Skip to content

cayu.credentials

Public Cayu API. Definitions are grouped by their public source module, and definitions from private implementation modules appear on their package’s page; adding a symbol does not move existing links. The import shown at each entry is a supported public namespace. Read the Python API overview and install the required extra.

from cayu.egress import CredentialMode

How a workload credential is delivered to sandboxed workload code.

The mode is a security contract, not a convenience flag. It records whether the real secret can be read by the agent/app process, so operators and audit events can reason about the boundary without inspecting any secret value.

Bases: StrEnum.

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name Type Default
RAW_ENV class attribute 'raw_env'
TRUSTED_TOOL class attribute 'trusted_tool'
VIRTUAL_EGRESS class attribute 'virtual_egress'

Release source · Runtime guarantees · Capability guides