watchlight-engine
The in-process authorization engine behind Watchlight Developer Edition.
watchlight-engine lets a Python agent make a real authorization decision —
ALLOW / DENY — for a tool call, in-process, with zero infrastructure: no
database, no network, no sidecar. It ships as a prebuilt, self-contained
compiled wheel.
Most developers want the
watchlightpackage, the Developer Edition with an ergonomic decorator API. Thiswatchlight-enginepackage is the lower-level engine it embeds — install it directly only if you are building on the engine yourself.
Install
pip install watchlight-engine
Prebuilt wheels are provided for Linux (x86_64, aarch64), macOS (Apple Silicon and Intel), and Windows (x64), for CPython 3.9 and newer. No Rust toolchain is required.
Quickstart
import watchlight_engine
engine = watchlight_engine.PolicyEngine()
assert engine.ready()
# Load a policy, then authorize a request — a real decision, in-process.
engine.add_policy(policy_json)
decision = engine.authorize(request_json)
print(decision) # -> Allow / Deny with the governing reason
See the Watchlight documentation for policy and request shapes, and the Developer Edition guide for the full workflow.
What you get
- A real, in-process policy decision — the same authorization engine that powers the Watchlight platform, embedded so you can enforce governance without standing up any services.
- Fail-closed by design: ambiguity denies.
- A single prebuilt wheel per platform — install and go.
Developer Edition vs. Enterprise
The Developer Edition is for building and evaluating locally. The full Watchlight platform adds the governed control plane — centralized policy, tamper-evident lineage and audit, runtime enforcement across your fleet, drift and anomaly detection, secrets brokering, and the operator dashboard. See watchlight.ai to learn more.
License
Proprietary — licensed software, not open source. Copyright © Watchlight AI, LLC. All rights reserved.
The Developer Edition license lets you install and use watchlight-engine for
free for internal development, testing, and evaluation. Production, commercial,
or third-party-service use requires a commercial license — contact
legal@watchlight.ai. Redistribution, reverse-engineering, and sublicensing are
not permitted. See the bundled LICENSE for the full terms.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
Built Distributions
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file watchlight_engine-0.1.1-cp39-abi3-win_amd64.whl.
File metadata
- Download URL: watchlight_engine-0.1.1-cp39-abi3-win_amd64.whl
- Upload date:
- Size: 2.7 MB
- Tags: CPython 3.9+, Windows x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
28a2a8ce6d5a66c9bc69e76f1c7f955bd8afdccf7a6bf412dc088f7ab9bd114e
|
|
| MD5 |
32740bb074e9f64a1cec8f23e025a8a3
|
|
| BLAKE2b-256 |
a7323dec866ef6cbaf6c3d91770ef4d3f67442cc096cc124211f1c3326da16cb
|
Provenance
The following attestation bundles were made for watchlight_engine-0.1.1-cp39-abi3-win_amd64.whl:
Publisher:
publish-watchlight-engine.yml on watchlight-ai-beacon/watchlight-beacon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
watchlight_engine-0.1.1-cp39-abi3-win_amd64.whl -
Subject digest:
28a2a8ce6d5a66c9bc69e76f1c7f955bd8afdccf7a6bf412dc088f7ab9bd114e - Sigstore transparency entry: 2500119295
- Sigstore integration time:
-
Permalink:
watchlight-ai-beacon/watchlight-beacon@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/watchlight-ai-beacon
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-watchlight-engine.yml@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.
File metadata
- Download URL: watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
- Upload date:
- Size: 2.7 MB
- Tags: CPython 3.9+, manylinux: glibc 2.17+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e38a5b73bcfdbb369699bbe7bf18f907c1250ce031a5fe8e6ac9aa30ac787662
|
|
| MD5 |
73644d7680db16efe1dfdb8fd8ed5ed1
|
|
| BLAKE2b-256 |
00b33dc8b269933e81ace3e4f0a0e92aae43e1fd3e8fd589b7b461afaefba665
|
Provenance
The following attestation bundles were made for watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl:
Publisher:
publish-watchlight-engine.yml on watchlight-ai-beacon/watchlight-beacon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl -
Subject digest:
e38a5b73bcfdbb369699bbe7bf18f907c1250ce031a5fe8e6ac9aa30ac787662 - Sigstore transparency entry: 2500119282
- Sigstore integration time:
-
Permalink:
watchlight-ai-beacon/watchlight-beacon@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/watchlight-ai-beacon
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-watchlight-engine.yml@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.
File metadata
- Download URL: watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
- Upload date:
- Size: 2.5 MB
- Tags: CPython 3.9+, manylinux: glibc 2.17+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
587b7d4e67149bbb6b9f1e4ec666de4871743e946aefe387065e1d5415ff2124
|
|
| MD5 |
1eb00b7270800503bae07d8b2c28bf2b
|
|
| BLAKE2b-256 |
3d2d6a90bee9f8d797327c86fa312ba75766c98f6688548f84359b84b487ef43
|
Provenance
The following attestation bundles were made for watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl:
Publisher:
publish-watchlight-engine.yml on watchlight-ai-beacon/watchlight-beacon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
watchlight_engine-0.1.1-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl -
Subject digest:
587b7d4e67149bbb6b9f1e4ec666de4871743e946aefe387065e1d5415ff2124 - Sigstore transparency entry: 2500119290
- Sigstore integration time:
-
Permalink:
watchlight-ai-beacon/watchlight-beacon@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/watchlight-ai-beacon
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-watchlight-engine.yml@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file watchlight_engine-0.1.1-cp39-abi3-macosx_11_0_arm64.whl.
File metadata
- Download URL: watchlight_engine-0.1.1-cp39-abi3-macosx_11_0_arm64.whl
- Upload date:
- Size: 2.4 MB
- Tags: CPython 3.9+, macOS 11.0+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
41678d112e14e85060c4ee05cab50c5aa8d2921a78be9c2884715b10e0184141
|
|
| MD5 |
635b290a750913a8f3cf05e22364c817
|
|
| BLAKE2b-256 |
07bd545693e3ea40a223679e13866df95f4f6951ff1689dca85293236b43b9f7
|
Provenance
The following attestation bundles were made for watchlight_engine-0.1.1-cp39-abi3-macosx_11_0_arm64.whl:
Publisher:
publish-watchlight-engine.yml on watchlight-ai-beacon/watchlight-beacon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
watchlight_engine-0.1.1-cp39-abi3-macosx_11_0_arm64.whl -
Subject digest:
41678d112e14e85060c4ee05cab50c5aa8d2921a78be9c2884715b10e0184141 - Sigstore transparency entry: 2500119274
- Sigstore integration time:
-
Permalink:
watchlight-ai-beacon/watchlight-beacon@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/watchlight-ai-beacon
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-watchlight-engine.yml@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file watchlight_engine-0.1.1-cp39-abi3-macosx_10_12_x86_64.whl.
File metadata
- Download URL: watchlight_engine-0.1.1-cp39-abi3-macosx_10_12_x86_64.whl
- Upload date:
- Size: 2.6 MB
- Tags: CPython 3.9+, macOS 10.12+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
2f1f83f26c948705122ce5dc259bd4c5b5b5937e57fdf6af66debdf2e816ec8f
|
|
| MD5 |
64fb717e15f4714f9207ea7404462836
|
|
| BLAKE2b-256 |
f497941d781c439ce13ada2de725fb62b7290193b783791893fce735fe9d652b
|
Provenance
The following attestation bundles were made for watchlight_engine-0.1.1-cp39-abi3-macosx_10_12_x86_64.whl:
Publisher:
publish-watchlight-engine.yml on watchlight-ai-beacon/watchlight-beacon
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
watchlight_engine-0.1.1-cp39-abi3-macosx_10_12_x86_64.whl -
Subject digest:
2f1f83f26c948705122ce5dc259bd4c5b5b5937e57fdf6af66debdf2e816ec8f - Sigstore transparency entry: 2500119267
- Sigstore integration time:
-
Permalink:
watchlight-ai-beacon/watchlight-beacon@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/watchlight-ai-beacon
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-watchlight-engine.yml@0b225c6eb05ffe4b6c25e5160f4111935a8892f8 -
Trigger Event:
workflow_dispatch
-
Statement type: