This release is a pre-release and may not be stable for production use.
AgentLint
AgentLint checks recorded agent runs for unsafe tool use, missing approvals, sensitive-data flows, and unsupported claims.
Integrations
| Integration | Workflow |
|---|---|
| OpenAI Agents SDK | Automatic pytest capture or instrument() in any Python runner |
| OpenTelemetry | Import existing OTLP-style JSON |
Install
python -m pip install "agentlint-trace[openai-agents]==0.1.0a2"
AgentLint requires Python 3.12 or newer.
Define a policy
Create agentlint.yaml:
version: 1
policy_id: customer_support
tools:
lookup_status:
permission: allowed
approval: not_required
issue_refund:
permission: allowed
approval: required
rules:
unknown_tool: error
denied_tool_call: error
missing_approval: error
Run
Pytest is optional. Choose the workflow that fits the project.
Pytest
pytest --agentlint --agentlint-policy agentlint.yaml
The command runs the tests, captures their agent traces, and checks the saved run.
Artifacts are written to .agentlint/runs/.
agentlint check-run .agentlint/runs/latest.json
Use a test marker or routing file when tests require different policies.
Any Python runner
from agentlint.integrations.openai_agents import instrument
session = instrument(".agentlint/openai-agents")
# Run the agent.
snapshot_paths = session.close()
Check the capture directory:
agentlint check-capture .agentlint/openai-agents --policy agentlint.yaml
check-capture also accepts one JSON file and detects OpenAI Agents, OpenTelemetry,
and native AgentLint formats.
Sample output
AgentLint Report
traces: 0 passed, 1 failed, 0 not verifiable, 0 invalid
diagnostics: 1 error, 0 warning, 0 info
error[DENIED_TOOL_CALL]: tool call "evt_delete_account" uses tool
"delete_account" denied by trace policy
related events: evt_delete_account
remediation: Remove the call or update the trace policy when this tool
should be permitted.
Documentation
License
Metadata
Release files for agentlint-trace 0.1.0a2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| agentlint_trace-0.1.0a2.tar.gz | 114.0 kB | With provenance | Details for agentlint_trace-0.1.0a2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| agentlint_trace-0.1.0a2-py3-none-any.whl | Python 3 | none | any | Details for agentlint_trace-0.1.0a2-py3-none-any.whl |
Total release size: 174.7 kB
Release files / agentlint_trace-0.1.0a2.tar.gz
| Download URL | agentlint_trace-0.1.0a2.tar.gz |
|---|---|
| Size | 114.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c0642ab822326cac18914177225ec7030d357b201225335868fc11e7cdadafca
|
|
BLAKE2b-256 checksum How to use checksums |
c275e0184a46838367dc6bd25e6b89af48b7efb29995b19479207d993e3a9ca2
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 14, 2026.
Transparency logRelease files / agentlint_trace-0.1.0a2-py3-none-any.whl
| Download URL | agentlint_trace-0.1.0a2-py3-none-any.whl |
|---|---|
| Size | 60.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
c293f157603fa211420775beae5ddb825a6adf8efa2e2c2c6992621ff8359526
|
|
BLAKE2b-256 checksum How to use checksums |
aa053f8835def1a46001e38e28b908c34c1a81f1f880af12feeec599951a2839
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 14, 2026.
Transparency logSecurity for agentlint-trace 0.1.0a2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for agentlint_trace-0.1.0a2.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jul 14, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.