Metadata-Version: 2.4
Name: iris-security-gemini
Version: 0.1.0
Summary: IRIS governance for Google Gemini via google-genai
Author-email: IRIS Platform <sdk@iris.ai>
License: Apache-2.0
Project-URL: Homepage, https://github.com/gimartinb/iris-sdk
Project-URL: Repository, https://github.com/gimartinb/iris-sdk
Requires-Python: >=3.10
Description-Content-Type: text/markdown
Requires-Dist: iris-security-core>=0.1.0
Requires-Dist: iris-security-sdk>=0.1.0
Provides-Extra: google
Requires-Dist: google-genai>=0.3; extra == "google"
Provides-Extra: dev
Requires-Dist: pytest>=8.0; extra == "dev"
Requires-Dist: pytest-asyncio>=0.23; extra == "dev"
Requires-Dist: ruff>=0.4; extra == "dev"

# iris-gemini

Drop-in IRIS governance for the [Google GenAI Python SDK](https://github.com/googleapis/python-genai).

Replace one line:

```python
# client = google.genai.Client()
client = IrisGemini(passport=passport)
```

Every `client.models.generate_content()` and `generate_content_stream()` call is evaluated against Cedar policy, recorded in the Evidence Vault, and enforced per `IRIS_ENV` (warn in dev, block in production).

## Install

```bash
pip install iris-security-gemini
```

## Quickstart

See [examples/governed_gemini.py](examples/governed_gemini.py).

## Environment

| `IRIS_ENV`    | Behavior                                    |
|---------------|---------------------------------------------|
| `dev`         | Fail open - warnings to stderr, never block |
| `production`  | Fail closed - `IrisViolationError` on deny  |

Defaults to `dev` when unset.
