>=2.31.0
 Requires-Dist: urllib3>=2.0.0
+Requires-Dist: cryptography>=42.0.0
 Provides-Extra: crewai
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "crewai"
+Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "crewai"
 Provides-Extra: redis
 Requires-Dist: redis>=4.5.0; extra == "redis"
 Provides-Extra: pop
 Requires-Dist: cryptography>=42.0.0; extra == "pop"
 Provides-Extra: pydanticai
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydanticai"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydanticai"
 Requires-Dist: anyio>=4.0.0; extra == "pydanticai"
 Provides-Extra: pydantic
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "pydantic"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "pydantic"
 Requires-Dist: anyio>=4.0.0; extra == "pydantic"
 Provides-Extra: langgraph
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "langgraph"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "langgraph"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "langgraph"
 Requires-Dist: langchain-openai==1.3.5; extra == "langgraph"
 Requires-Dist: anyio>=4.0.0; extra == "langgraph"
 Provides-Extra: microsoft
@@ -54,18 +55,18 @@ Requires-Dist: autogen-agentchat==0.7.5; extra == "autogen"
 Provides-Extra: microsoft-autogen
 Requires-Dist: autogen-agentchat==0.7.5; extra == "microsoft-autogen"
 Provides-Extra: foundry
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "foundry"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "foundry"
 Requires-Dist: azure-identity==1.25.3; extra == "foundry"
 Provides-Extra: agno
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "agno"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "agno"
 Provides-Extra: openai-agents
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "openai-agents"
+Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "openai-agents"
 Provides-Extra: mcp
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "mcp"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "mcp"
 Provides-Extra: bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "bedrock"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "bedrock"
 Provides-Extra: aws-bedrock
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "aws-bedrock"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "aws-bedrock"
 Provides-Extra: llamaindex
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "llamaindex"
 Provides-Extra: llama-index
@@ -75,30 +76,30 @@ Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "google-adk"
 Provides-Extra: adk
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "adk"
 Provides-Extra: claude
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude"
 Provides-Extra: claude-agent-sdk
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "claude-agent-sdk"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "claude-agent-sdk"
 Provides-Extra: smolagents
 Requires-Dist: smolagents==1.26.0; extra == "smolagents"
 Provides-Extra: all
-Requires-Dist: crewai<=1.15.18,>=1.15.5; extra == "all"
+Requires-Dist: crewai<=1.15.20,>=1.15.5; extra == "all"
 Requires-Dist: redis>=4.5.0; extra == "all"
 Requires-Dist: cryptography>=42.0.0; extra == "all"
-Requires-Dist: pydantic-ai<=2.36.0,>=2.16.0; extra == "all"
+Requires-Dist: pydantic-ai<=2.42.0,>=2.16.0; extra == "all"
 Requires-Dist: anyio>=4.0.0; extra == "all"
 Requires-Dist: langgraph<=1.2.11,>=1.2.9; extra == "all"
-Requires-Dist: langchain-core<=1.6.1,>=1.5.0; extra == "all"
+Requires-Dist: langchain-core<=1.6.2,>=1.5.0; extra == "all"
 Requires-Dist: langchain-openai==1.3.5; extra == "all"
 Requires-Dist: autogen-agentchat==0.7.5; extra == "all"
-Requires-Dist: agno<=3.0.4,>=2.8.0; extra == "all"
-Requires-Dist: azure-ai-projects<=2.5.0,>=2.3.0; extra == "all"
+Requires-Dist: agno<=3.0.9,>=2.8.0; extra == "all"
+Requires-Dist: azure-ai-projects<=2.6.0,>=2.3.0; extra == "all"
 Requires-Dist: azure-identity==1.25.3; extra == "all"
-Requires-Dist: openai-agents<=0.22.0,>=0.18.3; extra == "all"
-Requires-Dist: mcp<=1.28.1,>=1.26.0; extra == "all"
-Requires-Dist: boto3<=1.43.83,>=1.43.54; extra == "all"
+Requires-Dist: openai-agents<=0.22.1,>=0.18.3; extra == "all"
+Requires-Dist: mcp<=2.2.0,>=1.26.0; extra == "all"
+Requires-Dist: boto3<=1.43.90,>=1.43.54; extra == "all"
 Requires-Dist: llama-index<=0.14.24,>=0.14.23; extra == "all"
 Requires-Dist: google-adk<=2.8.0,>=2.5.0; extra == "all"
-Requires-Dist: claude-agent-sdk<=0.2.148,>=0.2.126; extra == "all"
+Requires-Dist: claude-agent-sdk<=0.2.152,>=0.2.126; extra == "all"
 Requires-Dist: smolagents==1.26.0; extra == "all"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0.0; extra == "dev"
@@ -2336,7 +2337,7 @@ Start with the dedicated [MCP Host and Gateway Action Firewall guide](https://gi
 pip install "agenticdome-python-sdk[mcp]"
 ```
 
-**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=1.28.1`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface, and CrewAI 1.15.5 declares `mcp~=1.28.1` for combined installs. Keep the ceiling until an isolated MCP 2.x certification passes the native imports, adapter checks, preserved 1.x floor, and package gates. The AgenticDome firewall itself is plain-JSON-RPC and dependency-light, but installing the base SDK beside an independently managed MCP 2.x transport does not constitute a formally certified MCP 2.x support claim.
+**MCP package compatibility:** the `[mcp]` extra currently installs the externally certified PyPI range `mcp>=1.26.0,<=2.2.0`. That is the supported range of the third-party `mcp` package, not the version of AgenticDome's SDK. MCP 2.0 removed the certified `mcp.server.fastmcp` import surface used by the earlier native compatibility test. AgenticDome's transport-independent JSON-RPC firewall has since passed the isolated MCP 2.x certification matrix through 2.2.0 while preserving the 1.26.0 floor. CrewAI 1.15.x combined installations can still resolve the narrower MCP 1.28.x line according to CrewAI's dependency constraint; this does not reduce the independently certified AgenticDome range.
 
 **Wrap the forwarding boundary** — the full host flow is `JSON-RPC request → rate limit / upstream prompt screen → method authorization → optional delegation-token verification → third-party MCP server → list filtering / result sanitization → client`:
 
@@ -2606,6 +2607,30 @@ result = client.mesh_validate(
 print(result)
 ```
 
+**Multimodal content descriptors:**
+
+Use `inspect_content()` when a document, image, audio or video processor has
+already produced bounded text, a transcript, trusted sensitivity labels, or a
+content digest. The active tenant policy is evaluated inside the assigned
+AgenticDome runtime. OCR, transcription and proprietary classification are not
+shipped in this public SDK, and the returned evidence does not retain raw
+content.
+
+```python
+verdict = client.inspect_content(
+    direction="output",
+    content_parts=[{
+        "modality": "image",
+        "mime_type": "image/png",
+        "content_sha256": "sha256:" + image_digest,
+        "labels": ["phi"],
+    }],
+    policy_context={"request_purpose": "clinical-summary-delivery"},
+)
+if verdict["verdict"] == "BLOCKED":
+    raise PermissionError(verdict["reason"])
+```
+
 **Incident reporting:**
 
 ```python
@@ -2719,6 +2744,34 @@ Plus, for every production deployment:
 
 ---
 
+## Verified Action lifecycle evidence
+
+Use `VerifiedActionReporter` for executable tool calls, function calls, MCP operations and external side effects that should appear in **Verified Actions**. It is not intended for health checks or every policy lookup.
+
+```bash
+export AGENTICDOME_EVIDENCE_API_BASE="https://your-control-plane.example"
+export AGENTICDOME_EVIDENCE_TOKEN="<portal-token-scoped-to-evidence:write>"
+```
+
+```python
+from agenticdome_sdk import VerifiedActionReporter, verified_action
+
+evidence = VerifiedActionReporter.from_env(tenant_id="your-tenant-id")
+
+@verified_action(
+    reporter=evidence,
+    operation_type="function_call",
+    executor_type="function",
+    target_type="service",
+)
+def refresh_customer_record(customer_id: str):
+    ...
+```
+
+The reporter uses a bounded, non-blocking queue and retains hashes plus normalized lifecycle metadata only. It never sends raw arguments, results, prompts, source, or credentials. The dedicated evidence token is separate from the Runtime / SDK key: authorization stays on the assigned sidecar and evidence-delivery failure never changes its allow/deny decision. Integrations built on the shared framework `secure_tool` / `wrap_tool_handler` boundary and the MCP host/gateway wrapper report the same lifecycle automatically when these optional evidence variables are present; other custom boundaries can use the decorator above.
+
+---
+
 ## Source Installation and Verification
 
 Most customers should install the published package from PyPI. Contributors evaluating the public source can run the public tests from the SDK root:

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/agenticdome_python_sdk.egg-info/SOURCES.txt

@@ -16,11 +16,13 @@ agenticdome_sdk/__init__.py
 agenticdome_sdk/_framework_firewall.py
 agenticdome_sdk/_mode.py
 agenticdome_sdk/agno.py
+agenticdome_sdk/attestation.py
 agenticdome_sdk/autogen.py
 agenticdome_sdk/aws_bedrock.py
 agenticdome_sdk/catalog_snapshot.json
 agenticdome_sdk/claude.py
 agenticdome_sdk/client.py
+agenticdome_sdk/connect.py
 agenticdome_sdk/copilot_ir.py
 agenticdome_sdk/copilot_ir_collector.cjs
 agenticdome_sdk/crewai.py
@@ -29,6 +31,7 @@ agenticdome_sdk/google_adk.py
 agenticdome_sdk/hook_catalog.py
 agenticdome_sdk/identity.py
 agenticdome_sdk/langgraph.py
+agenticdome_sdk/lifecycle.py
 agenticdome_sdk/llamaindex.py
 agenticdome_sdk/mcp_host.py
 agenticdome_sdk/mcp_http_gateway.py
@@ -38,6 +41,7 @@ agenticdome_sdk/microsoft_agent_framework.py
 agenticdome_sdk/microsoft_ai_foundry.py
 agenticdome_sdk/onboarding_cli.py
 agenticdome_sdk/openai_agents.py
+agenticdome_sdk/outcomes.py
 agenticdome_sdk/proof.py
 agenticdome_sdk/pydantic.py
 agenticdome_sdk/simulation.py

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/agenticdome_python_sdk.egg-info/requires.txt

@@ -1,50 +1,51 @@
 requests>=2.31.0
 urllib3>=2.0.0
+cryptography>=42.0.0
 
 [adk]
 google-adk<=2.8.0,>=2.5.0
 
 [agno]
-agno<=3.0.4,>=2.8.0
+agno<=3.0.9,>=2.8.0
 
 [all]
-crewai<=1.15.18,>=1.15.5
+crewai<=1.15.20,>=1.15.5
 redis>=4.5.0
 cryptography>=42.0.0
-pydantic-ai<=2.36.0,>=2.16.0
+pydantic-ai<=2.42.0,>=2.16.0
 anyio>=4.0.0
 langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.6.1,>=1.5.0
+langchain-core<=1.6.2,>=1.5.0
 langchain-openai==1.3.5
 autogen-agentchat==0.7.5
-agno<=3.0.4,>=2.8.0
-azure-ai-projects<=2.5.0,>=2.3.0
+agno<=3.0.9,>=2.8.0
+azure-ai-projects<=2.6.0,>=2.3.0
 azure-identity==1.25.3
-openai-agents<=0.22.0,>=0.18.3
-mcp<=1.28.1,>=1.26.0
-boto3<=1.43.83,>=1.43.54
+openai-agents<=0.22.1,>=0.18.3
+mcp<=2.2.0,>=1.26.0
+boto3<=1.43.90,>=1.43.54
 llama-index<=0.14.24,>=0.14.23
 google-adk<=2.8.0,>=2.5.0
-claude-agent-sdk<=0.2.148,>=0.2.126
+claude-agent-sdk<=0.2.152,>=0.2.126
 smolagents==1.26.0
 
 [autogen]
 autogen-agentchat==0.7.5
 
 [aws-bedrock]
-boto3<=1.43.83,>=1.43.54
+boto3<=1.43.90,>=1.43.54
 
 [bedrock]
-boto3<=1.43.83,>=1.43.54
+boto3<=1.43.90,>=1.43.54
 
 [claude]
-claude-agent-sdk<=0.2.148,>=0.2.126
+claude-agent-sdk<=0.2.152,>=0.2.126
 
 [claude-agent-sdk]
-claude-agent-sdk<=0.2.148,>=0.2.126
+claude-agent-sdk<=0.2.152,>=0.2.126
 
 [crewai]
-crewai<=1.15.18,>=1.15.5
+crewai<=1.15.20,>=1.15.5
 
 [dev]
 pytest>=8.0.0
@@ -58,7 +59,7 @@ twine>=5.0.0
 tomli>=2.0.0
 
 [foundry]
-azure-ai-projects<=2.5.0,>=2.3.0
+azure-ai-projects<=2.6.0,>=2.3.0
 azure-identity==1.25.3
 
 [google-adk]
@@ -66,7 +67,7 @@ google-adk<=2.8.0,>=2.5.0
 
 [langgraph]
 langgraph<=1.2.11,>=1.2.9
-langchain-core<=1.6.1,>=1.5.0
+langchain-core<=1.6.2,>=1.5.0
 langchain-openai==1.3.5
 anyio>=4.0.0
 
@@ -77,7 +78,7 @@ llama-index<=0.14.24,>=0.14.23
 llama-index<=0.14.24,>=0.14.23
 
 [mcp]
-mcp<=1.28.1,>=1.26.0
+mcp<=2.2.0,>=1.26.0
 
 [microsoft]
 
@@ -85,17 +86,17 @@ mcp<=1.28.1,>=1.26.0
 autogen-agentchat==0.7.5
 
 [openai-agents]
-openai-agents<=0.22.0,>=0.18.3
+openai-agents<=0.22.1,>=0.18.3
 
 [pop]
 cryptography>=42.0.0
 
 [pydantic]
-pydantic-ai<=2.36.0,>=2.16.0
+pydantic-ai<=2.42.0,>=2.16.0
 anyio>=4.0.0
 
 [pydanticai]
-pydantic-ai<=2.36.0,>=2.16.0
+pydantic-ai<=2.42.0,>=2.16.0
 anyio>=4.0.0
 
 [redis]

{agenticdome_python_sdk-1.2.28 → agenticdome_python_sdk-1.2.29}/agenticdome_sdk/__init__.py

@@ -2,6 +2,7 @@ from .client import AgenticDomeClient, AgenticDomeError, AgenticDomeHTTPError
 from .identity import IDENTITY_CONTEXT_VERSION, canonicalize_identity_context, enrich_policy_context
 from .proof import create_dpop_proof, generate_rsa_proof_key, jwk_thumbprint
 from ._mode import LIVE_MODE, LOCAL_SIM_MODE, is_local_sim_mode, resolve_mode
+from .lifecycle import VerifiedActionContext, VerifiedActionDenied, VerifiedActionReporter, verified_action
 
 __all__ = [
     "AgenticDomeClient",
@@ -17,4 +18,8 @@ __all__ = [
     "LOCAL_SIM_MODE",
     "is_local_sim_mode",
     "resolve_mode",
+    "VerifiedActionContext",
+    "VerifiedActionDenied",
+    "VerifiedActionReporter",
+    "verified_action",
 ]