Metadata-Version: 2.4
Name: coinbase-agentkit-kevros
Version: 0.1.9
Summary: Kevros governance ActionProvider for Coinbase AgentKit. Verify autonomous agent actions against policy bounds, generate hash-chained provenance attestations, bind intent to command, and validate peer trust before execution.
Project-URL: Homepage, https://governance.taskhawktech.com
Project-URL: Repository, https://github.com/taskhawk-systems/kevros
Project-URL: Agent Card, https://governance.taskhawktech.com/.well-known/agent.json
Author-email: TaskHawk Systems <governance@taskhawktech.com>
License: BSL-1.1
Keywords: a2a,agent-to-agent,agentkit,ai-governance,coinbase,kevros,provenance,trust
Classifier: Development Status :: 4 - Beta
Classifier: Intended Audience :: Developers
Classifier: License :: Other/Proprietary License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Requires-Python: >=3.9
Requires-Dist: coinbase-agentkit>=0.1.0
Requires-Dist: kevros>=0.3.1
Provides-Extra: dev
Requires-Dist: pytest-asyncio>=0.21; extra == 'dev'
Requires-Dist: pytest>=7.0; extra == 'dev'
Description-Content-Type: text/markdown

# coinbase-agentkit-kevros

Kevros governance ActionProvider for Coinbase AgentKit. Verify autonomous agent actions against policy bounds, generate hash-chained provenance attestations, bind intent to command, and validate peer trust before execution.

## Installation

```bash
pip install coinbase-agentkit-kevros
```

Requires `coinbase-agentkit` as a peer dependency.

## Quick Start

```python
from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider

# Initialize with your Kevros API key
kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")

# Register with AgentKit
agent = AgentKit(
    action_providers=[kevros_provider]
)
```

## Actions

The provider registers the following AgentKit actions, each mapped to a Kevros governance endpoint:

| Action | Endpoint | Price | Description |
|---|---|---|---|
| `kevros_verify` | `/governance/verify` | $0.01 | Verify an action against policy bounds. Returns ALLOW, CLAMP, or DENY. |
| `kevros_attest` | `/governance/attest` | $0.02 | Generate a hash-chained provenance attestation for a verified action. |
| `kevros_bind` | `/governance/bind` | $0.02 | Cryptographic proof binding agent intent to the executed command. |
| `kevros_scan` | `/shield/scan` | $0.01 | Threat detection and input validation before execution. |
| `kevros_bundle` | `/governance/bundle` | $0.05 | Export a compliance evidence bundle for audit. |
| `kevros_media_attest` | `/media/attest` | $0.05 | PQC-signed attestation certificate for media content. |
| `kevros_batch` | `/governance/batch` | $0.01 | Batch multiple governance calls into one request. |

## Usage with LangChain

```python
from langchain_openai import ChatOpenAI
from coinbase_agentkit import AgentKit
from coinbase_agentkit_kevros import KevrosActionProvider
from coinbase_agentkit_langchain import CoinbaseAgentKitToolkit

kevros_provider = KevrosActionProvider(api_key="your-kevros-api-key")
agent_kit = AgentKit(action_providers=[kevros_provider])
toolkit = CoinbaseAgentKitToolkit(agent_kit=agent_kit)

tools = toolkit.get_tools()
```

## Governance Flow

Every AgentKit action passes through Kevros before execution:

```
Agent decides action
    |
    v
kevros_verify(action, parameters)
    |
    +-- ALLOW --> execute action --> kevros_attest(result)
    |
    +-- CLAMP --> execute with clamped parameters --> kevros_attest(result)
    |
    +-- DENY --> action blocked, reason logged
```

**Fail-closed by default.** If the Kevros gateway is unreachable, the provider returns DENY. No silent pass-through.

## Configuration

```python
kevros_provider = KevrosActionProvider(
    api_key="your-kevros-api-key",
    base_url="https://governance.taskhawktech.com",  # default
    fail_closed=True,    # default; DENY on any error
    auto_attest=True     # default; attest every ALLOW automatically
)
```

## Environment Variables

```
KEVROS_API_KEY=your-kevros-api-key
KEVROS_BASE_URL=https://governance.taskhawktech.com
```

## Payment Protocols

Three payment rails. Use whichever fits your agent's wallet.

| Protocol | Rail | Settlement |
|---|---|---|
| x402 | USDC on Base | Per-call. Coinbase Commerce + Cloudflare. |
| L402 | Lightning Network | Per-call. Instant sats. |
| MPP / Stripe Tempo | Fiat (USD) | Subscription or credit packs. |

## Pricing

| Tier | Monthly | Included Calls |
|---|---|---|
| Free | $0 | 1,000 |
| Scout | $29 | 5,000 |
| Sentinel | $149 | 50,000 |
| Sovereign | $499 | 500,000 |

1,000 calls/month free. No credit card required.

## Links

| Resource | URL |
|---|---|
| Kevros Gateway | https://governance.taskhawktech.com |
| Coinbase AgentKit | https://github.com/coinbase/agentkit |
| API Docs | https://governance.taskhawktech.com/docs |
| Status | https://governance.taskhawktech.com/status |

## License

Proprietary. Copyright 2026 TaskHawk Systems, LLC.

CAGE Code 10YV4. SAM.gov registered. NIST 800-171 / DFARS 252.204-7012 aligned.

## Contact

j.mcgraw@taskhawktech.com

+JM
