Skip to main content

OpenAI Agents SDK tools for Signatrust — cryptographically signed, tamper-evident AI Decision Receipts.

Project description

openai-agents-signatrust

OpenAI Agents SDK tools for Signatrust — cryptographically signed, tamper-evident AI Decision Receipts.

PyPI License: MIT

Give any OpenAI Agents SDK agent the ability to seal its high-stakes decisions into independently verifiable evidence — without exposing prompts, model outputs, or sensitive business data. Only SHA-256 hashes are stored by default.


Why?

When an AI agent makes a regulated or high-stakes decision (loan approval, refund, content moderation, transaction flagging), how do you prove, after the fact, that the decision was made correctly, under the right policies, and with appropriate human oversight?

Signatrust generates a tamper-evident AI Decision Receipt for each decision, capturing which AI system was involved, the action taken, whether a human reviewed it, the policies/permissions in effect, and a cryptographic (Ed25519) signature. Each receipt has a public verify_url that regulators, auditors, or counterparties can check — without accessing your systems or data.


Installation

pip install openai-agents-signatrust

Authentication

export SIGNATRUST_API_KEY="sk_live_..."
# Optional, for self-hosted Enterprise:
export SIGNATRUST_BASE_URL="https://signatrust.your-company.com/api/v1"

Quick start

from agents import Agent, Runner
from openai_agents_signatrust import get_signatrust_tools

agent = Agent(
    name="ComplianceAgent",
    instructions=(
        "You approve refunds. After every decision you MUST call "
        "signatrust_generate_receipt to produce a signed, verifiable receipt, "
        "then report the verify_url."
    ),
    tools=get_signatrust_tools(),   # reads SIGNATRUST_API_KEY from env
)

result = Runner.run_sync(
    agent,
    "Approve the refund for order #991 (within the 30-day policy) and seal a Signatrust receipt.",
)
print(result.final_output)

You can also import the decorated tools individually:

from openai_agents_signatrust import (
    signatrust_generate_receipt,
    signatrust_verify_receipt,
    signatrust_get_receipt,
    configure,
)

configure(api_key="sk_live_...")   # or rely on SIGNATRUST_API_KEY
agent = Agent(name="...", tools=[signatrust_generate_receipt])

Tools provided

Tool Purpose
signatrust_generate_receipt Seal an AI decision into a signed receipt
signatrust_verify_receipt Verify a receipt's signature/integrity
signatrust_get_receipt Fetch a receipt's full details by ID

These are standard OpenAI Agents SDK FunctionTool objects produced by the @function_tool decorator — the JSON schema is generated automatically from each function's signature and Google-style docstring.


Privacy-first by design

By default, only the SHA-256 hash of the decision and input_prompt is stored — never the raw text. Pass include_decision_in_metadata=True only if you explicitly want to retain the raw decision.


Development

pip install -e ".[test]"
pytest

Links

© 2026 Signatrust — MIT License

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

openai_agents_signatrust-0.1.0.tar.gz (8.2 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

openai_agents_signatrust-0.1.0-py3-none-any.whl (8.7 kB view details)

Uploaded Python 3

File details

Details for the file openai_agents_signatrust-0.1.0.tar.gz.

File metadata

File hashes

Hashes for openai_agents_signatrust-0.1.0.tar.gz
Algorithm Hash digest
SHA256 f65f2e3b8f0d6d1ad632ad1f62bae055124517ff5ad0b207d8b7c3120da3fb91
MD5 4840d41bd0ad587f88b9a9d107a709d3
BLAKE2b-256 7da446600d9bfcc59b4f70af87144cc11e1dfd7d3898d730de9531c5583fd629

See more details on using hashes here.

File details

Details for the file openai_agents_signatrust-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for openai_agents_signatrust-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 969787ffbed593e0768a5123f2911a2dc14f10897dfd3b752d22e0b93f2db73b
MD5 35540f437be69db0ee1400b670eb06ba
BLAKE2b-256 3fdebc06467cd50bf9eb3bac0fe11589413b8fdfff4e184de35dd1252ee3c217

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page