HELM SDK - Python

Typed Python client for the retained HELM kernel API.

Local Install

cd sdk/python
python -m pip install .

Package metadata declares version 0.7.5 in pyproject.toml; this README does not claim that a registry package has been published.

Local Development

pip install '.[dev]'
pytest -v --tb=short

Generated Sources

helm_sdk/types_gen.py is generated from api/openapi/helm.openapi.yaml. Generated protobuf modules live under helm_sdk/generated/ when codegen has been run.

Usage

from helm_sdk import HelmClient

client = HelmClient(base_url="http://127.0.0.1:7714")
decision = client.evaluate_decision({
    "principal": "example-agent",
    "action": "read-ticket",
    "resource": "ticket:123",
})
print(decision["verdict"])  # ALLOW, DENY, or ESCALATE

Run the first-class local example with make sdk-examples-smoke or directly from examples/python_sdk/.

Execution Boundary Methods

The client includes helpers for the May 2026 execution-boundary surfaces: evidence envelope manifests, boundary records and checkpoints, conformance vectors, MCP quarantine and authorization profiles, sandbox profiles and grants, authz snapshots, approvals, budgets, telemetry export, and coexistence capabilities.

External evidence envelopes remain compatibility wrappers; HELM-native EvidencePack roots stay authoritative.

Release Notes

0.7.5 is a security patch: fail-closed production receipt signing and a golang.org/x/text update for GO-2026-5970. The kernel's Boundary Enforcement Profile is retained, along with the OpenAPI client surface and local test coverage.