AffixIO ADK guard
Fail-closed authorization for Python functions exposed as Google Agent Development Kit tools.
from affixio_adk import AffixIOAuthorizer
auth = AffixIOAuthorizer("aio_...", agent_id="my-agent")
@auth.tool
def update_ticket(ticket_id: str, status: str):
return update_system(ticket_id, status)
Only an explicit allow decision executes the function. deny, review, malformed decisions, and authorization failures do not execute it. The wrapper is compatible with ADK's Python function-tool pattern and does not require private prompts, credentials or operator identity in the decision payload.
Install with pip install affixio-adk[google]. The Google ADK dependency is optional because the guard is deliberately a normal callable wrapper, making it easy to test before wiring it into an ADK Agent.
Google ADK example
See examples/basic_agent/agent.py. It registers an ordinary protected Python function as an ADK LlmAgent tool. The wrapper executes only after an explicit allow decision. review is treated as blocked and must be handled by a separate approval flow.
The repository includes CI for Python 3.10 through 3.13 and a package-build check. Live API tests are intentionally opt-in so CI never consumes proofs or requires production credentials.
Metadata
Release files for affixio-adk 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| affixio_adk-0.1.0.tar.gz | 3.7 kB | With provenance | Details for affixio_adk-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| affixio_adk-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for affixio_adk-0.1.0-py3-none-any.whl |
Total release size: 6.7 kB
Release files / affixio_adk-0.1.0.tar.gz
| Download URL | affixio_adk-0.1.0.tar.gz |
|---|---|
| Size | 3.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
296fd0f4bf5b7777cf3a7ddb09201b833cd7537a55c4486c9568aec3d71ac521
|
|
BLAKE2b-256 checksum How to use checksums |
6d39fa46a43a85d473e00c950f34bcbd4f30466ae86d2ae596cfbadef8d860ef
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logRelease files / affixio_adk-0.1.0-py3-none-any.whl
| Download URL | affixio_adk-0.1.0-py3-none-any.whl |
|---|---|
| Size | 3.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c9e271b35a250aa7721c7098d993d2219d51898e62ba0c8026d59994501c58ef
|
|
BLAKE2b-256 checksum How to use checksums |
b8ef5f4da35dcf8cd5007d24c0542b4bc9fd8d6d425b6f3e4609959acba175cb
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logSecurity for affixio-adk 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for affixio_adk-0.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 28, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.