agentrust-py 0.0.1a1__tar.gz

agentrust_py-0.0.1a1/CHANGELOG.md

@@ -0,0 +1,81 @@
+# Changelog
+
+All notable changes to AgentTrust Edge are documented here.
+
+Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
+Versioning: [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
+
+---
+
+## [Unreleased]
+
+### Added
+- `AGENTRUST_ENABLED=false` kill-switch — `@harness` becomes identity function; clients return no-op response. Zero code or deployment change needed to disable.
+- `AGENTRUST_FAILURE_MODE=open|closed|queue` — configurable gateway-unreachable behaviour.
+  - `open` (default): log and continue; agent runs unvalidated.
+  - `closed`: raise `GatewayUnavailableError`; agent is blocked.
+  - `queue`: buffer request to local SQLite (`AGENTRUST_QUEUE_DB`) for later replay.
+- `AGENTRUST_TIMEOUT_SEC` and `AGENTRUST_RETRY_ATTEMPTS` / `AGENTRUST_RETRY_BACKOFF` env vars.
+- Exponential-backoff retry via `tenacity` (optional dependency; enabled by `pip install agentrust-sdk[retry]`).
+- `EmbeddedGateway` — zero-dependency in-process governance engine backed by SQLite. Start with `embed_gateway()`. No PostgreSQL, no Redis, no Docker required. Available via `pip install agentrust-sdk[embedded]`.
+- `agentrust_sdk/config.py` — centralized SDK configuration (`SDK_CONFIG` singleton).
+- OpenTelemetry instrumentation: `agentrust.validate` span, `agentrust.validation_latency_ms` histogram, `agentrust.validations_total` counter (soft dep; no error if `opentelemetry-sdk` not installed).
+- SDK version negotiation: every validate request sends `sdk_version` + `sdk_min_gateway_version`; gateway returns `426 Upgrade Required` on incompatible version.
+- `GatewayVersionError` and `GatewayUnavailableError` exception classes.
+- `agentrust export [file]` CLI command — export local SQLite audit records to JSONL.
+- `agentrust purge --confirm` CLI command — delete all local audit databases.
+- `agentrust disable` CLI command — print rollback/kill-switch instructions.
+- Full SDK test suite: `tests/test_config.py`, `test_client.py`, `test_decorator.py`, `test_embedded.py`, `test_chaos.py` (previously zero tests existed).
+- `agentrust-sdk[full]` extra: installs embedded + retry + otel in one command.
+- `agentrust-sdk[openai]` and `agentrust-sdk[langchain]` optional extras.
+- ISO/IEC 42001 A.6.2: `AuditStore.mask_pii()` and `run_retention_maintenance()` for 90-day payload archival.
+- `DELETE /v1/audit/executions/{envelope_id}/pii` — GDPR Art. 17 erasure endpoint.
+- Migration `005_pii_masking.py` — adds `pii_masked_at` column + indexes to `executions`.
+- Background `_retention_loop` in gateway runs every 6 hours to enforce 90-day hot-store policy.
+- `ToolCall.tool_version` and `ToolCall.invoked_at` fields (ISO 42001 Clause 8.3.2).
+- `ToolResult` Pydantic model replacing `list[Any]` in `ExecutionDetail.tool_results`.
+- `docs/CRITIC_AUDIT_REPORT.md` — full plug-and-play readiness audit.
+
+### Changed
+- `pyproject.toml`: all dependency version pins now specify upper bounds (e.g. `httpx>=0.27.0,<1.0.0`) to prevent silent breakage on major upgrades.
+- `pyproject.toml`: license changed from MIT to Apache-2.0 (open-core model alignment).
+- SDK version bumped `2.0.0` → `2.1.0`.
+- `AgentTrustClient` and `AsyncAgentTrustClient` now read defaults from `SDK_CONFIG`; explicit constructor args still override.
+- Gateway `auth_enabled` setting documented to default `True` in production K8s ConfigMap.
+- `judge_engine.py`: added missing `Field` import (was `NameError` at runtime).
+
+### Fixed
+- `judge_engine.py`: `_JudgeRawResponse` was missing `Field` import — fixed.
+- Trust chain `child_risk_tier` was hardcoded `"medium"` at step 0; moved to step 4b after `risk_engine.score()`.
+- SDK `auth.py` JWT tier read was always returning `Tier.FREE`; restored payload tier with security comment.
+- Policy engine `fail-open` (returning `100.0`) changed to `fail-safe` (returning `0.0`).
+
+---
+
+## [2.0.0] — 2026-04-15
+
+### Added
+- Phase 5: Python SDK (`agentrust_sdk/`) with `@harness` decorator, tier-gated capability system, LangGraph + CrewAI adapters.
+- Phase 5: Multi-agent trust chain support (`parent_envelope_id`).
+- Phase 5: Redis sliding-window rate limiter.
+- Phase 5: Kubernetes edge manifests (8 YAML files with ExternalSecrets, NetworkPolicy, TLS ingress).
+- ISO/IEC 42001:2023 compliance: `governance_disclosure`, `confidence_rationale`, adversarial detection, Pydantic schema validation of judge responses, fail-safe policy engine.
+- `docs/AIIA_TEMPLATE.md`, `docs/INCIDENT_RESPONSE.md`, `docs/DATA_GOVERNANCE.md`, `docs/INTENDED_USE.md`.
+
+---
+
+## [1.0.0] — 2026-01-20
+
+### Added
+- Phase 1–4: Full validation pipeline — schema, evidence, tool-trust, consistency, policy, golden-test.
+- 7-signal confidence engine with configurable YAML weights.
+- 4-factor risk engine.
+- Decision engine with 5 outcomes.
+- Append-only SHA-256 hash-chain audit ledger (PostgreSQL).
+- LLM judge engine (Ollama + Claude backends) with Redis cache and circuit breaker.
+- Human review queue (Redis + PostgreSQL).
+- Alert engine + HMAC-signed webhook notifier.
+- Analytics endpoint.
+- JWT API key auth middleware.
+- React dashboard skeleton.
+- Docker Compose + full Alembic migration history.

agentrust_py-0.0.1a1/LICENSE

@@ -0,0 +1,177 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship made available under
+      the License, as indicated by a copyright notice that is included in
+      or attached to the work (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other transformations
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean, as submitted to the Licensor for inclusion
+      in the Work by the copyright owner or by an individual or Legal Entity
+      authorized to submit on behalf of the copyright owner. For the purposes
+      of this definition, "submit" means any form of electronic, verbal, or
+      written communication sent to the Licensor or its representatives,
+      including but not limited to communication on electronic mailing lists,
+      source code control systems, and issue tracking systems that are managed
+      by, or on behalf of, the Licensor for the purpose of developing and
+      discussing the Work, but excluding communication that is conspicuously
+      marked or designated in writing by the copyright owner as
+      "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any Legal Entity on behalf of
+      whom a Contribution has been received by the Licensor and included
+      within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by the combined work.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, You must include a readable copy of the
+          attribution notices contained within such NOTICE file, in
+          at least one of the following places: within a NOTICE text file
+          distributed as part of the Derivative Works; within the Source
+          form or documentation, if provided along with the Derivative
+          Works; or, within a display generated by the Derivative Works,
+          if and wherever such third-party notices normally appear. The
+          contents of the NOTICE file are for informational purposes only
+          and do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own license statement for Your modifications and
+      may provide additional grant of rights to use, copy, modify, merge,
+      publish, distribute, sublicense, and/or sell copies of the Work,
+      and to permit persons to whom the Work is furnished to do so,
+      subject to the following conditions.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or reproducing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or exemplary damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or all other
+      commercial damages or losses), even if such Contributor has been
+      advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may charge
+      such fees only on Your own behalf and on Your sole responsibility,
+      not on behalf of any other Contributor, and only if You agree to
+      indemnify, defend, and hold each Contributor harmless for any
+      liability incurred by, or claims asserted against, such Contributor
+      by reason of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2024 AgentTrust, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

agentrust_py-0.0.1a1/PKG-INFO

@@ -0,0 +1,193 @@
+Metadata-Version: 2.4
+Name: agentrust-py
+Version: 0.0.1a1
+Summary: AgentTrust Edge — the AI Agent Harness. One decorator, full trust enforcement.
+Project-URL: Homepage, https://agentrust.io
+Project-URL: Documentation, https://docs.agentrust.io
+Project-URL: Repository, https://github.com/agentrust/agentrust
+Project-URL: Changelog, https://github.com/agentrust/agentrust/blob/main/CHANGELOG.md
+License: Apache-2.0
+License-File: LICENSE
+Keywords: agents,ai,audit,compliance,governance,llm,safety,trust
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Requires-Dist: httpx<1.0.0,>=0.27.0
+Requires-Dist: pydantic<3.0.0,>=2.0.0
+Requires-Dist: pyyaml<7.0,>=6.0.3
+Provides-Extra: autoload
+Provides-Extra: crewai
+Requires-Dist: crewai<1.0.0,>=0.80.0; extra == 'crewai'
+Provides-Extra: dev
+Requires-Dist: fastapi>=0.137.1; extra == 'dev'
+Requires-Dist: httpx<1.0.0,>=0.27.0; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.24.0; extra == 'dev'
+Requires-Dist: pytest>=9.1.0; extra == 'dev'
+Requires-Dist: respx>=0.21.0; extra == 'dev'
+Requires-Dist: tenacity>=8.2.0; extra == 'dev'
+Requires-Dist: uvicorn>=0.29.0; extra == 'dev'
+Provides-Extra: embedded
+Requires-Dist: fastapi<1.0.0,>=0.137.1; extra == 'embedded'
+Requires-Dist: uvicorn<1.0.0,>=0.29.0; extra == 'embedded'
+Provides-Extra: full
+Requires-Dist: agentrust-sdk[embedded,otel,retry]; extra == 'full'
+Provides-Extra: langchain
+Requires-Dist: langchain<1.0.0,>=0.2.0; extra == 'langchain'
+Provides-Extra: langgraph
+Requires-Dist: langgraph<1.0.0,>=0.2.0; extra == 'langgraph'
+Provides-Extra: openai
+Requires-Dist: openai<3.0.0,>=2.41.1; extra == 'openai'
+Provides-Extra: otel
+Requires-Dist: opentelemetry-api>=1.20.0; extra == 'otel'
+Requires-Dist: opentelemetry-sdk>=1.20.0; extra == 'otel'
+Provides-Extra: retry
+Requires-Dist: tenacity<10.0.0,>=8.2.0; extra == 'retry'
+Description-Content-Type: text/markdown
+
+# agentrust-py
+
+[![PyPI](https://img.shields.io/pypi/v/agentrust-py)](https://pypi.org/project/agentrust-py/)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/agentrust/agentrust/blob/main/LICENSE)
+[![Python](https://img.shields.io/pypi/pyversions/agentrust-py)](https://pypi.org/project/agentrust-py/)
+
+Python SDK for [AgentTrust Edge](https://github.com/agentrust/agentrust) — runtime AI agent governance with zero-config startup and env-only rollback.
+
+---
+
+## Install
+
+```bash
+pip install "agentrust-py[embedded,retry]"
+```
+
+---
+
+## 30-second quickstart
+
+```python
+from agentrust_sdk import harness, embed_gateway
+
+# Optional: start an in-process SQLite gateway (dev / air-gap)
+embed_gateway()
+
+@harness
+def my_agent(user: str, input: str) -> dict:
+    """Decorated agent. Governance happens automatically after each call."""
+    return {"answer": "42"}
+
+result = my_agent(user="alice", input="What is the meaning of life?")
+print(result)   # {"answer": "42"} — or BlockedError if policy rejects it
+```
+
+> **Note on imports:** The PyPI package name is `agentrust-py`; the Python module is `agentrust_sdk`.
+> All imports use `from agentrust_sdk import ...`.
+
+---
+
+## Rollback (no code change, no image rebuild)
+
+```bash
+export AGENTRUST_ENABLED=false
+# restart process — @harness becomes a no-op identity wrapper
+```
+
+---
+
+## Configuration
+
+Every tunable is an env var — no config file required for basic usage.
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `AGENTRUST_ENABLED` | `true` | Master kill-switch |
+| `AGENTRUST_GATEWAY_URL` | `http://localhost:8000` | Gateway URL |
+| `AGENTRUST_FAILURE_MODE` | `open` | `open` \| `closed` \| `queue` |
+| `AGENTRUST_TIMEOUT_SEC` | `10` | Request timeout |
+| `AGENTRUST_RETRY_ATTEMPTS` | `3` | Retries (needs `[retry]`) |
+| `AGENTRUST_KEY` | — | API key |
+
+---
+
+## Deployment ladder (env-only)
+
+```bash
+# Dev — embedded SQLite, no external services
+AGENTRUST_ENABLED=true
+# (call embed_gateway() at startup)
+
+# Staging — remote gateway, fail safe
+AGENTRUST_GATEWAY_URL=https://agentrust-staging.internal:8000
+AGENTRUST_KEY=at_...
+AGENTRUST_FAILURE_MODE=closed
+
+# Production
+AGENTRUST_GATEWAY_URL=https://agentrust.internal:8000
+AGENTRUST_FAILURE_MODE=open
+AGENTRUST_RETRY_ATTEMPTS=5
+```
+
+App code is **identical** across all three environments.
+
+---
+
+## Failure modes
+
+| Mode | Gateway unreachable behaviour |
+|------|------------------------------|
+| `open` (default) | Log warning, return approve response — agent continues |
+| `closed` | Raise `GatewayUnavailableError` — agent is blocked |
+| `queue` | Write request to local SQLite buffer; return approve response |
+
+> **Queue mode note:** The local buffer is written but not automatically replayed in the current release.
+> Use `agentrust export` to inspect buffered records. A background drain/replay worker is on the roadmap.
+
+---
+
+## Extras
+
+| Extra | Installs |
+|-------|---------|
+| `embedded` | `uvicorn`, `fastapi` — in-process gateway via `embed_gateway()` |
+| `retry` | `tenacity` — exponential backoff |
+| `otel` | `opentelemetry-sdk`, `opentelemetry-api` — traces + metrics |
+| `langgraph` | LangGraph `AgentTrustNode` adapter |
+| `crewai` | CrewAI `AgentTrustCallback` adapter |
+| `full` | All of the above |
+
+---
+
+## Tiers
+
+| Tier | Capabilities |
+|------|-------------|
+| OSS | Local schema validation, no API key |
+| Free | Evidence, tool trust, auto-decision, local audit |
+| Developer | Confidence scoring, risk engine, built-in policies |
+| Team | Framework adapters, custom policies, analytics, review queue |
+| Enterprise | LLM judge, trust chain, SSO, self-hosted, SOC2 export |
+
+---
+
+## CLI
+
+```bash
+agentrust init              # create ~/.agentrust/config.yaml
+agentrust status            # tier + gateway reachability
+agentrust export ./out.jsonl
+agentrust purge --confirm
+agentrust disable
+```
+
+---
+
+## License
+
+Apache-2.0. Framework adapters and enterprise features require a paid subscription.

agentrust_py-0.0.1a1/README.md

@@ -0,0 +1,139 @@
+# agentrust-py
+
+[![PyPI](https://img.shields.io/pypi/v/agentrust-py)](https://pypi.org/project/agentrust-py/)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/agentrust/agentrust/blob/main/LICENSE)
+[![Python](https://img.shields.io/pypi/pyversions/agentrust-py)](https://pypi.org/project/agentrust-py/)
+
+Python SDK for [AgentTrust Edge](https://github.com/agentrust/agentrust) — runtime AI agent governance with zero-config startup and env-only rollback.
+
+---
+
+## Install
+
+```bash
+pip install "agentrust-py[embedded,retry]"
+```
+
+---
+
+## 30-second quickstart
+
+```python
+from agentrust_sdk import harness, embed_gateway
+
+# Optional: start an in-process SQLite gateway (dev / air-gap)
+embed_gateway()
+
+@harness
+def my_agent(user: str, input: str) -> dict:
+    """Decorated agent. Governance happens automatically after each call."""
+    return {"answer": "42"}
+
+result = my_agent(user="alice", input="What is the meaning of life?")
+print(result)   # {"answer": "42"} — or BlockedError if policy rejects it
+```
+
+> **Note on imports:** The PyPI package name is `agentrust-py`; the Python module is `agentrust_sdk`.
+> All imports use `from agentrust_sdk import ...`.
+
+---
+
+## Rollback (no code change, no image rebuild)
+
+```bash
+export AGENTRUST_ENABLED=false
+# restart process — @harness becomes a no-op identity wrapper
+```
+
+---
+
+## Configuration
+
+Every tunable is an env var — no config file required for basic usage.
+
+| Variable | Default | Purpose |
+|----------|---------|---------|
+| `AGENTRUST_ENABLED` | `true` | Master kill-switch |
+| `AGENTRUST_GATEWAY_URL` | `http://localhost:8000` | Gateway URL |
+| `AGENTRUST_FAILURE_MODE` | `open` | `open` \| `closed` \| `queue` |
+| `AGENTRUST_TIMEOUT_SEC` | `10` | Request timeout |
+| `AGENTRUST_RETRY_ATTEMPTS` | `3` | Retries (needs `[retry]`) |
+| `AGENTRUST_KEY` | — | API key |
+
+---
+
+## Deployment ladder (env-only)
+
+```bash
+# Dev — embedded SQLite, no external services
+AGENTRUST_ENABLED=true
+# (call embed_gateway() at startup)
+
+# Staging — remote gateway, fail safe
+AGENTRUST_GATEWAY_URL=https://agentrust-staging.internal:8000
+AGENTRUST_KEY=at_...
+AGENTRUST_FAILURE_MODE=closed
+
+# Production
+AGENTRUST_GATEWAY_URL=https://agentrust.internal:8000
+AGENTRUST_FAILURE_MODE=open
+AGENTRUST_RETRY_ATTEMPTS=5
+```
+
+App code is **identical** across all three environments.
+
+---
+
+## Failure modes
+
+| Mode | Gateway unreachable behaviour |
+|------|------------------------------|
+| `open` (default) | Log warning, return approve response — agent continues |
+| `closed` | Raise `GatewayUnavailableError` — agent is blocked |
+| `queue` | Write request to local SQLite buffer; return approve response |
+
+> **Queue mode note:** The local buffer is written but not automatically replayed in the current release.
+> Use `agentrust export` to inspect buffered records. A background drain/replay worker is on the roadmap.
+
+---
+
+## Extras
+
+| Extra | Installs |
+|-------|---------|
+| `embedded` | `uvicorn`, `fastapi` — in-process gateway via `embed_gateway()` |
+| `retry` | `tenacity` — exponential backoff |
+| `otel` | `opentelemetry-sdk`, `opentelemetry-api` — traces + metrics |
+| `langgraph` | LangGraph `AgentTrustNode` adapter |
+| `crewai` | CrewAI `AgentTrustCallback` adapter |
+| `full` | All of the above |
+
+---
+
+## Tiers
+
+| Tier | Capabilities |
+|------|-------------|
+| OSS | Local schema validation, no API key |
+| Free | Evidence, tool trust, auto-decision, local audit |
+| Developer | Confidence scoring, risk engine, built-in policies |
+| Team | Framework adapters, custom policies, analytics, review queue |
+| Enterprise | LLM judge, trust chain, SSO, self-hosted, SOC2 export |
+
+---
+
+## CLI
+
+```bash
+agentrust init              # create ~/.agentrust/config.yaml
+agentrust status            # tier + gateway reachability
+agentrust export ./out.jsonl
+agentrust purge --confirm
+agentrust disable
+```
+
+---
+
+## License
+
+Apache-2.0. Framework adapters and enterprise features require a paid subscription.

agentrust_py-0.0.1a1/agentrust/__init__.py

@@ -0,0 +1,72 @@
+"""
+agentrust — top-level import alias for agentrust_sdk.
+
+Allows the documented import style::
+
+    from agentrust import harness
+    from agentrust import AgentTrustClient
+
+instead of the package-internal name ``agentrust_sdk``.
+Both names resolve to the same objects; this shim adds zero overhead.
+"""
+from agentrust_sdk import (  # noqa: F401
+    harness,
+    validate,
+    AgentTrustClient,
+    AsyncAgentTrustClient,
+    embed_gateway,
+    EmbeddedGateway,
+    SDK_CONFIG,
+    BlockedError,
+    TierGateError,
+    GatewayUnavailableError,
+    GatewayVersionError,
+    resolve_key,
+    save_key_to_config,
+    Tier,
+    Capability,
+    is_allowed,
+    allowed_capabilities,
+    CAPABILITY_MIN_TIER,
+    ValidateRequest,
+    ValidateResponse,
+    ValidationResult,
+    RiskResult,
+    DecisionResult,
+    ToolCall,
+    drain_queue,
+    auto_instrument,
+    auto_wrap,
+)
+from agentrust_sdk import __version__  # noqa: F401
+
+__all__ = [
+    "harness",
+    "validate",
+    "AgentTrustClient",
+    "AsyncAgentTrustClient",
+    "embed_gateway",
+    "EmbeddedGateway",
+    "SDK_CONFIG",
+    "BlockedError",
+    "TierGateError",
+    "GatewayUnavailableError",
+    "GatewayVersionError",
+    "resolve_key",
+    "save_key_to_config",
+    "Tier",
+    "Capability",
+    "is_allowed",
+    "allowed_capabilities",
+    "CAPABILITY_MIN_TIER",
+    "ValidateRequest",
+    "ValidateResponse",
+    "ValidationResult",
+    "RiskResult",
+    "DecisionResult",
+    "ToolCall",
+    "drain_queue",
+    "auto_instrument",
+    "auto_wrap",
+    "__version__",
+]