cordum-guard 2.5.2

Cordum Safety Guard — @guard decorator for LangChain, LlamaIndex, and plain Python functions

cordum-guard

Safety governance for Python AI agents. Add Cordum safety checks to existing Python code with a single decorator — no rewrite required.

Install

pip install cordum-guard

With LangChain or LlamaIndex support:

pip install cordum-guard[langchain]
pip install cordum-guard[llamaindex]

Quick Start

from cordum_guard import CordumClient, guard

client = CordumClient("http://localhost:8081", api_key="your-api-key")

@guard(client, policy="financial_ops", risk_tags=["write", "financial"])
def execute_transfer(amount: float, to_account: str):
    bank_api.transfer(amount, to_account)

The @guard decorator intercepts every call to execute_transfer:

1. Evaluates the safety policy via the Cordum Safety Kernel
2. allow — function runs normally
3. deny — raises CordumBlockedError
4. require_approval — waits for human approval in the dashboard
5. throttle — delays execution per policy

LangChain Integration

from cordum_guard import CordumClient
from cordum_guard.langchain import CordumToolGuard

client = CordumClient("http://localhost:8081", api_key="your-api-key")
guarded_tools = CordumToolGuard(client, policy="agent_ops").wrap(tools)
agent = initialize_agent(guarded_tools, llm)

LlamaIndex Integration

from cordum_guard import CordumClient
from cordum_guard.llamaindex import CordumToolGuard

client = CordumClient("http://localhost:8081", api_key="your-api-key")
guarded_tools = CordumToolGuard(client, policy="agent_ops").wrap(tools)

Async Support

The @guard decorator works with both sync and async functions:

@guard(client, policy="ops")
async def async_operation():
    return await some_api_call()

Configuration

CordumClient

Parameter	Default	Description
gateway_url	—	Cordum gateway URL
api_key	—	API key for authentication
tenant_id	"default"	Tenant identifier
timeout	30.0	HTTP request timeout (seconds)

@guard decorator

Parameter	Default	Description
client	—	CordumClient instance
policy	""	Policy name (label for traceability)
risk_tags	[]	Risk tags sent to the Safety Kernel
capability	function name	Override the capability identifier
topic	"job.guard"	NATS topic for policy evaluation
timeout	300.0	Max wait for approval decisions (seconds)

CordumToolGuard (LangChain / LlamaIndex)

Parameter	Default	Description
client	—	CordumClient instance
policy	""	Policy name
risk_tags	[]	Risk tags for all wrapped tools
topic	"job.guard"	NATS topic for evaluation

License

Apache-2.0