Skip to main content

Zero Trust Security for AI Agents

Project description

Cerone — Runtime Governance for AI Agents

Install it. Create an agent. Validate a real action. See a live governance decision in minutes.

Cerone gives every AI agent a cryptographic identity, validates intended actions before execution, and returns explicit runtime decisions:

  • approved
  • flagged
  • rejected

Start immediately from the SDK with 2,500 one-time free validations.

Powered by AZTP (Agent Zero Trust Platform)


Why Developers Use Cerone

  • start immediately with hosted trial access from the SDK
  • validate agent actions before they execute
  • keep your own OpenAI, Anthropic, or other model key
  • add runtime governance without replacing the rest of your stack
  • get real decisions instead of vague policy claims
  • use a lean trust layer instead of a heavy control-plane rewrite

Install

pip install cerone

After install, you can verify connectivity and bootstrap a hosted trial from the terminal:

cerone

If your shell does not pick up the installed script immediately, this also works:

python3 -m cerone

If you are working from source, clone this repository and install it locally:

git clone https://github.com/AnantDhavale/cerone_sdk.git
cd cerone_sdk
pip install -e .

Access Modes

Cerone now has two usage paths:

  1. Hosted API trial

    • CeroneClient() can bootstrap an anonymous hosted trial token automatically
    • the current hosted trial is designed for evaluation and demo use
    • if the trial is exhausted, contact us for persistent access
  2. Python SDK usage

    • use CeroneClient() with no key for hosted trial bootstrap
    • use a provisioned key for persistent POCs or production environments

Hosted signup and support:

Hosted service terms:


Quick Start

import asyncio

from cerone import CeroneClient


async def main():
    client = CeroneClient(
        base_url="https://api.homersemantics.com",
    )

    try:
        certificate = client.create_agent(
            purpose="Customer billing support",
            capabilities=["db_read", "billing_api"],
        )

        result = await client.validate_async(
            agent_id=certificate.agent_id,
            action="database_query",
            parameters={"table": "billing", "customer_id": "123"},
        )

        print("Agent:", certificate.agent_id)
        print("Decision:", result.result)
        print("Trust:", result.trust_score)
    finally:
        await client.aclose()


asyncio.run(main())

What Cerone Does

Cerone is a runtime trust and governance layer for AI agents.

It:

  • gives each agent a cryptographic identity
  • validates intended actions against declared purpose and capability
  • returns explicit runtime decisions before execution
  • records audit and trust signals across agent activity
  • preserves lineage and delegation boundaries where applicable

What Cerone Validates

Check What it catches
Cryptographic identity Impersonation, spoofed agents
Semantic alignment Agents acting outside their declared purpose
Trust scoring Behavioural drift over time
Capability scope Agents calling tools they were never granted
Lineage integrity Unauthorized parent-child relationships

Trial and Access

Cerone currently has two usage paths:

1. Hosted Trial

  • CeroneClient() can bootstrap an anonymous hosted trial token automatically
  • includes 2,500 one-time successful validations
  • no manual signup required to begin evaluation
  • intended for initial testing and demos

2. Persistent Access

  • for POCs, pilots, and production usage
  • contact us for provisioned persistent SDK access

Support and contact:

Hosted service terms:


Bring Your Own Model Key

Cerone governs agent behaviour, not inference.

You keep your own OpenAI, Anthropic, or other provider key and pass it directly to your model calls. Cerone validates the intended action and records the governance trail, but it does not sit in the middle of your model billing path.

import asyncio
import openai

from cerone import CeroneClient


async def main():
    client = CeroneClient(
        base_url="https://api.homersemantics.com",
    )
    openai_client = openai.AsyncOpenAI(api_key="sk-...")

    try:
        certificate = client.create_agent(
            purpose="Summarise support tickets",
            capabilities=["read_ticket", "write_summary"],
        )

        validation = await client.validate_async(
            agent_id=certificate.agent_id,
            action="write_summary",
            parameters={"ticket_id": "T-001"},
        )
        print("Decision:", validation.result)

        response = await openai_client.chat.completions.create(
            model="gpt-4o-mini",
            messages=[{"role": "user", "content": "Summarise ticket T-001"}],
        )
        print(response)
    finally:
        await client.aclose()


asyncio.run(main())

Why Cerone Is Different

Many vendors talk about agentic governance. Very few have something real you can install, run, and demo.

Cerone is different because it is:

  • runtime-real: it makes live governance decisions in the execution path
  • lean: it adds trust and control without demanding a full platform rewrite
  • developer-usable: installable, callable, and demoable now
  • business-aware: designed to support workflow-aware governance, not just technical checks

Most of the category still looks theoretical. Cerone is meant to be used.


Architecture

Your Agent Code
      │
      ▼
  Cerone SDK  ──────────────────────────────────────────┐
      │                                                  │
      ▼                                                  ▼
AZTP Platform (api.homersemantics.com)  Your LLM Provider
  ├─ Identity Manager
  ├─ Semantic Validator
  ├─ Trust Engine
  └─ Audit Logger

Cerone is distributed by design: a thin SDK on the client side and centralized identity, validation, governance, and audit logic on the server side.


License

This SDK repository currently uses a proprietary commercial SDK license.

The SDK source license and the hosted Cerone service terms are separate:

Free trial and hosted commercial terms are subject to change.

Homer Semantics and Anant Dhavale are not liable for losses, damages, business interruption, model outputs, workflow outcomes, or downstream actions arising from use of the SDK or hosted service. Use Cerone at your own discretion and risk.


Contact

If you are building with agents and want runtime governance that is actually usable, reach out.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cerone-1.1.7.tar.gz (21.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cerone-1.1.7-py3-none-any.whl (17.5 kB view details)

Uploaded Python 3

File details

Details for the file cerone-1.1.7.tar.gz.

File metadata

  • Download URL: cerone-1.1.7.tar.gz
  • Upload date:
  • Size: 21.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cerone-1.1.7.tar.gz
Algorithm Hash digest
SHA256 fdb6b4633bbdcc4ee18961d0b77a2b6c6d561cd1a69b001eb1e71334f5e8fe08
MD5 b6bf4194fbb04d044297c969918774c6
BLAKE2b-256 90289d73cff9fe6632bccc757fc36786be08ce68b2a893bb4e6a769f9c6063d3

See more details on using hashes here.

Provenance

The following attestation bundles were made for cerone-1.1.7.tar.gz:

Publisher: python-publish.yml on AnantDhavale/cerone_sdk

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cerone-1.1.7-py3-none-any.whl.

File metadata

  • Download URL: cerone-1.1.7-py3-none-any.whl
  • Upload date:
  • Size: 17.5 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for cerone-1.1.7-py3-none-any.whl
Algorithm Hash digest
SHA256 157d848d36263e8306ea4b965e2efd9b2ac2e7c4e19238354c1773040626a952
MD5 b2ff3dc2bb6a864bc5d236da8989449e
BLAKE2b-256 25ac70aa5a9dae88fb356443dfd6a25cf0e3a3ae4ab6c9703f4135df732c9539

See more details on using hashes here.

Provenance

The following attestation bundles were made for cerone-1.1.7-py3-none-any.whl:

Publisher: python-publish.yml on AnantDhavale/cerone_sdk

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page