Zero Trust Security for AI Agents
Project description
Cerone — Runtime Governance for AI Agents
Install it. Create an agent. Validate a real action. See a live governance decision in minutes.
Cerone gives every AI agent a cryptographic identity, validates intended actions before execution, and returns explicit runtime decisions:
approvedflaggedrejected
Start immediately from the SDK with 2,500 one-time free validations.
Powered by AZTP (Agent Zero Trust Platform)
Why Developers Use Cerone
- start immediately with hosted trial access from the SDK
- validate agent actions before they execute
- keep your own OpenAI, Anthropic, or other model key
- add runtime governance without replacing the rest of your stack
- get real decisions instead of vague policy claims
- use a lean trust layer instead of a heavy control-plane rewrite
Install
pip install cerone
Quick Start
import asyncio
from cerone import CeroneClient
async def main():
client = CeroneClient(
base_url="https://aztp-homer-semantics.onrender.com",
)
try:
certificate = client.create_agent(
purpose="Customer billing support",
capabilities=["db_read", "billing_api"],
)
result = await client.validate_async(
agent_id=certificate.agent_id,
action="database_query",
parameters={"table": "billing", "customer_id": "123"},
)
print("Agent:", certificate.agent_id)
print("Decision:", result.result)
print("Trust:", result.trust_score)
finally:
await client.aclose()
asyncio.run(main())
What Cerone Does
Cerone is a runtime trust and governance layer for AI agents.
It:
- gives each agent a cryptographic identity
- validates intended actions against declared purpose and capability
- returns explicit runtime decisions before execution
- records audit and trust signals across agent activity
- preserves lineage and delegation boundaries where applicable
What Cerone Validates
| Check | What it catches |
|---|---|
| Cryptographic identity | Impersonation, spoofed agents |
| Semantic alignment | Agents acting outside their declared purpose |
| Trust scoring | Behavioural drift over time |
| Capability scope | Agents calling tools they were never granted |
| Lineage integrity | Unauthorized parent-child relationships |
Trial and Access
Cerone currently has two usage paths:
1. Hosted Trial
CeroneClient()can bootstrap an anonymous hosted trial token automatically- includes 2,500 one-time successful validations
- no manual signup required to begin evaluation
- intended for initial testing and demos
2. Persistent Access
- for POCs, pilots, and production usage
- contact us for provisioned persistent SDK access
Support and contact:
Hosted service terms:
Bring Your Own Model Key
Cerone governs agent behaviour, not inference.
You keep your own OpenAI, Anthropic, or other provider key and pass it directly to your model calls. Cerone validates the intended action and records the governance trail, but it does not sit in the middle of your model billing path.
import asyncio
import openai
from cerone import CeroneClient
async def main():
client = CeroneClient(
base_url="https://aztp-homer-semantics.onrender.com",
)
openai_client = openai.AsyncOpenAI(api_key="sk-...")
try:
certificate = client.create_agent(
purpose="Summarise support tickets",
capabilities=["read_ticket", "write_summary"],
)
validation = await client.validate_async(
agent_id=certificate.agent_id,
action="write_summary",
parameters={"ticket_id": "T-001"},
)
print("Decision:", validation.result)
response = await openai_client.chat.completions.create(
model="gpt-4o-mini",
messages=[{"role": "user", "content": "Summarise ticket T-001"}],
)
print(response)
finally:
await client.aclose()
asyncio.run(main())
Why Cerone Is Different
Many vendors talk about agentic governance. Very few have something real you can install, run, and demo.
Cerone is different because it is:
- runtime-real: it makes live governance decisions in the execution path
- lean: it adds trust and control without demanding a full platform rewrite
- developer-usable: installable, callable, and demoable now
- business-aware: designed to support workflow-aware governance, not just technical checks
Most of the category still looks theoretical. Cerone is meant to be used.
Architecture
Your Agent Code
│
▼
Cerone SDK ──────────────────────────────────────────┐
│ │
▼ ▼
AZTP Platform (aztp-homer-semantics.onrender.com) Your LLM Provider
├─ Identity Manager
├─ Semantic Validator
├─ Trust Engine
└─ Audit Logger
Cerone is distributed by design: a thin SDK on the client side and centralized identity, validation, governance, and audit logic on the server side.
License
This SDK repository currently uses a proprietary commercial SDK license.
The SDK source license and the hosted Cerone service terms are separate:
- SDK / package code: LICENSE
- Hosted service usage: TERMS_OF_SERVICE.md
Free trial and hosted commercial terms are subject to change.
Homer Semantics and Anant Dhavale are not liable for losses, damages, business interruption, model outputs, workflow outcomes, or downstream actions arising from use of the SDK or hosted service. Use Cerone at your own discretion and risk.
Contact
- Website: homersemantics.com
- Support: info@homersemantics.com
- Founder: anantdhavale@gmail.com
If you are building with agents and want runtime governance that is actually usable, reach out.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file cerone-1.1.6.tar.gz.
File metadata
- Download URL: cerone-1.1.6.tar.gz
- Upload date:
- Size: 20.2 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
52d7e4e171b3e8b8b3cf36952bbc61815125964cebdbddcb07a72fd0e4bdc585
|
|
| MD5 |
1273c227839329fbd36514b2fe84770e
|
|
| BLAKE2b-256 |
e958b93aa1238c6ac4b0cfdea666b251631157e532f38d6632790e67e5f2b288
|
Provenance
The following attestation bundles were made for cerone-1.1.6.tar.gz:
Publisher:
python-publish.yml on AnantDhavale/cerone_sdk
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
cerone-1.1.6.tar.gz -
Subject digest:
52d7e4e171b3e8b8b3cf36952bbc61815125964cebdbddcb07a72fd0e4bdc585 - Sigstore transparency entry: 1493906983
- Sigstore integration time:
-
Permalink:
AnantDhavale/cerone_sdk@4aec99925cf57d23200995f5379c20e051aed38b -
Branch / Tag:
refs/tags/agent_governance_onthego - Owner: https://github.com/AnantDhavale
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
python-publish.yml@4aec99925cf57d23200995f5379c20e051aed38b -
Trigger Event:
release
-
Statement type:
File details
Details for the file cerone-1.1.6-py3-none-any.whl.
File metadata
- Download URL: cerone-1.1.6-py3-none-any.whl
- Upload date:
- Size: 15.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
37260ae1e11cc1b0d43207535bd9ae78ca3e174240bdbc5ec22d9fc052ac3f11
|
|
| MD5 |
8ee5cf624e0e3f5f6a7465032e95df59
|
|
| BLAKE2b-256 |
26eca7a2b7887babfc65a4da9ea5b4066b630d4497beac4a469b2909f6eeff63
|
Provenance
The following attestation bundles were made for cerone-1.1.6-py3-none-any.whl:
Publisher:
python-publish.yml on AnantDhavale/cerone_sdk
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
cerone-1.1.6-py3-none-any.whl -
Subject digest:
37260ae1e11cc1b0d43207535bd9ae78ca3e174240bdbc5ec22d9fc052ac3f11 - Sigstore transparency entry: 1493907103
- Sigstore integration time:
-
Permalink:
AnantDhavale/cerone_sdk@4aec99925cf57d23200995f5379c20e051aed38b -
Branch / Tag:
refs/tags/agent_governance_onthego - Owner: https://github.com/AnantDhavale
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
python-publish.yml@4aec99925cf57d23200995f5379c20e051aed38b -
Trigger Event:
release
-
Statement type: