Skip to main content

Zero Trust Security for AI Agents

Reason this release was yanked:

Incorrect readme

Project description

Cerone — Governance and Zero Trust Runtime for AI Agents

Powered by AZTP (Agent Zero Trust Platform)

Cerone gives every AI agent a cryptographic identity, validates that its actions align with its declared purpose, and produces an auditable runtime trail across identity, validation, governance, and delegated token exchange.

Most teams deploying agents in production still have weak runtime control over what those agents actually do. Cerone is built to fix that.


Install

The current SDK/package name in this repo is aztp.

pip install git+https://github.com/AnantDhavale/AZTP.git

If you are working locally:

git clone https://github.com/AnantDhavale/AZTP.git
cd AZTP
pip install -e .

Get Your Free API Key

Self-serve signup. No waitlist and no approval step.

curl -X POST https://aztp-homer-semantics.onrender.com/signup \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "password": "your-secure-password", "name": "Your Name"}'

You receive an sk_free_... key instantly.

Free tier currently includes:

  • 5,000 validations per 30-day window
  • free for the first 30 days from signup
  • bring your own OpenAI / Anthropic / other model-provider key
  • Cerone does not proxy or charge for model inference

Hosted signup and support:

Hosted service terms:


Quick Start

import asyncio
from aztp.sdk import AZTPClient, AZTPAgent

async def main():
    client = AZTPClient(
        api_url="https://aztp-homer-semantics.onrender.com",
        api_key="sk_free_...",
    )

    agent = AZTPAgent(
        purpose="Customer billing support",
        capabilities=["db_read", "billing_api"],
        client=client,
    )
    await agent.initialize()

    print(f"Agent ID: {agent.agent_id}")
    print(f"Trust score: {agent.certificate.trust_score}")

    result = await agent.validate_and_execute(
        tool="database_query",
        parameters={"table": "billing", "customer_id": "123"},
        execute_fn=lambda: {"amount": 99.99, "status": "paid"},
    )
    print(f"Result: {result}")

    child = await agent.spawn(
        purpose="Verify roaming charges",
        capabilities=["network_api"],
    )

    await agent.terminate()
    await client.close()

asyncio.run(main())

What Cerone Validates

Check What it catches
Cryptographic identity Impersonation, spoofed agents
Semantic alignment Agents acting outside their declared purpose
Trust scoring Behavioural drift over time
Capability scope Agents calling tools they were never granted
Lineage integrity Unauthorized parent-child relationships

Bring Your Own Model Key

Cerone governs agent behaviour, not inference.

You keep your own OpenAI, Anthropic, or other provider key and pass it directly to your model calls. Cerone validates the agent action and records the governance trail, but it does not sit in the middle of your model billing path.

import openai
from aztp.sdk import AZTPClient, AZTPAgent

client = AZTPClient(
    api_url="https://aztp-homer-semantics.onrender.com",
    api_key="sk_free_...",
)
openai_client = openai.AsyncOpenAI(api_key="sk-...")  # your key, your spend

agent = AZTPAgent(
    purpose="Summarise support tickets",
    capabilities=["read_ticket", "write_summary"],
    client=client,
)
await agent.initialize()

await agent.validate_and_execute(
    tool="write_summary",
    parameters={"ticket_id": "T-001"},
    execute_fn=lambda: openai_client.chat.completions.create(
        model="gpt-4o-mini",
        messages=[{"role": "user", "content": "Summarise ticket T-001"}],
    ),
)

Decorator Pattern

agent = AZTPAgent(
    purpose="Customer data analysis",
    capabilities=["db_read", "analytics"],
    client=client,
)
await agent.initialize()

@agent.action("database_query")
async def query_customers(customer_id: str):
    return {"customer_id": customer_id, "name": "Jane Doe"}

customer = await query_customers("123")

Tiers

Free Startup Pro Enterprise
Validations / 30-day window 5,000 50,000 500,000 Custom
Agents 5 25 250 Custom
Audit retention 7 days 30 days 90 days 365 days
Model access BYO only BYO only BYO now, managed later BYO or managed
Support Community Email Priority Dedicated
Price Free for first 30 days Contact / self-serve pricing Contact / self-serve pricing Contact us

If you want fixed public pricing in this README, update this table once the commercial page is final.


Architecture

Your Agent Code
      │
      ▼
  Cerone SDK  ──────────────────────────────────────────┐
      │                                                  │
      ▼                                                  ▼
AZTP Platform (aztp-homer-semantics.onrender.com)  Your LLM Provider
  ├─ Identity Manager
  ├─ Semantic Validator
  ├─ Trust Engine
  └─ Audit Logger

Supported Frameworks and Integrations

Cerone currently ships adapters or normalization paths for:

  • CrewAI
  • Google ADK
  • Gemma
  • Salesforce
  • ServiceNow
  • Slack
  • Microsoft 365
  • Google Workspace
  • Jira

Usage and Quota

curl https://aztp-homer-semantics.onrender.com/usage \
  -H "X-API-Key: sk_free_..."

This returns current usage, remaining quota, reset date, free-tier expiry, and tier feature flags.


Documentation

Live API docs:


License

Current repository/package metadata is MIT.

The open-source repository license and the hosted Cerone service terms are separate:

  • repository/package code: MIT
  • hosted service usage: HOSTED_TERMS.md Free trial is subject to change. Use the software at your own risk.

Contact and Feedback

If you are using Cerone, feedback is genuinely useful. I am doing some additions/ changes, please do reach out if you face any issues.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cerone-1.1.0.tar.gz (20.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cerone-1.1.0-py3-none-any.whl (14.7 kB view details)

Uploaded Python 3

File details

Details for the file cerone-1.1.0.tar.gz.

File metadata

  • Download URL: cerone-1.1.0.tar.gz
  • Upload date:
  • Size: 20.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cerone-1.1.0.tar.gz
Algorithm Hash digest
SHA256 37beb3439616ffd173422dd890b7b736646abfdcfa1d133eb1e3a8f3bc4014d2
MD5 f73653b78f7d96e0445aadec13a745d7
BLAKE2b-256 d30333f7d93dfb5c38974ada46f8ba64002f41264616cfed8170dea92d579a00

See more details on using hashes here.

Provenance

The following attestation bundles were made for cerone-1.1.0.tar.gz:

Publisher: python-publish.yml on AnantDhavale/cerone_sdk

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cerone-1.1.0-py3-none-any.whl.

File metadata

  • Download URL: cerone-1.1.0-py3-none-any.whl
  • Upload date:
  • Size: 14.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cerone-1.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 dbc2191c80fad9f36ce4c3b93dfe3ef46cebad6e5923aacbd099e762c2faac32
MD5 ad8559fce26bd96f8392b525ecd71578
BLAKE2b-256 62179daf56cb915f50b132f9ad9e49aecd0e0f0ca5140bd34ca2e06ef41e980e

See more details on using hashes here.

Provenance

The following attestation bundles were made for cerone-1.1.0-py3-none-any.whl:

Publisher: python-publish.yml on AnantDhavale/cerone_sdk

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page