maigp-bedrock-agentcore

AIGP governance for the AWS Bedrock AgentCore Runtime.

Part of MAIGP — the Mediated AI Governance Protocol: a runtime consent / scope / evidence layer for AI systems. Every governed call is CHECKed before it runs (policy, scope, jurisdiction, circuit-breaker) and RECORDed + TRACEd as tamper-evident evidence after.

What it governs

Governs agents running on BedrockAgentCoreApp — model, tools, and helper resolution.

Governance model

This adapter maps the framework's lifecycle onto the AIGP agent-governance loop provided by maigp-agent-core:

Install

pip install maigp-bedrock-agentcore

Pulls in maigp-agent-core (shared lifecycle) and, transitively, maigp-client.

Quick start

from aigp_agentcore import AgentCoreGovernance, governance_middleware

gov = AgentCoreGovernance(gov_url="https://gov.example.com",
                          app_id="my-bedrock-agent", hmac_secret="secret")

# Register as AgentCore middleware: pre-invoke policy check, helper
# resolution (endpoints + tokens), post-invoke evidence, enforcement.
app.add_middleware(governance_middleware(gov))

AIAP agency gate (opt-in, 1.2.0)

Off by default: with no gate, nothing changes. Pass an AgencyGate from maigp-agent-core and the governed entrypoint needs an AIAP agency grant (RFC-001) once the CHECK lets the run proceed:

from aigp_agentcore import AgencyGate, AgentCoreGovernance

gate = AgencyGate(broker_url, agent_id, token_provider,          # the agent's own token, from a callable
                  scopes={"my-agent-id": {"resources": ["bedrock:InvokeModel"]}})
gov = AgentCoreGovernance(gov_url=..., app_id=..., agent_id="my-agent-id", agency=gate)

@app.entrypoint
@gov.governed
def invoke_agent(payload, context=None):
    bedrock = gov.agency_session().client("bedrock-runtime")    # the grant's credentials, not ambient ones
    ...

• The scope key is the CHECK's use case (agent_id, else app_id); the CHECK's request_id is sent as the AIGP trace id. The grant is kept and reused until shortly before it expires.
• Fail closed in every mode, TRACE included: a refusal, an unreachable broker, an empty token, a failing token provider or a missing aiap-client raises AgencyRequiredError (a GovernanceBlockedError) and the entrypoint does not run. A CHECK that blocks never asks the broker.
• Also: require_agency() / arequire_agency(), agency_grant, release_agency().
• Install: pip install 'maigp-bedrock-agentcore[agency]' ([agency-aws] adds boto3).

Package naming

The distribution is maigp-bedrock-agentcore (the import module remains aigp_agentcore). It was renamed from maigp-agentcore because PyPI rejected that name as too similar to the core library maigp-agent-core.

Helper resolution

HelperResolver fetches downstream endpoints + tokens from the vault (VLT_PRJ) and records traces/evidence to the governance app (GOV_APP).

Links

• Protocol, specs & full adapter catalog: https://github.com/owner-spec/aigp-protocol
• Issues: https://github.com/owner-spec/aigp-protocol/issues

License: Proprietary. © Kanjani AI Research & Causum.