Egress Guard Protocol • AI Agent SDK

EgressGuardProtocol: Contract for the wrapper's secret-egress firewall.

EgressGuardProtocol

Defined in the secrets module.

Contract for the wrapper’s secret-egress firewall.

The real guard lives in the wrapper (`praisonai): it inspects an outbound request, decides via the operator host allowlist whether a credential may leave, and either substitutes the sentinel for the real secret (:func:desentinelize`) or refuses with an audited event. Core owns only this seam — no proxy, no host enforcement, no heavy imports — so a deployment can inject a guard without pulling anything heavy into core.

Methods

Source