Metadata-Version: 2.4
Name: algovoi-keystone-agent
Version: 0.1.2
Summary: The agentic behaviour layer for Keystone: declarative rules, triggers and a fail-closed guard. Cython-compiled.
Author-email: AlgoVoi <chopmob@gmail.com>
License: Apache-2.0
Requires-Python: >=3.10
Description-Content-Type: text/markdown
License-File: NOTICE
Requires-Dist: algovoi-keystone-connect>=0.1.0
Requires-Dist: algovoi-execution-ref>=0.1.0
Requires-Dist: rfc8785>=0.1.4
Dynamic: license-file

# algovoi-keystone-agent

The agentic behaviour layer for Keystone. Declarative rules, triggers and
behaviours, deployed in an `Engine`, gating writes through a guard.

## Fail-closed guarding

`Engine.guard(client, default="deny")` is the allowlist posture: a call is
denied unless a matching behaviour explicitly returns `ALLOW` (a `BLOCK` still
denies). An unmatched method fails **closed**. Binding a deny-guard raises if no
behaviour can fire at the guard `stage`, so a behaviour bound to the wrong stage
(e.g. a `spend_decision` cap on an `execution` guard) is a loud error, not a
silent no-op.

`default="allow"` is the legacy blocklist posture (deny only on `BLOCK`); it
fails open for anything your behaviours do not cover.

Apache-2.0. (c) AlgoVoi. NOTICE attribution required for redistribution.
