AIR Blackbox

AI governance control plane — compliance, inventory, incident response, and audit for AI agents.

PyPI License EU AI Act

Install

pip install air-blackbox

With framework support:

pip install air-blackbox[langchain]    # LangChain trust layer
pip install air-blackbox[crewai]       # CrewAI trust layer
pip install air-blackbox[openai]       # OpenAI Agents SDK trust layer
pip install air-blackbox[all]          # Everything

Four Commands

air-blackbox comply      # EU AI Act compliance from live traffic
air-blackbox discover    # Shadow AI inventory + AI-BOM generation
air-blackbox replay      # Incident reconstruction from audit chain
air-blackbox export      # Signed evidence bundle for auditors

Quick Start

from air_blackbox import AirBlackbox

air = AirBlackbox()
client = air.wrap(openai.OpenAI())
# Every LLM call is now HMAC-logged through the gateway

With framework auto-detection:

from air_blackbox import AirTrust

trust = AirTrust()
trust.attach(your_langchain_agent)
# Framework auto-detected. Audit trails active.

What It Does

Command What You Get
comply Per-article EU AI Act status (Art. 9-15) from live gateway traffic
discover Runtime AI inventory plus static dependency AI-BOM/SBOM output in table, CycloneDX 1.6, or SPDX 2.3
replay Full incident reconstruction, HMAC chain verification
export Signed evidence package: compliance + AI-BOM + audit chain

Discover AI-BOM and SBOM Output

air-blackbox discover --scan-path . --format table
air-blackbox discover --scan-path . --format cyclonedx
air-blackbox discover --scan-path . --format spdx
air-blackbox discover --scan-path . --format json   # alias for CycloneDX 1.6 JSON

discover combines runtime-observed models, providers, and tools with static package dependency scanning. Static scanning still works when no gateway traffic or .air.json records exist.

Supported static manifests:

  • requirements.txt: declared direct Python dependencies only.
  • pyproject.toml: PEP 621 direct and optional Python dependencies only.
  • package.json: direct npm dependencies; devDependencies are currently excluded.
  • package-lock.json: npm lockfile v2/v3 installed direct and transitive dependencies when graph data is available.

Discovery does not perform Python transitive resolution, inspect global environments, call package managers, or use the network. Each package in a reliable dependency graph is classified independently, so an AI SDK can be detected even when it is only transitive, for example application -> wrapper-package -> openai.

Custom classifier rules extend the built-in AI-library list, and matching custom rules override defaults:

air-blackbox discover \
  --scan-path . \
  --ai-libraries custom-ai-libraries.yaml \
  --format cyclonedx

version: 1
packages:
  python:
    my-ai-sdk:
      category: llm-sdk
      provider: Example AI
      reason: Internal AI SDK
  npm:
    "@example/ai-client":
      category: llm-sdk
      provider: Example AI
      reason: Internal AI client

Python package names use PEP 503 normalization. npm scoped package names are supported. Invalid explicit classifier configuration exits with an error before emitting machine-readable output.

Use --output to write machine-readable JSON:

air-blackbox discover --scan-path . --format spdx --output sbom.spdx.json

Warnings and diagnostics go to stderr. JSON files use UTF-8 and end with a newline. Table output cannot be combined with --output.

Model metadata includes model name, provider when observed, and explicit model version when available. The AIR record/schema version is not used as a model version. SPDX 2.3 represents runtime models as packages with annotations; formal schema validation is not currently part of the test suite.

Links

Project links

Data verified by PyPI on Aug 5, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (1.15.0)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for jshotwell from gravatar.com jshotwell

Credits

Author: Jason Shotwell

GitHub Statistics

Data verified by PyPI on Aug 5, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

Apache-2.0
View SPDX License List

Requires

Python >=3.10

Provides Extra

langchain crewai haystack openai autogen adk claude pdf gate lake mcp monitor pqc all

Tags

ai governance compliance eu-ai-act audit opentelemetry llm ai-agents aibom shadow-ai gdpr prompt-injection ai-safety

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

air_blackbox-1.14.0.tar.gz (300.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

air_blackbox-1.14.0-py3-none-any.whl (328.4 kB view details)

Uploaded Python 3

File details

Details for the file air_blackbox-1.14.0.tar.gz.

File metadata

  • Download URL: air_blackbox-1.14.0.tar.gz
  • Upload date:
  • Size: 300.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for air_blackbox-1.14.0.tar.gz
Algorithm Hash digest
SHA256 d91b1af96cef869456b36d48f3c79c36f4c9f111b56597230b2f99b4e7ce1c39
MD5 6803111486e0c9a3b7008ac91d902e44
BLAKE2b-256 34892a118dacfb085bd7ecbb53c12123497403d5a31e6074fbfd3389db9694f5

See more details on using hashes here.

Provenance

The following attestation bundles were made for air_blackbox-1.14.0.tar.gz:

Publisher: release.yml on airblackbox/airblackbox

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file air_blackbox-1.14.0-py3-none-any.whl.

File metadata

  • Download URL: air_blackbox-1.14.0-py3-none-any.whl
  • Upload date:
  • Size: 328.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for air_blackbox-1.14.0-py3-none-any.whl
Algorithm Hash digest
SHA256 3b59648d46197cc98ad92d64f681cf4a809be06e98f59a7eaf3222e44234a32b
MD5 7e929316a56367f6e9f0d730c8d0f060
BLAKE2b-256 e9101dfbf20307d7709e45008831aef6a52926b0e38c9425cec3b7d984c99386

See more details on using hashes here.

Provenance

The following attestation bundles were made for air_blackbox-1.14.0-py3-none-any.whl:

Publisher: release.yml on airblackbox/airblackbox

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

1.15.0

2 files

This release

1.14.0 This release

2 files

1.13.2

2 files

1.13.1

2 files

1.13.0

2 files

1.12.4

2 files

1.12.3

2 files

1.12.2

2 files

1.12.1

2 files

1.12.0

2 files

1.11.2

2 files

1.11.1

2 files

1.11.0

2 files

1.10.0

2 files

1.9.0

2 files

1.8.2

2 files

1.8.1

2 files

1.8.0

2 files

1.7.0

2 files

1.6.3

2 files

1.6.2

2 files

1.6.1

2 files

1.6.0

2 files

1.5.0

2 files

1.4.0

2 files

1.3.0

2 files

1.2.6

2 files

1.2.5

2 files

1.2.4

2 files

1.2.3

2 files

1.2.2

2 files

1.2.1

2 files

1.2.0

2 files

1.1.0

2 files

1.0.0

2 files

0.2.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page