wytness-sdk 0.1.0

Python SDK for Wytness — audit logging for AI agents with cryptographic signing and chain integrity

Wytness Python SDK

Audit logging for AI agents. Every action your AI agent takes is cryptographically signed, hash-chained, and streamed to the Wytness platform for compliance and observability.

Installation

pip install wytness-sdk

Quick Start

from wytness import AuditClient, audit_tool

# Initialize the client
client = AuditClient(
    agent_id="my-agent",
    human_operator_id="user-123",
)

# Decorate any tool your agent calls
@audit_tool(client=client)
def send_email(to: str, subject: str, body: str):
    # Your tool implementation
    pass

# Every call is automatically logged, signed, and chained
send_email(to="[e-mail]", subject="Report", body="Weekly summary")

Features

• Cryptographic signing — every event is signed with Ed25519
• Hash chaining — tamper-evident chain of events per agent session
• Automatic redaction — secrets in parameters are automatically redacted
• Kafka or HTTP — stream events via Kafka or HTTP API
• File fallback — events are saved locally if the network is unavailable

HTTP Emitter (Recommended)

Send events directly to the Wytness API using your API key:

client = AuditClient(
    agent_id="my-agent",
    human_operator_id="user-123",
    http_endpoint="https://api.wytness.io",
    http_api_key="aa_live_...",
)

API

AuditClient(agent_id, **kwargs)

Parameter	Type	Default	Description
agent_id	str	required	Unique identifier for the agent
agent_version	str	"0.1.0"	Version of the agent
human_operator_id	str	"unknown"	ID of the human overseeing the agent
signing_key_path	str	"./keys/signing.key"	Path to Ed25519 private key (auto-generated if missing)
kafka_bootstrap_servers	str|None	None	Kafka bootstrap servers
kafka_topic	str	"wytness-events"	Kafka topic name
http_endpoint	str|None	None	HTTP API endpoint URL
http_api_key	str|None	None	API key for HTTP endpoint
fallback_log_path	str	"./audit_fallback.jsonl"	Local fallback file path

@audit_tool(client, task_id="default")

Decorator that wraps a function to automatically log audit events. Captures:

• Function name, parameters (with secret redaction), and return value hash
• Execution duration, success/failure status, and error codes
• Cryptographic signature and hash chain link

License

MIT