| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
| Name | Name | Last commit date | ||
|---|---|---|---|---|
Portable governance telemetry and verifiable evidence for AI-agent runtimes.
This repository defines a backend-neutral contract for policy decisions, approval lifecycles, usage, classified data flows, and evidence lifecycle events. It composes with OpenTelemetry; it is not a tracing backend, policy engine, agent framework, or dashboard.
Status: alpha contract 0.1.0-alpha.1. No stable SDK API or compatibility guarantee exists yet.
Agent applications can already emit model and tool traces, but governance facts are often trapped in policy-engine logs, approval databases, cost modules, and proprietary dashboards. AgentTrust Telemetry gives those facts one privacy-conscious contract and correlates them with the OpenTelemetry trace already produced by the application.
The application keeps its collector, backend, policy engine, workflow framework, and UI.
| Family | Purpose |
|---|---|
| Policy decision | Allow, deny, challenge, error, enforcement mode, policy identity and timing |
| Approval lifecycle | Requested through terminal decision and execution outcome, bound to an action digest |
| Usage | Per-call/run token and cost facts with explicit cost provenance |
| Data flow | Classified source-to-destination metadata without payload capture |
| Action execution | Resolved tool, MCP, A2A, file, HTTP, and database attempts |
| Evidence lifecycle | Run checkpoints, completeness, and optional TRACE finalization status |
python -m pip install -r conformance/requirements.txt
python conformance/runner/validate.py
python -m unittest discover -s tests -vThe validator checks schema conformance and the metadata-only privacy invariant. It does not yet validate OTLP projection or TRACE mapping.
Install from a checkout while the project is pre-release:
python -m pip install -e ".[otel]"from agentrust_telemetry import SchemaValidator, TelemetryClient
client = TelemetryClient(SchemaValidator.bundled())
result = client.emit(normalized_event)The SDK uses the caller's current OpenTelemetry span when opentelemetry-api is installed. It never installs a provider or exporter. A caller may additionally supply a structured-log emitter.
For synchronous cross-process agent calls, propagate the caller's W3C context and durable AgenTrust identifiers, then use the extracted context as the receiving span's remote parent:
from agentrust_telemetry import extract_context, inject_context
carrier = {}
inject_context(carrier, run_id="run-123", agent_id="planner")
remote = extract_context(carrier)
with tracer.start_as_current_span("worker", context=remote.otel_context):
event.update(remote.event_fields(agent_id="worker"))For asynchronous queue handoffs, start a new trace with links=[remote.link()]. This preserves causality without representing queued work as a synchronous child span. Propagated metadata is untrusted input and does not establish agent identity or authorization.
Run the synthetic example:
python examples/manual_governance.pyThe pre-alpha Node package lives in packages/typescript:
cd packages/typescript
npm ci
npm run checkIt validates the same fixtures and privacy profile as Python and preserves nanosecond wire timestamps as decimal strings. It does not install an OTel provider, exporter, or global propagator.
Run the complete AGT-compatible governance, OTel, durable-evidence, and TRACE reference workflow (Python 3.11+ with test extras installed):
python -m pip install -e ".[test]"
python examples/governed_workflow.pyMIT. See LICENSE.
| Back | FazBrowse Home | New Git URL |