fluidattacks-agent

Reports what a running Python workload actually imports and runs, so that a dependency inventory can say which of its findings are reachable at runtime and which are not.

It is a library, not a service. It observes the interpreter it is installed in, writes what it saw, and does nothing else. It takes no dependencies: the standard library only, because it is installed into workloads we do not own.

Installing

pip install fluidattacks-agent

That is the whole setup. A .pth file at the root of the wheel starts the probe at interpreter start, before the workload's own program runs, so nothing has to be imported or called by hand.

Turning it off

FLUIDATTACKS_AGENT=off

Also 0, false, no, disabled or none. A workload that says no pays for reading the setting and for nothing above it. Saying nothing is taken for yes, because installing the package is the consent.

What it observes

• distributions whose modules were imported, and which modules
• functions that were executed, where the interpreter offers that
• how often, in windows, and when a symbol was first reached

Only what an installed distribution owns is attributed. The standard library and a workload's own first-party code produce no records.

Where reports go

By default, one file per report under /tmp/.watches-exec, for a collector to drain. Naming an endpoint sends them instead:

A file is preferred over a variable because a file can be mode 400, while an environment variable is readable by any process of the same user.

An endpoint named without enough beside it to reach is a misconfiguration, not a reason to fall back: the probe then holds nothing and counts every report it refused, so a half-configured deployment is loud rather than a directory filling up where nobody drains it.

What travels, and what does not

Reports are gzipped and signed with a key derived from the credential; the credential itself never travels, appears in no record, and is in no exception. The far end must prove who it is — certificate chain and hostname both — and no redirect is followed.

What a report contains is distribution names, versions, module and function names, and counts. No arguments, no return values, no file contents, no environment.

Licence

MPL-2.0