maigp-bedrock-agentcore 1.1.1__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- maigp_bedrock_agentcore-1.1.1/.gitignore +56 -0
- maigp_bedrock_agentcore-1.1.1/PKG-INFO +71 -0
- maigp_bedrock_agentcore-1.1.1/README.md +60 -0
- maigp_bedrock_agentcore-1.1.1/aigp_agentcore/__init__.py +16 -0
- maigp_bedrock_agentcore-1.1.1/aigp_agentcore/governance.py +538 -0
- maigp_bedrock_agentcore-1.1.1/aigp_agentcore/helper_resolver.py +116 -0
- maigp_bedrock_agentcore-1.1.1/aigp_agentcore/middleware.py +54 -0
- maigp_bedrock_agentcore-1.1.1/pyproject.toml +17 -0
- maigp_bedrock_agentcore-1.1.1/tests/__init__.py +0 -0
- maigp_bedrock_agentcore-1.1.1/tests/test_governance.py +556 -0
|
@@ -0,0 +1,56 @@
|
|
|
1
|
+
# Python
|
|
2
|
+
__pycache__/
|
|
3
|
+
*.py[cod]
|
|
4
|
+
*.egg-info/
|
|
5
|
+
dist/
|
|
6
|
+
build/
|
|
7
|
+
.venv/
|
|
8
|
+
.eggs/
|
|
9
|
+
|
|
10
|
+
# Node
|
|
11
|
+
node_modules/
|
|
12
|
+
dist/
|
|
13
|
+
|
|
14
|
+
# Go
|
|
15
|
+
bin/
|
|
16
|
+
|
|
17
|
+
# Rust
|
|
18
|
+
target/
|
|
19
|
+
|
|
20
|
+
# .NET
|
|
21
|
+
bin/
|
|
22
|
+
obj/
|
|
23
|
+
|
|
24
|
+
# Java
|
|
25
|
+
*.class
|
|
26
|
+
out/
|
|
27
|
+
|
|
28
|
+
# IDE
|
|
29
|
+
.idea/
|
|
30
|
+
.vscode/
|
|
31
|
+
.kiro/
|
|
32
|
+
*.swp
|
|
33
|
+
|
|
34
|
+
# OS
|
|
35
|
+
.DS_Store
|
|
36
|
+
Thumbs.db
|
|
37
|
+
|
|
38
|
+
# Secrets (never commit)
|
|
39
|
+
.env
|
|
40
|
+
*.pem
|
|
41
|
+
*.key
|
|
42
|
+
*.pdf
|
|
43
|
+
BACKLOG/
|
|
44
|
+
patent/
|
|
45
|
+
docs/.archive/
|
|
46
|
+
review/
|
|
47
|
+
|
|
48
|
+
# Generated navigable spec split — derived from the monoliths by
|
|
49
|
+
# specification/tools/spec_split.py; the manifest + monoliths are the
|
|
50
|
+
# source of truth, not this output. Same convention as Mars (spec/*/*/).
|
|
51
|
+
specification/*/*/
|
|
52
|
+
specification/split-index.md
|
|
53
|
+
|
|
54
|
+
# Local rendering/preview site — self-contained, not part of the
|
|
55
|
+
# published specification, never pushed.
|
|
56
|
+
site/
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
Metadata-Version: 2.5
|
|
2
|
+
Name: maigp-bedrock-agentcore
|
|
3
|
+
Version: 1.1.1
|
|
4
|
+
Summary: AIGP governance adapter for AWS Bedrock AgentCore Runtime
|
|
5
|
+
Requires-Python: >=3.11
|
|
6
|
+
Requires-Dist: bedrock-agentcore
|
|
7
|
+
Requires-Dist: maigp-agent-core>=1.0.0
|
|
8
|
+
Provides-Extra: otel
|
|
9
|
+
Requires-Dist: opentelemetry-api>=1.20; extra == 'otel'
|
|
10
|
+
Description-Content-Type: text/markdown
|
|
11
|
+
|
|
12
|
+
# maigp-bedrock-agentcore
|
|
13
|
+
|
|
14
|
+
AIGP governance for the AWS Bedrock AgentCore Runtime.
|
|
15
|
+
|
|
16
|
+
Part of **MAIGP** — the Mediated AI Governance Protocol: a runtime consent / scope / evidence layer for AI systems. Every governed call is **CHECK**ed before it runs (policy, scope, jurisdiction, circuit-breaker) and **RECORD**ed + **TRACE**d as tamper-evident evidence after.
|
|
17
|
+
|
|
18
|
+
## What it governs
|
|
19
|
+
|
|
20
|
+
Governs agents running on `BedrockAgentCoreApp` — model, tools, and helper resolution.
|
|
21
|
+
|
|
22
|
+
## Governance model
|
|
23
|
+
|
|
24
|
+
This adapter maps the framework's lifecycle onto the AIGP agent-governance loop provided by [`maigp-agent-core`](https://pypi.org/project/maigp-agent-core/):
|
|
25
|
+
|
|
26
|
+
| Framework event | AIGP action |
|
|
27
|
+
|---|---|
|
|
28
|
+
| run / invocation start | **CHECK** (`pre_invoke`) — allowed? under what authority? |
|
|
29
|
+
| each model reply | token accounting (`on_model_call`) |
|
|
30
|
+
| each tool / function call | tool governance (`on_tool_call`) |
|
|
31
|
+
| run complete | **RECORD** + **TRACE** (`post_invoke`) |
|
|
32
|
+
| failure | `on_error` (recorded, then re-raised) |
|
|
33
|
+
|
|
34
|
+
|
|
35
|
+
## Install
|
|
36
|
+
|
|
37
|
+
```bash
|
|
38
|
+
pip install maigp-bedrock-agentcore
|
|
39
|
+
```
|
|
40
|
+
|
|
41
|
+
Pulls in [`maigp-agent-core`](https://pypi.org/project/maigp-agent-core/) (shared lifecycle) and, transitively, [`maigp-client`](https://pypi.org/project/maigp-client/).
|
|
42
|
+
|
|
43
|
+
## Quick start
|
|
44
|
+
|
|
45
|
+
```python
|
|
46
|
+
from aigp_agentcore import AgentCoreGovernance, governance_middleware
|
|
47
|
+
|
|
48
|
+
gov = AgentCoreGovernance(gov_url="https://gov.example.com",
|
|
49
|
+
app_id="my-bedrock-agent", hmac_secret="secret")
|
|
50
|
+
|
|
51
|
+
# Register as AgentCore middleware: pre-invoke policy check, helper
|
|
52
|
+
# resolution (endpoints + tokens), post-invoke evidence, enforcement.
|
|
53
|
+
app.add_middleware(governance_middleware(gov))
|
|
54
|
+
```
|
|
55
|
+
|
|
56
|
+
## Package naming
|
|
57
|
+
|
|
58
|
+
The distribution is **`maigp-bedrock-agentcore`** (the import module remains `aigp_agentcore`). It was renamed from `maigp-agentcore` because PyPI rejected that name as too similar to the core library `maigp-agent-core`.
|
|
59
|
+
|
|
60
|
+
## Helper resolution
|
|
61
|
+
|
|
62
|
+
`HelperResolver` fetches downstream endpoints + tokens from the vault (`VLT_PRJ`) and records traces/evidence to the governance app (`GOV_APP`).
|
|
63
|
+
|
|
64
|
+
## Links
|
|
65
|
+
|
|
66
|
+
- Protocol, specs & full adapter catalog: https://github.com/owner-spec/aigp-protocol
|
|
67
|
+
- Issues: https://github.com/owner-spec/aigp-protocol/issues
|
|
68
|
+
|
|
69
|
+
---
|
|
70
|
+
|
|
71
|
+
License: Proprietary. © Kanjani AI Research & Causum.
|
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
# maigp-bedrock-agentcore
|
|
2
|
+
|
|
3
|
+
AIGP governance for the AWS Bedrock AgentCore Runtime.
|
|
4
|
+
|
|
5
|
+
Part of **MAIGP** — the Mediated AI Governance Protocol: a runtime consent / scope / evidence layer for AI systems. Every governed call is **CHECK**ed before it runs (policy, scope, jurisdiction, circuit-breaker) and **RECORD**ed + **TRACE**d as tamper-evident evidence after.
|
|
6
|
+
|
|
7
|
+
## What it governs
|
|
8
|
+
|
|
9
|
+
Governs agents running on `BedrockAgentCoreApp` — model, tools, and helper resolution.
|
|
10
|
+
|
|
11
|
+
## Governance model
|
|
12
|
+
|
|
13
|
+
This adapter maps the framework's lifecycle onto the AIGP agent-governance loop provided by [`maigp-agent-core`](https://pypi.org/project/maigp-agent-core/):
|
|
14
|
+
|
|
15
|
+
| Framework event | AIGP action |
|
|
16
|
+
|---|---|
|
|
17
|
+
| run / invocation start | **CHECK** (`pre_invoke`) — allowed? under what authority? |
|
|
18
|
+
| each model reply | token accounting (`on_model_call`) |
|
|
19
|
+
| each tool / function call | tool governance (`on_tool_call`) |
|
|
20
|
+
| run complete | **RECORD** + **TRACE** (`post_invoke`) |
|
|
21
|
+
| failure | `on_error` (recorded, then re-raised) |
|
|
22
|
+
|
|
23
|
+
|
|
24
|
+
## Install
|
|
25
|
+
|
|
26
|
+
```bash
|
|
27
|
+
pip install maigp-bedrock-agentcore
|
|
28
|
+
```
|
|
29
|
+
|
|
30
|
+
Pulls in [`maigp-agent-core`](https://pypi.org/project/maigp-agent-core/) (shared lifecycle) and, transitively, [`maigp-client`](https://pypi.org/project/maigp-client/).
|
|
31
|
+
|
|
32
|
+
## Quick start
|
|
33
|
+
|
|
34
|
+
```python
|
|
35
|
+
from aigp_agentcore import AgentCoreGovernance, governance_middleware
|
|
36
|
+
|
|
37
|
+
gov = AgentCoreGovernance(gov_url="https://gov.example.com",
|
|
38
|
+
app_id="my-bedrock-agent", hmac_secret="secret")
|
|
39
|
+
|
|
40
|
+
# Register as AgentCore middleware: pre-invoke policy check, helper
|
|
41
|
+
# resolution (endpoints + tokens), post-invoke evidence, enforcement.
|
|
42
|
+
app.add_middleware(governance_middleware(gov))
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
## Package naming
|
|
46
|
+
|
|
47
|
+
The distribution is **`maigp-bedrock-agentcore`** (the import module remains `aigp_agentcore`). It was renamed from `maigp-agentcore` because PyPI rejected that name as too similar to the core library `maigp-agent-core`.
|
|
48
|
+
|
|
49
|
+
## Helper resolution
|
|
50
|
+
|
|
51
|
+
`HelperResolver` fetches downstream endpoints + tokens from the vault (`VLT_PRJ`) and records traces/evidence to the governance app (`GOV_APP`).
|
|
52
|
+
|
|
53
|
+
## Links
|
|
54
|
+
|
|
55
|
+
- Protocol, specs & full adapter catalog: https://github.com/owner-spec/aigp-protocol
|
|
56
|
+
- Issues: https://github.com/owner-spec/aigp-protocol/issues
|
|
57
|
+
|
|
58
|
+
---
|
|
59
|
+
|
|
60
|
+
License: Proprietary. © Kanjani AI Research & Causum.
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"""AIGP-AgentCore — Governance adapter for AWS Bedrock AgentCore Runtime.
|
|
2
|
+
|
|
3
|
+
Provides governance hooks for agents running on BedrockAgentCoreApp:
|
|
4
|
+
- Pre-invoke: policy check (model, tools, helpers)
|
|
5
|
+
- Helper resolution: fetch endpoints + tokens from VLT_PRJ
|
|
6
|
+
- Post-invoke: record traces + evidence to GOV_APP
|
|
7
|
+
- Enforcement: block invocations that violate policy
|
|
8
|
+
"""
|
|
9
|
+
|
|
10
|
+
__version__ = "1.1.1"
|
|
11
|
+
|
|
12
|
+
from .governance import AgentCoreGovernance
|
|
13
|
+
from .middleware import governance_middleware
|
|
14
|
+
from .helper_resolver import HelperResolver
|
|
15
|
+
|
|
16
|
+
__all__ = ["AgentCoreGovernance", "governance_middleware", "HelperResolver"]
|