Skip to main content

crewai-trust-gate

CrewAI tools for Trust Gate post-quantum, tamper-evident receipts on consequential agent actions.

Trust Gate receipts are signed Ed25519 + ML-DSA-65 (FIPS 204) by the hosted MCP server (no local signing key). Each receipt is verifiable offline from the certificate alone. The hosted server defaults to PQ-required verify mode; set TRUST_GATE_REQUIRE_PQ=false to allow Ed25519-only receipts.

Install

pip install cwn-crewai-trust-gate

Usage

from crewai import Agent, Task, Crew
from crewai_trust_gate import MintActionReceiptTool, VerifyReceiptTool

auditor = Agent(
    role="receipt auditor",
    goal="Verify every consequential action has a tamper-evident receipt",
    tools=[VerifyReceiptTool()],
)

deployer = Agent(
    role="deploy engineer",
    goal="Deploy safely, leave a receipt for every promotion",
    tools=[MintActionReceiptTool()],
)

Tools

Tool Purpose
trust_gate_mint_action_receipt Mint a post-quantum receipt for any consequential agent action.
trust_gate_verify_receipt Verify a Trust Gate receipt from the certificate alone.
trust_gate_gate_decision Two-phase gate. PREVIEW assesses risk without acting; COMMIT verifies the inputs still match and mints a receipt carrying an execution permit.
trust_gate_check_egress Classify data PUBLIC / INTERNAL / CONFIDENTIAL / RESTRICTED before it leaves. Blocks RESTRICTED.
trust_gate_run_exit_drill Vendor exit-readiness drill. Informational, no side effects.

Configuration

export TRUST_GATE_URL="https://trust-gate-mcp.onrender.com"  # default; override for self-hosted

Telemetry

One fire-and-forget GET /x?via=crewai&kind=api per tool call. No PII, no cookies, never blocks the tool.

Related

License

Apache-2.0.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cwn_crewai_trust_gate-0.2.0.tar.gz (6.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cwn_crewai_trust_gate-0.2.0-py3-none-any.whl (6.8 kB view details)

Uploaded Python 3

File details

Details for the file cwn_crewai_trust_gate-0.2.0.tar.gz.

File metadata

  • Download URL: cwn_crewai_trust_gate-0.2.0.tar.gz
  • Upload date:
  • Size: 6.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.13

File hashes

Hashes for cwn_crewai_trust_gate-0.2.0.tar.gz
Algorithm Hash digest
SHA256 b9c0c9a4f94333403ad97c272f0d61123239b44a5373ae68838388fcd3bf711c
MD5 05e74ac8ef677144943f16c8d9c6fa54
BLAKE2b-256 938bf5af23c8c60580f752690a6d28e6a76cc5e4df72a46d9f4a3bff73c75b08

See more details on using hashes here.

Provenance

The following attestation bundles were made for cwn_crewai_trust_gate-0.2.0.tar.gz:

Publisher: release.yml on CWNApps/crewai-trust-gate

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cwn_crewai_trust_gate-0.2.0-py3-none-any.whl.

File metadata

File hashes

Hashes for cwn_crewai_trust_gate-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 31d541f5a353ea88bc97e9e009f95d83f04de7890a93d2c1d05b2780a5c3f4cc
MD5 027497742fe4f2afce79488388cc2908
BLAKE2b-256 84811b309bb4276e399a2f0b2aed9e56c930a091c6ae48822b4116fb9ae41b6a

See more details on using hashes here.

Provenance

The following attestation bundles were made for cwn_crewai_trust_gate-0.2.0-py3-none-any.whl:

Publisher: release.yml on CWNApps/crewai-trust-gate

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page