🛡️ Anchor Core (anchor-audit)
The Deterministic Runtime Governance & Compliance Kernel for Autonomous AI Systems.
Current release: 6.0.4 · Python 3.10–3.13
Anchor is a high-performance, dual-language (Rust/Python) infrastructure library designed to enforce strict regulatory invariants, architectural boundaries, and safety safeguards around autonomous AI agents and LLM application pipelines in real-time.
By executing compiled Abstract Syntax Tree (AST) query matchers and single-pass Deterministic Finite Automaton (DFA) regex sets, Anchor operates with zero-copy memory boundaries—designed to keep per-call overhead low. See benchmarks/bench_guard.py to measure it on your hardware.
🏎️ Core Architectural Horsepower
- Fast static scanning: Rust backend engine utilizing parallel directory walking via
rayonand memory-mapped files (memmap2). - Zero-Copy Memory Boundaries: Leverages PyO3 zero-copy buffer bridges to consume incoming network data frames straight from host ASGI server pools (like FastAPI) with zero heap allocation overhead.
- Asymmetric Cryptographic Identity: Every compiled audit log is bundled into an tamper-evident Decision Audit Chain (DAC) block, sealed locally using Ed25519 asymmetric keys and verified via constant-time hashing (
subtle::ConstantTimeEq). - Active Self-Healing Interception: Moves beyond passive post-mortem dashboards. If an active consumer agent drifts into an invariant violation, Anchor's runtime layer intercepts the thread, halts execution, and injects dynamic, domain-agnostic rerouting directives on the fly.
🏛️ Comprehensive Regulatory Scope
Anchor maps rules to the provisions they relate to (a pattern match is not a legal finding). Coverage includes:
- EU Artificial Intelligence Act (Regulation EU 2024/1689): Complete mapping from Chapter II Article 5 Prohibited Practices (subliminal manipulation, facial scraping safeguards) to Chapter III Articles 6–27 High-Risk System obligations (6-month log retention tracking under Art 12/19, Article 14 human override levers), stretching up to Article 99 turnover penalty metrics.
- U.S. Securities and Exchange Commission (SEC / FINRA): Hard automated boundaries protecting algorithmic trading setups under SEC Regulation SCI (System capacity loop circuit breakers), Exchange Act Rule 15c3-5 (Pre-trade credit and risk limit validation), and Cybersecurity Form 8-K outbound data exfiltration gates.
- Industry Frameworks: Built-in support for FINOS OSERA AI supply-chain resiliency blueprints, OWASP Top 10 LLM security controls, NIST AI RMF, and ISO/IEC 42001 standards.
📦 High-Velocity Installation
Deploy the compiled binary kernel straight into your production cluster workspace:
pip install anchor-audit
Anchor pulls in its runtime dependencies automatically (Click, HTTPX, PyYAML,
cryptography, wrapt, GitPython and the tree-sitter grammars), so the anchor
command is usable straight after install.
Optional extras:
pip install "anchor-audit[providers]" # OpenAI, Anthropic, Groq, Cohere, Ollama, ...
pip install "anchor-audit[server]" # FastAPI/ASGI gateway (anchor.app) + uvicorn
pip install "anchor-audit[dev]" # pytest, black, mypy
The CLI, the @guard decorator and the static scanner need none of these extras.
6.0.3 release highlights
- Telemetry remains explicitly opt-in and performs no network dispatch by default.
- Governance signatures are line-ending independent across Windows, macOS, and Linux.
- The package metadata, wheel smoke test, secret scanning, and developer extras are
aligned with the
pyproject.tomlbuild. - The committed governance public key is rotated; the private signing key is generated and retained outside the repository.
Initialize your local asymmetric cryptographic repository identity:
anchor init
Run a parallel static code safety audit across your local workspace:
anchor check .
🔌 Runtime Integration
Wrap a high-privilege agent routine or LLM invocation with a decorator. @guard only protects functions you wrap; unwrapped code is not covered.
from anchor import guard
@guard(domain="finance")
def execute_algorithmic_trade(order_payload):
# If the autonomous agent tries to route an un-vetted market order,
# Anchor audits the call payload before the function body runs and returns a BLOCKED_BY_ANCHOR directive on a match.
return route_order_to_exchange(order_payload)
from anchor.guard import guard is the equivalent spelling if you prefer to
import the decorator directly. Both are exercised by
tests/test_readme_example.py.
🌐 The AnimusLab Institution Network
Anchor Core acts as the local spoke auditing engine that feeds seamlessly into the wider, unified decentralized coordination hub ecosystem:
- Central Portal Hub: animuslab.dev
- Enterprise Fleet Cockpit: hub.animuslab.dev
- Statutory Rules Documentation: animuslab.dev/rules
- Authoritative Engineering Profile: tan.animuslab.dev
Maintained by AnimusLab.
⚠️ Limitations
@guard(Layer 2) covers only the functions you decorate. Keyword/pattern checks can be rephrased around; treat Anchor as one deterministic layer in defense-in-depth.- Telemetry is off by default. Set
ANCHOR_TELEMETRY=onto opt in; see docs/telemetry.md for exactly what is sent. - Static rules are pattern/AST based. Known detection gaps are tracked as
xfailtests intests/unit/test_detection_gaps.py.
1 maintainer
Metadata
1 maintainer
Release files for anchor-audit 6.0.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| anchor_audit-6.0.4.tar.gz | 223.5 kB | Without provenance | Details |
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| anchor_audit-6.0.4-cp310-abi3-win_amd64.whl | CPython 3.10 | abi3 | Windows x86-64 | Details |
| anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl | CPython 3.10 | abi3 | Linux glibc 2.17+ x86-64 | Details |
| anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl | CPython 3.10 | abi3 | Linux glibc 2.17+ ARM64 | Details |
| anchor_audit-6.0.4-cp310-abi3-macosx_11_0_arm64.whl | CPython 3.10 | abi3 | macOS 11.0+ ARM64 | Details |
| anchor_audit-6.0.4-cp310-abi3-macosx_10_12_x86_64.whl | CPython 3.10 | abi3 | macOS 10.12+ x86-64 | Details |
Total release size: 8.0 MB
Release files / anchor_audit-6.0.4.tar.gz
| Download URL | anchor_audit-6.0.4.tar.gz |
|---|---|
| Size | 223.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
deca88ddd3ca2fa2eb745333003179b74374b2637903050caf73376a683cfaab
|
|
BLAKE2b-256 checksum How to use checksums |
ef93c3b38e180b3ff813b999799c43489aa12b7f5b730235522c57335e07367d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / anchor_audit-6.0.4-cp310-abi3-win_amd64.whl
| Download URL | anchor_audit-6.0.4-cp310-abi3-win_amd64.whl |
|---|---|
| Size | 1.4 MB |
| Tags | CPython 3.10 Windows x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
af6898804fc7c088383fa019c1d5213bf35539c01f5442f565b03fed0cba7b60
|
|
BLAKE2b-256 checksum How to use checksums |
17874027f67925132234895aa2a72d6a59e3b29b91e46adaf2a66df336573b8f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
| Download URL | anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl |
|---|---|
| Size | 1.7 MB |
| Tags | CPython 3.10 Linux glibc 2.17+ x86-64 abi3 |
|
SHA-256 checksum How to use checksums |
d25d4c9a566e73dac96af67f62c772c9b6aa573794d0ad41f2368fd5eb3ca3bd
|
|
BLAKE2b-256 checksum How to use checksums |
ec02ecc1205f09780559a608f5fef6e3069e087ad58941913453b5977b82b688
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
| Download URL | anchor_audit-6.0.4-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl |
|---|---|
| Size | 1.7 MB |
| Tags | CPython 3.10 Linux glibc 2.17+ ARM64 abi3 |
|
SHA-256 checksum How to use checksums |
c26368a2a4cb33c2ef28b288c1eb54e9cc8f4240d2bda370899aa028214f4214
|
|
BLAKE2b-256 checksum How to use checksums |
5b94cf06ba29458617ef75a863a597c222a3f83b90be6d44e4b15d2c51984662
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / anchor_audit-6.0.4-cp310-abi3-macosx_11_0_arm64.whl
| Download URL | anchor_audit-6.0.4-cp310-abi3-macosx_11_0_arm64.whl |
|---|---|
| Size | 1.5 MB |
| Tags | CPython 3.10 abi3 macOS 11.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
3b246d65daa1072c5f32935104e0ae02ba1ead20abd1a1a8c8861a859f262ff0
|
|
BLAKE2b-256 checksum How to use checksums |
579d0df96c2eb7f4eb0a61167e7417792db5cd4f08a3d85cf947818f15115736
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / anchor_audit-6.0.4-cp310-abi3-macosx_10_12_x86_64.whl
| Download URL | anchor_audit-6.0.4-cp310-abi3-macosx_10_12_x86_64.whl |
|---|---|
| Size | 1.6 MB |
| Tags | CPython 3.10 abi3 macOS 10.12+ x86-64 |
|
SHA-256 checksum How to use checksums |
e706bddae513488d68e3521514fea9cfd822973cc4bf6faf98e6115619a430c5
|
|
BLAKE2b-256 checksum How to use checksums |
d1ab5dbb80f9c482afd6d41167fa3140a2f3caefdb491d60c3701c93acfc4f58
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Security for anchor-audit 6.0.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
