CHANGELOG.md
LICENSE
MANIFEST.in
README.md
SECURITY.md
VISION.md
ctrlrun.example.yaml
pyproject.toml
docs/.mintignore
docs/ACS.md
docs/ARCHITECTURE.md
docs/CLAIMS.md
docs/IA.md
docs/OWASP-AGENTIC-TOP10.md
docs/README.md
docs/ROADMAP.md
docs/SEO.md
docs/SPEC-mcp-operator.md
docs/SPEC-scan.md
docs/SPEC-v0.1.md
docs/SPEC-v0.2.md
docs/SPEC-v0.3.md
docs/SPEC-v0.4.md
docs/SPEC-v0.5.md
docs/SPEC-v0.6.md
docs/STYLE.md
docs/THREAT_MODEL.md
docs/adapters.md
docs/authority.md
docs/capabilities.yaml
docs/docs.json
docs/faq.mdx
docs/how-this-is-built.md
docs/index.mdx
docs/not-only-agents.mdx
docs/postgres.md
docs/try-it.js
docs/try-it.mdx
docs/verify.md
docs/why.mdx
docs/architecture/specifications.mdx
docs/assets/browser-demo.verified.json
docs/assets/demo.expected.txt
docs/assets/demo.gif
docs/assets/demo.tape
docs/assets/favicon.svg
docs/assets/logo-on-dark.png
docs/assets/logo.png
docs/assets/logo.svg
docs/assets/render-social-preview.sh
docs/assets/social-preview.md
docs/assets/social-preview.png
docs/assets/social-preview.svg
docs/assets/verify-browser-demo.mjs
docs/assets/verify-browser-wiring.mjs
docs/assets/wordmark-dark.svg
docs/assets/wordmark-light.svg
docs/assets/wordmark.svg
docs/compare/durable-workflows.mdx
docs/compare/framework-hitl.mdx
docs/compare/governance-toolkits.mdx
docs/compare/guardrail-libraries.mdx
docs/compare/idempotency-keys.mdx
docs/concepts/action-and-hash.mdx
docs/concepts/approval-binding.mdx
docs/concepts/authority-and-delegation.mdx
docs/concepts/decisions.mdx
docs/concepts/effect-keys.mdx
docs/concepts/fail-closed.mdx
docs/concepts/observe-mode.mdx
docs/concepts/outcomes-and-ambiguous.mdx
docs/concepts/receipts-and-evidence.mdx
docs/cookbook/credential-rotation-agent.mdx
docs/cookbook/crm-update-agent.mdx
docs/cookbook/customer-notification-agent.mdx
docs/cookbook/data-deletion-agent.mdx
docs/cookbook/database-migration-agent.mdx
docs/cookbook/deploy-agent.mdx
docs/cookbook/iam-agent.mdx
docs/cookbook/index.mdx
docs/cookbook/langgraph-interrupt.mdx
docs/cookbook/manager-and-worker.mdx
docs/cookbook/observe-then-enforce.mdx
docs/cookbook/openai-agents-tool-approval.mdx
docs/cookbook/outbound-email-agent.mdx
docs/cookbook/payout-maker-checker.mdx
docs/cookbook/protect-an-mcp-server.mdx
docs/cookbook/receipts-to-opentelemetry.mdx
docs/cookbook/reconcile-against-the-remote.mdx
docs/cookbook/refund-agent.mdx
docs/cookbook/resolve-an-ambiguous-effect.mdx
docs/cookbook/slack-approvals.mdx
docs/cookbook/sqlite-to-postgres.mdx
docs/cookbook/verify-in-github-actions.mdx
docs/generated/badges.readme.md
docs/generated/capabilities.mdx
docs/generated/capabilities.readme.md
docs/generated/capabilities.txt
docs/generated/readiness.full.mdx
docs/generated/readiness.json
docs/generated/readiness.mdx
docs/generated/readiness.readme.md
docs/get-started/choosing.mdx
docs/get-started/install.mdx
docs/get-started/quickstart.mdx
docs/get-started/three-ways-in.mdx
docs/guides/approvals-in-slack.mdx
docs/guides/export-to-opentelemetry.mdx
docs/guides/gateway-in-front-of-mcp.mdx
docs/guides/langgraph-adapter.mdx
docs/guides/observe-to-enforce.mdx
docs/guides/openai-agents-adapter.mdx
docs/guides/protect-a-function.mdx
docs/guides/reconcile-automatically.mdx
docs/guides/resolve-an-ambiguous-effect.mdx
docs/guides/run-on-postgres.mdx
docs/guides/verify-in-ci.mdx
docs/images/favicon.svg
docs/images/social-preview.png
docs/images/wordmark-dark.svg
docs/images/wordmark-light.svg
docs/images/wordmark.svg
docs/mcp/approve-from-your-assistant.mdx
docs/mcp/gateway-in-5-minutes.mdx
docs/mcp/overview.mdx
docs/mcp/use-the-docs-from-your-editor.mdx
docs/production/how-reservation-works.mdx
docs/production/index.mdx
docs/production/migrations.mdx
docs/production/operations.mdx
docs/production/postgres.mdx
docs/production/receipt-integrity.mdx
docs/production/recovery.mdx
docs/production/soak.mdx
docs/reference/authority-yaml.mdx
docs/reference/cli.mdx
docs/reference/errors.mdx
docs/reference/exit-codes.mdx
docs/reference/policy-yaml.mdx
docs/reference/receipt-and-event-schemas.mdx
docs/reference/api/Action.mdx
docs/reference/api/ActionDenied.mdx
docs/reference/api/AmbiguousEffect.mdx
docs/reference/api/Approval.mdx
docs/reference/api/ApprovalAnswer.mdx
docs/reference/api/ApprovalMismatch.mdx
docs/reference/api/ApprovalProvider.mdx
docs/reference/api/ApprovalRequest.mdx
docs/reference/api/ApprovalRequired.mdx
docs/reference/api/ApprovalTimeout.mdx
docs/reference/api/Authority.mdx
docs/reference/api/AuthorityDenied.mdx
docs/reference/api/AuthorityEscalation.mdx
docs/reference/api/AuthorityResult.mdx
docs/reference/api/CTRLRunError.mdx
docs/reference/api/Condition.mdx
docs/reference/api/Control.mdx
docs/reference/api/Decision.mdx
docs/reference/api/Delegation.mdx
docs/reference/api/DelegationRecord.mdx
docs/reference/api/DuplicateEffect.mdx
docs/reference/api/EffectKeyError.mdx
docs/reference/api/EffectRecord.mdx
docs/reference/api/EffectState.mdx
docs/reference/api/Event.mdx
docs/reference/api/EventSink.mdx
docs/reference/api/FrameworkInterrupt.mdx
docs/reference/api/Grant.mdx
docs/reference/api/HeaderIdentityProvider.mdx
docs/reference/api/IdentityContext.mdx
docs/reference/api/IdentityError.mdx
docs/reference/api/IdentityProvider.mdx
docs/reference/api/InMemoryStateStore.mdx
docs/reference/api/InterruptApprovalProvider.mdx
docs/reference/api/InvalidArgument.mdx
docs/reference/api/JSONLEventSink.mdx
docs/reference/api/LocalApprovalProvider.mdx
docs/reference/api/MissingDependency.mdx
docs/reference/api/NotExecuted.mdx
docs/reference/api/PendingApproval.mdx
docs/reference/api/Policy.mdx
docs/reference/api/PolicyError.mdx
docs/reference/api/Principal.mdx
docs/reference/api/Receipt.mdx
docs/reference/api/ReconcileOutcome.mdx
docs/reference/api/SQLiteStateStore.mdx
docs/reference/api/SchemaMismatch.mdx
docs/reference/api/ScriptedApprovalProvider.mdx
docs/reference/api/StateStore.mdx
docs/reference/api/StaticIdentityProvider.mdx
docs/reference/api/Subject.mdx
docs/reference/api/Suspended.mdx
docs/reference/api/WebhookApprovalProvider.mdx
docs/reference/api/acs-AcsControlHook.mdx
docs/reference/api/action_hash.mdx
docs/reference/api/banner.mdx
docs/reference/api/canonical_bytes.mdx
docs/reference/api/canonicalize.mdx
docs/reference/api/conformance-run.mdx
docs/reference/api/conformance-store-run.mdx
docs/reference/api/context.mdx
docs/reference/api/gateway-serve.mdx
docs/reference/api/index.mdx
docs/reference/api/jwt_identity-JWTIdentityProvider.mdx
docs/reference/api/needs_approval.mdx
docs/reference/api/otel-OTelEventSink.mdx
docs/reference/api/parse_conditions.mdx
docs/reference/api/postgres-PostgresStateStore.mdx
docs/reference/api/protect.mdx
docs/reference/api/verify-run.mdx
docs/reference/api/with_approval.mdx
docs/security/disclosure.mdx
docs/security/receipt-chain.mdx
docs/security/verify-guarantees.mdx
docs/study/does-your-framework-double-execute.mdx
docs/verify/get-the-badge.mdx
examples/acs/README.md
examples/acs/ctrlrun.yaml
examples/acs/main.py
examples/agent-race/ctrlrun.yaml
examples/agent-race/main.py
examples/approval-mutation/ctrlrun.yaml
examples/approval-mutation/main.py
examples/approval-replay/ctrlrun.yaml
examples/approval-replay/main.py
examples/authority/README.md
examples/authority/devops.yaml
examples/authority/payments.yaml
examples/authority-escalation/ctrlrun.yaml
examples/authority-escalation/main.py
examples/cookbook/credential-rotation-agent/ctrlrun.yaml
examples/cookbook/credential-rotation-agent/main.py
examples/cookbook/crm-update-agent/ctrlrun.yaml
examples/cookbook/crm-update-agent/main.py
examples/cookbook/customer-notification-agent/ctrlrun.yaml
examples/cookbook/customer-notification-agent/main.py
examples/cookbook/data-deletion-agent/ctrlrun.yaml
examples/cookbook/data-deletion-agent/main.py
examples/cookbook/database-migration-agent/ctrlrun.yaml
examples/cookbook/database-migration-agent/main.py
examples/cookbook/deploy-agent/ctrlrun.yaml
examples/cookbook/deploy-agent/main.py
examples/cookbook/iam-agent/ctrlrun.yaml
examples/cookbook/iam-agent/main.py
examples/cookbook/manager-and-worker/ctrlrun.yaml
examples/cookbook/manager-and-worker/main.py
examples/cookbook/observe-then-enforce/ctrlrun.yaml
examples/cookbook/observe-then-enforce/main.py
examples/cookbook/outbound-email-agent/ctrlrun.yaml
examples/cookbook/outbound-email-agent/main.py
examples/cookbook/payout-maker-checker/ctrlrun.yaml
examples/cookbook/payout-maker-checker/main.py
examples/cookbook/protect-an-mcp-server/ctrlrun.yaml
examples/cookbook/protect-an-mcp-server/main.py
examples/cookbook/receipts-to-opentelemetry/ctrlrun.yaml
examples/cookbook/receipts-to-opentelemetry/main.py
examples/cookbook/reconcile-against-the-remote/ctrlrun.yaml
examples/cookbook/reconcile-against-the-remote/main.py
examples/cookbook/refund-agent/ctrlrun.yaml
examples/cookbook/refund-agent/main.py
examples/cookbook/resolve-an-ambiguous-effect/ctrlrun.yaml
examples/cookbook/resolve-an-ambiguous-effect/main.py
examples/cookbook/slack-approvals/ctrlrun.yaml
examples/cookbook/slack-approvals/main.py
examples/cookbook/sqlite-to-postgres/ctrlrun.yaml
examples/cookbook/sqlite-to-postgres/main.py
examples/cookbook/verify-in-github-actions/ctrlrun.yaml
examples/cookbook/verify-in-github-actions/run.sh
examples/double-refund/ctrlrun.yaml
examples/double-refund/main.py
examples/policies/devops.yaml
examples/policies/e-commerce.yaml
examples/policies/government.yaml
examples/policies/healthcare.yaml
examples/policies/hr.yaml
examples/policies/insurance.yaml
examples/policies/legal.yaml
examples/policies/payments.yaml
examples/policies/security.yaml
examples/without-an-agent/lost-merge/ctrlrun.yaml
examples/without-an-agent/lost-merge/main.py
examples/without-an-agent/redelivered-webhook/ctrlrun.yaml
examples/without-an-agent/redelivered-webhook/main.py
examples/without-an-agent/retried-task/ctrlrun.yaml
examples/without-an-agent/retried-task/main.py
src/ctrlrun/__init__.py
src/ctrlrun/acs.py
src/ctrlrun/action.py
src/ctrlrun/adapter.py
src/ctrlrun/approval.py
src/ctrlrun/authority.py
src/ctrlrun/control.py
src/ctrlrun/effect.py
src/ctrlrun/errors.py
src/ctrlrun/identity.py
src/ctrlrun/jwt_identity.py
src/ctrlrun/migrations.py
src/ctrlrun/otel.py
src/ctrlrun/policy.py
src/ctrlrun/postgres.py
src/ctrlrun/py.typed
src/ctrlrun/receipt.py
src/ctrlrun/reporting.py
src/ctrlrun/scan.py
src/ctrlrun/state.py
src/ctrlrun/webhook.py
src/ctrlrun.egg-info/PKG-INFO
src/ctrlrun.egg-info/SOURCES.txt
src/ctrlrun.egg-info/dependency_links.txt
src/ctrlrun.egg-info/entry_points.txt
src/ctrlrun.egg-info/requires.txt
src/ctrlrun.egg-info/top_level.txt
src/ctrlrun/cli/__init__.py
src/ctrlrun/cli/demo.py
src/ctrlrun/cli/main.py
src/ctrlrun/conformance/__init__.py
src/ctrlrun/conformance/fixtures.py
src/ctrlrun/conformance/report.py
src/ctrlrun/conformance/suites.py
src/ctrlrun/conformance/store/__init__.py
src/ctrlrun/conformance/store/backends.py
src/ctrlrun/conformance/store/fixtures.py
src/ctrlrun/conformance/store/report.py
src/ctrlrun/conformance/store/suites.py
src/ctrlrun/conformance/store/worker.py
src/ctrlrun/gateway/__init__.py
src/ctrlrun/gateway/legacy.py
src/ctrlrun/gateway/mcp.py
src/ctrlrun/gateway/operator.py
src/ctrlrun/gateway/outcome.py
src/ctrlrun/gateway/server.py
src/ctrlrun/gateway/wire.py
src/ctrlrun/verify/__init__.py
src/ctrlrun/verify/guarantees.py
src/ctrlrun/verify/report.py
src/ctrlrun/verify/scenarios.py
src/ctrlrun/verify/worker.py
tests/conftest.py
tests/failure_injection.py
tests/test_acs.py
tests/test_action.py
tests/test_adapter.py
tests/test_adapters_langgraph.py
tests/test_adapters_openai_agents.py
tests/test_approval.py
tests/test_authority.py
tests/test_claims_citations.py
tests/test_concurrency.py
tests/test_conformance.py
tests/test_cookbook.py
tests/test_cross_host.py
tests/test_delegation.py
tests/test_demo.py
tests/test_docs_audit.py
tests/test_docs_production.py
tests/test_docs_reference.py
tests/test_docs_seo.py
tests/test_docs_site.py
tests/test_docs_travelling.py
tests/test_effect.py
tests/test_elicitation.py
tests/test_examples.py
tests/test_framework_probe.py
tests/test_fuzzing.py
tests/test_gateway.py
tests/test_gateway_server.py
tests/test_identity.py
tests/test_inspect.py
tests/test_jwt_identity.py
tests/test_mcp.py
tests/test_mcp_operator.py
tests/test_migrations.py
tests/test_observe.py
tests/test_otel.py
tests/test_outcome.py
tests/test_owasp_mapping.py
tests/test_packaging.py
tests/test_policy.py
tests/test_policy_versioning.py
tests/test_postgres.py
tests/test_protect.py
tests/test_readme_assets.py
tests/test_receipt_chain.py
tests/test_reconcile.py
tests/test_recovery.py
tests/test_release_v0_6.py
tests/test_repository_signals.py
tests/test_resume.py
tests/test_scan.py
tests/test_sector_configuration.py
tests/test_sinks.py
tests/test_soak.py
tests/test_store_conformance.py
tests/test_verify.py
tests/test_verify_action.py
tests/test_verify_authority.py
tests/test_verify_report.py
tests/test_webhook.py
tests/data/README.md
tests/data/junit-10.xsd
tools/docs_audit/__init__.py
tools/docs_audit/_files.py
tools/docs_audit/claims.py
tools/docs_audit/links.py
tools/docs_audit/lint-allowlist.txt
tools/docs_audit/lint.py
tools/docs_audit/render_api.py
tools/docs_audit/render_badges.py
tools/docs_audit/render_capabilities.py
tools/docs_audit/render_cli.py
tools/docs_audit/render_cookbook.py
tools/docs_audit/render_probe.py
tools/docs_audit/render_readiness.py
tools/docs_audit/render_schemas.py
tools/docs_audit/render_soak.py
tools/docs_audit/snippets.py