fairway-py

Fairway is the Python SDK for runtime AI agent governance. Zero-config startup, and rollback with an environment variable.

Install

pip install "fairway-py[embedded,retry]"

30-second quickstart

from fairway import harness, embed_gateway

# Optional: start an in-process SQLite gateway (dev / air-gap)
embed_gateway()

@harness
def my_agent(user: str, input: str) -> dict:
    """Decorated agent. Governance happens automatically after each call."""
    return {"answer": "42"}

result = my_agent(user="alice", input="What is the meaning of life?")
print(result)   # {"answer": "42"} — or BlockedError if policy rejects it

Names: install fairway-py. Import with from fairway import .... fairway on PyPI is a different project. agentrust_sdk and agentrust load this same package.

Rollback (no code change, no image rebuild)

export AGENTRUST_ENABLED=false
# restart process — @harness becomes a no-op identity wrapper

Configuration

Every tunable is an env var — no config file required for basic usage.

Deployment ladder (env-only)

# Dev — embedded SQLite, no external services
AGENTRUST_ENABLED=true
# (call embed_gateway() at startup)

# Staging — remote gateway, fail safe
AGENTRUST_GATEWAY_URL=https://agentrust-staging.internal:8000
AGENTRUST_KEY=at_...
AGENTRUST_FAILURE_MODE=closed

# Production
AGENTRUST_GATEWAY_URL=https://agentrust.internal:8000
AGENTRUST_FAILURE_MODE=open
AGENTRUST_RETRY_ATTEMPTS=5

App code is identical across all three environments.

Failure modes

Queue mode note: The local buffer is written but not automatically replayed in the current release. Use agentrust export to inspect buffered records. A background drain/replay worker is on the roadmap.

Extras

Tiers

CLI

fairway init              # create ~/.agentrust/config.yaml
fairway status            # tier + gateway reachability
fairway export ./out.jsonl
fairway purge --confirm
fairway disable

agentrust is the same command. Configuration still lives in ~/.agentrust/ and still uses the AGENTRUST_* environment variables.

License

Apache-2.0. Framework adapters and enterprise features require a paid subscription.