For developers

Wire ArtzAIn into your agent stack.

ArtzAIn is the model-agnostic agent control plane. CogNEXUS Labs builds it. artzain is the Python client you install to talk to it; @cognexuslabs/artzain is the TypeScript client on npm.

Install the SDK and get governed decisions in your loop today. Connect it to a control plane in your VPC when you go to production — same API, your policies, your perimeter.

SDK free to install Same API in your VPC Fail-closed · inline Signed decision records
~/agent-stack
$pip install artzain
# signup + starter integration
$artzain quickstart
# existing account
$artzain login
# TypeScript client (Node ≥ 18)
$npm i @cognexuslabs/artzain

Quickstart

A first call, and the record it returns.

# screen a proposed action before it runs from artzain import screen_action record = screen_action({ "action": "refund.approve", "order": "MS-4821", "amount_usd": 4200, "actor": "agent:refund-orchestrator", }) print(record.verdict, record.latency_ms, record.signature)
Signed decision record
{ "verdict": "allow", "policy_bundle": "financial-controls@v2", "latency_ms": 142, "signature": "ed25519:9c4f…b1a2", "chain_position": 18421 }

Interactive architecture

Watch a request flow through the stack.

Enterprise agent architecture on AWS, with ArtzAIn as the two decision chokepoints. Trace a sample — from a human or another system — layer by layer to allow, deny, or review. A kill-switch event (trip_global()AgentKilledError) is a distinct object, not a fourth verdict. Every outcome produces a cryptographically signed decision record.

Developer reference

Everything you need to integrate the engine.

The reference below is the current source of truth, versioned with the package. Changelog and versioning policy ship with the PyPI release notes.

Key capabilities

  • Prompt DefenderBuild-time + runtime prompt-injection screening (OWASP Agentic AI Top 10 #1), graded A–F. Every denied event becomes a signed decision record.
  • Client Policy EnforcementActions cleared against configurable enterprise rules before they run. Prebuilt RuleSet.FINANCIAL and RuleSet.LEGAL for regulated tenants.
  • Destructive-Action GuardScreens proposed SQL, shell, git and cloud actions by severity (low → critical) before execution.
  • Agent Kill SwitchPanic-threshold auto-stop. A CRITICAL severity auto-trips the agent (trip_globalAgentKilledError). A kill-switch event, not a verdict.
  • Signed Decision RecordsEach action cryptographically signed and written to an append-only ledger, verifiable end-to-end with verify_chain().

Delegation of Authority is the governance framing these controls implement — the agent's row on your DOA matrix, enforced via Client Policy Enforcement and Destructive-Action Guard severity thresholds. It is not a separate shipping feature.

Performance

184msmedian, end-to-end
3,000+decisions / hr
7-yrreconstructable trail
#1OWASP LLM Top-10

AWS deployment · two insertion points

ArtzAIn inserts at two points in an AWS agent stack — without re-architecting it.

# 1 · before the model is called if artzain.should_block(artzain.screen_user_input(req)): raise Denied # Bedrock / external LLM never invoked # 2 · before any action or data write verdict = artzain.screen_action(proposed_action) artzain.raise_if_killed() # CRITICAL → AgentKilledError

Links

Dashboard surfaces

Event Logs · Prompt-Defense grades · kill-switch alerts · the Token-to-Outcome leaderboard (post_generation_outcome()).

CogNEXUS Labs — Developer Reference

Links, installation, capabilities, and SDK surface. Markdown, committed to this repo.

Download reference

From SDK to control plane

Same API. Your policies. Your perimeter.

The SDK is how you start. pip install artzain gives you governed decisions in your loop today — input screening, output guard, kill switch, and a signed ledger you can verify offline with verify_chain(). No VPC, no procurement cycle. Python first; npm i @cognexuslabs/artzain adds a remote-only TypeScript client for Node ≥ 18.

The control plane is how you go to production. ArtzAIn deploys in your VPC. Policy bundles are co-authored with your compliance team, versioned and signed. The agent registry and specialist crew (security-sentinel, legal-watch, compliance-warden, and the rest) vote inline. Every decision is still the same API the SDK already taught you — allow, deny, review — plus a kill-switch event when trip_global() fires.

The artzain SDK is free to install and run locally. The ArtzAIn control plane is an enterprise deployment. Support: hello@cognexuslabs.ai, or book time with an engineer in a pilot.

Supply chain: PyPI releases publish via a Trusted Publisher (OIDC — no long-lived secrets); npm releases carry a provenance attestation bound to the public repo. The guards derive from Microsoft's MIT-licensed agent-governance-toolkit, with attribution.

Request a pilot