novyx-openai-agents

Governance, audit, and rollback for the OpenAI Agents SDK. Drop-in RunHooks that wire every agent run into Novyx Core's tamper-evident audit chain, create rollback-capable checkpoints at safe boundaries, and sync memory into Novyx's cross-session semantic store.

from agents import Agent, Runner
from novyx_openai_agents import NovyxRunHooks

agent = Agent(name="my-agent", instructions="...", tools=[...])
hooks = NovyxRunHooks(api_key="...", agent_id="my-agent")

result = await Runner.run(agent, "user input", hooks=hooks)

# Every tool call + model turn is now in Novyx's SHA-256 audit chain.
# If the run went sideways, roll back to the latest checkpoint:
await hooks.rollback_to_latest()

Why

OpenAI's Agents SDK v0.14.0 (2026-04-15) added a powerful execution layer: SandboxAgent, workspace memory, snapshots + resume, hosted sandbox providers. What it did not add:

• Tamper-evident audit chains — you can trace a run, but you can't prove after the fact that nothing was edited
• Policy-gated action approvals — no pre-tool policy evaluation, no approval flow
• Transactional rollback — snapshots resume interrupted work; they don't rewind a mission's governed state
• Cross-session semantic memory — sandbox memory is workspace-scoped, great for resuming a task, less useful for "what did this agent learn six months ago across five different workspaces"

This package fills those gaps without replacing any of OpenAI's primitives. You keep using Agent, Runner, SandboxAgent, whatever — NovyxRunHooks is additive.

Status: alpha (v0.1.0)

Phase 0 scaffold shipped 2026-04-15, the same day as OpenAI's v0.14.0 release. What's wired up and what isn't:

Install

pip install novyx-openai-agents
# or directly from source during development:
pip install -e packages/novyx-openai-agents

Requires openai-agents>=0.14.0 and novyx>=3.4.0.

Relationship to OpenAI v0.14.0 features

This package complements OpenAI's new primitives; it doesn't duplicate them.

How it works

NovyxRunHooks implements OpenAI's agents.lifecycle.RunHooks interface. On each event (on_agent_start, on_tool_start, on_tool_end, on_handoff, on_llm_start, on_llm_end, on_agent_end), it forwards to three focused bridges:

• NovyxAuditBridge — opens a Novyx trace on agent start, appends typed steps per event, closes the trace on end. Every step enters the SHA-256 hash chain.
• NovyxMemoryBridge — writes the agent's final output (plus any notable tool results in Phase 1) as Novyx memory entries tagged with agent:{id} and session:{id}.
• NovyxCheckpointBridge — creates Novyx Runtime v2 checkpoints at safe boundaries (handoffs, agent end). Exposes rollback_latest(mission_id=…).

All three bridges are best-effort: if Novyx is unreachable, lifecycle events log a warning and the agent run continues. Auditing should never be a reason for an agent to fail in production.

Example

See examples/basic.py for a minimal working demo.

License

MIT. See LICENSE (copied from the monorepo root).

Links

• Novyx Core
• OpenAI Agents SDK
• Issues and PRs: novyxlabs/novyx-core