Skip to content

You are currently viewing documentation for0.1.0-alpha.1

Saved documentation for 0.1.0-alpha.1 (npm) / 0.1.0a0 (PyPI). Interactive tools use the current release. View latest documentation.

API drift documentation

  1. 01Wrap
  2. 02Inspect
  3. 03Frozen-mode decision: ok / repaired / degraded / bypassed / blocked
  4. 04Audit artifact
  5. 05Optional feedback
Mode is fixed for both request and response phases before inspection starts; the decision names only what this call produced.

The API drift firewall for AI agents

Keep AI agents working safely when the APIs they depend on change. Runtime protection for agent API writes: wrap the tool call, inspect request and response evidence, freeze a mode for that call, and keep the upstream result unless a verified selective repair or policy refusal applies. This is in-path write protection with evidence — not a standalone detection utility. Selective repair is a second, explicitly configured capability. Shape drift that would reject upstream can pass through or refuse under policy; semantic drift that would return wrong data must not invent a write. Local SDKs and execution hosts exist. The default engine detects nothing until explicitly configured. Production protection and hosted delivery remain unqualified.

Modes and decisions

A mode (observe, repair, or strict) is configuration resolved before the call runs and frozen through completion—later configure updates cannot rewrite that call. A decision (ok, repaired, degraded, bypassed, or blocked) is only what that call produced. The two closed sets are not interchangeable; the full matrix lives on Modes.

Scope and limits

AGINDOW is not a vendor credential manager or a promise that every write is correct. Findings, verified patches and metered incidents carry different evidence. The current default guest has no selective repair output. Audit delivery needs an explicit host sink and local queues can be lost. Durable replay and hosted delivery are unavailable.

Evaluate what works today

Published pre-alpha packages on npm and PyPI do not imply production protection. Installing the SDK alone does not detect drift. Use the homepage capability evaluation matrix for local detection, SDK runtimes, repair seams, production boundaries and reproducible test links, open the browser playground for a labelled Unit finding without installing, then follow Quickstart for the install path.

Specification

Read the published modes guide and the guard loop.