Agent Paranoid Android

Safety-first, deterministic synthetic test data generation from CSV structure, safe profiles, reviewed DatasetSpec files, and allowlisted PostgreSQL or Trino metadata. The CLI and Python library are primary; PostgreSQL, MCP, Trino, and AI providers are optional integrations. The base package supports CSV/JSON workflows without installing a database client, SQL parser, or MCP SDK. Source rows are profiled, never shuffled or copied into generated output.

Read the documentation for tutorials, concepts, configuration, MCP setup, and troubleshooting. Stable release: 1.3.0 (recommended). Package: agent-paranoid-android; CLI: test-data-agent. Stable 1.3.0 includes credential-free JDBC-style endpoints, qualified column wildcards, and aggregate-only profile-query alongside the exact component/allowlist database workflows.

What It Preserves

From bounded evidence and a reviewed DatasetSpec, generation can preserve schema and types, nullability, ranked distribution and scale shape, approved FK graphs, temporal dependencies, and executable business rules. AI may propose relationships and rules; human review and deterministic validation remain the authority boundary.

It never copies source rows or preserves real PII. Exact source literals remain off by default; an explicit field-scoped allowlist may preserve only a reviewed, bounded, non-sensitive business enum or constant in local profiles, deterministic generation, and local SQL export. External providers and default MCP responses remain source-literal free. The project does not certify statistical anonymity, protection from every re-identification attack, or cross-environment byte identity. A seed provides logical reproducibility under the recorded package, dependency, locale, and serializer environment.

Install

Python 3.11 or newer is required. CI tests CPython 3.11 through 3.14. Most users should install the stable release:

python3 -m pip install "agent-paranoid-android==1.3.0"
test-data-agent doctor

Install only the stable optional features you use:

python3 -m pip install "agent-paranoid-android[parquet]==1.3.0"
python3 -m pip install "agent-paranoid-android[mcp]==1.3.0"
python3 -m pip install "agent-paranoid-android[trino]==1.3.0"
python3 -m pip install "agent-paranoid-android[postgres]==1.3.0"
python3 -m pip install "agent-paranoid-android[mcp,trino]==1.3.0"
python3 -m pip install "agent-paranoid-android[openai]==1.3.0"
python3 -m pip install "agent-paranoid-android[gigachat]==1.3.0"

The postgres extra provides the Psycopg driver for direct read-only PostgreSQL profiling. The trino extra contains the Trino client and safe SQL parser; add mcp when using the Trino MCP server. The experimental GigaChat advisor is an explicit opt-in through the gigachat extra; OpenAI remains the default provider. The default aggregate-only tools return summaries, not source rows. The explicit opt-in row-returning tools include run_safe_select, which requires TRINO_ENABLE_SAFE_SELECT=true; bounded, masked rows may contain allowed source values and are not source-free, PII-free, anonymous, or privacy-safe.

First Offline Run

Run the installed package with its bundled fictional customer fixture. No checkout, network, Trino, MCP, or provider is required:

test-data-agent demo --output out/demo

A successful run reports:

Generated synthetic dataset: out/demo | rows: customers=12 | seed: 20260801 | validation: passed | source rows copied: no

Representative deterministic output:

customer_id,email,segment,signup_date
syn_customers_00000001,amber21@example.test,category_1,2024-02-10

The demo preserves evidenced column names and types, non-null shape, category rank, and date range. Its fixture has no relationship or business-rule evidence, so the demo makes no claim about those properties. The output folder contains:

• customers.csv;
• csv_profile.json;
• dataset_spec.json;
• validation_report.json;
• generation_manifest.json.

The destination must not already exist. Review the manifest and effective spec before accepting any dataset. Then follow First CSV Dataset to profile your own input.

Choose A Guide

Safety

The project derives bounded metadata such as field types, null ratios, ranges, masked patterns, and safe low-cardinality distributions. It rejects or bounds:

• raw detected PII, credentials, tokens, and private keys in profiles;
• source-row copying and source/output path reuse;
• exact literals outside an explicit local field allowlist and its bounded non-sensitive content checks;
• path traversal and symlink escapes through generator MCP tools;
• unrestricted SQL, writes, and query files outside the bounded SELECT policy;
• oversized input, output, rule, query, and generation work.

Human review is still required for ambiguous identifiers, rare free text, inferred relationships, and organization-specific privacy policy.

Development

python3 -m pip install "uv==0.11.23"
uv sync --frozen --all-extras --no-install-project
uv sync --frozen --all-extras --no-editable --no-build-isolation
uv run --no-sync scripts/check_release.sh

See Contributing, Support, Governance, Code Of Conduct, Security Policy, Changelog, and License.

Releases use tokenless PyPI Trusted Publishing with verified wheels/source distributions, checksums, SBOMs, and GitHub attestations.

AI-Assisted Development

AI-assisted changes require human review and tests; never send production data, raw PII, credentials, or tokens to AI. The name nods to Radiohead's "Paranoid Android"; this project is unaffiliated.