ATTRIBUTION NOTICE
==================

This module (adk/core/validator.py) is a simplified adaptation of the
SecurityValidator from the NOOA (OO-Agents) project, developed by NVIDIA.

Original source:
  NVIDIA labs-OO-Agents (https://github.com/NVIDIA/labs-OO-Agents)
  File: src/nooa/runtime/code_validator.py
  License: Apache License 2.0

Key concepts and design patterns adapted from NOOA:
  - ValidationIssue and ValidationContext data classes
  - FORBIDDEN_BUILTINS and DANGEROUS_DUNDER_ATTRS constants
  - AST visitor pattern for detecting security risks
  - Error code naming scheme (E001, E101, E002, etc.)

Modifications for aither-adk:
  - Simplified to pure-stdlib, dependency-free design (removed nooa.* imports)
  - Focused on core security checks only (SecurityValidator logic)
  - Removed complex validators (REPL, ClassAssignment, ReturnTypeShadow, BlockingCall)
  - Adapted for adk conventions (Python 3.10+, cross-platform, pytest)
  - Added comprehensive test suite for validation

The adk validator is a best-effort code safety tool, NOT a security boundary.
Real isolation requires OS-level sandboxing (container, VM, etc.).

See LICENSE for full Apache 2.0 terms.
