Build on the supported package contract
Use @absolutejs/agent-trust through its supported public entry points.
@absolutejs/agent-trust
@absolutejs/agent-trustv0.2.2betaAIProvider-neutral provenance, taint propagation, instruction/data separation, and sink policy enforcement for AI agents.
#Installation
BASH
bun add @absolutejs/agent-trust#Capabilities
Overview
Provider-neutral provenance and taint tracking for agents. Every value carries its purpose, authority, source, digest/proof, taints, parent digests, and evidence-bearing transformations.
The central security rule is structural: external content is data, never an instruction merely because it contains imperative language. compileAgentContext returns separate instruction and data segments instead of interpolating tool, web, file, or memory content into a privileged prompt. Sink policies then fail closed before instructions or actions cross a trust boundary.
Use compileGuardedAgentContext at provider boundaries. It enforces the instruction policy before compilation; the basic compiler also conservatively downgrades externally authoritative or tainted values mislabeled as instructions into the data channel.
Show 1 more
Taints propagate through derived model output. A sanitizer may remove named taints only while recording evidence and a new digest; there is no implicit "trusted because the model said so" conversion. Proof verification is injected, so signed discovery descriptors, DSSE, JWTs, or provider KMS can share the same contract.
Outcomes
What you can build
Hardening checklist
Production guidance
Make every external boundary explicitPin the deployed @absolutejs/agent-trust version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.
Follow in order
Troubleshooting path
1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/agent-trust example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.
#Public entry points
Supported entry points declared by this package manifest.
Package entry point declared in package.json.
@absolutejs/agent-trust@absolutejs/agent-trust/manifest@absolutejs/agent-trust/manifest.json
#Package commands
Scripts declared by this package manifest.
bun run buildrm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --target=bun --external @absolutejs/manifest --external @sinclair/typebox && tsc -p tsconfig.build.json && absolute-manifest emit
bun run check:packagebun run typecheck && bun run test && bun run build
bun run formatprettier --write "./**/*.{ts,json,md,yml}"
bun run testbun test
bun run typechecktsc --noEmit
#API reference
Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.