warrantai
Warrant is the decision ledger for AI agents. Every consequential action an agent takes is recorded with the mandate that allowed it, the evidence it used, what it cost, and how it turned out. Developers replay real recorded decisions against a changed prompt, model or policy before shipping. Risk, finance and audit teams get records they can sample and verify without trusting the vendor.
This is release 0.0.1. It ships the decision record schema v0 and a validator so the format can be reviewed and integrated against before the SDK lands.
pip install warrantai
warrant --version
warrant schema
warrant validate examples/loan-approval.json
from warrant import validate, ValidationError
try:
validate(record)
except ValidationError as exc:
for message in exc.errors:
print(message)
What arrives next
decide()context manager that opens a record, captures model and tool calls as evidence, and closes it on success or failure, off the hot pathcheck()policy evaluation against a cached bundle before the action, with allow, deny or escalate- local append-only store with hash chaining and an offline verifier
warrant test: replay a set of real decisions against a changed target and fail the build on flipped decisionswarrant import: reconstruct decision records from existing OpenTelemetry trace exports and run policy over them retrospectively
Roadmap and schema specification: https://warrantai.dev
Note on the import name
The package installs as warrantai and imports as warrant. An unrelated, unmaintained package named warrant (an AWS Cognito helper, last released in 2017) also uses the warrant module name. Installing both in one environment will shadow one of them. Uninstall that package if from warrant import validate fails.
Licence
Apache 2.0.
Release files for warrantai 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| warrantai-0.0.1.tar.gz | 10.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| warrantai-0.0.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size:20.8 kB
Release files / warrantai-0.0.1.tar.gz
| Download URL | warrantai-0.0.1.tar.gz |
|---|---|
| Size | 10.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ba1c3f19d8172daf79acf9eda1049b1eac302de6b31231f4c44106e7e3d6fd67
|
|
BLAKE2b-256 checksum How to use checksums |
f1c9b595682706221846a369d4b4f649cfabc1846030ebc94eba971f5d917ae9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 16, 2026.
Transparency logRelease files / warrantai-0.0.1-py3-none-any.whl
| Download URL | warrantai-0.0.1-py3-none-any.whl |
|---|---|
| Size | 10.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
fc6e5dacdce7e9967b5225491034fed6a431ca22c78ec6f987281203c62579fe
|
|
BLAKE2b-256 checksum How to use checksums |
1b6de9604c26643a5952687dcc2370475283dd4803d7dc216e993c8c409cf9af
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 16, 2026.
Transparency log