Skip to content

cayu.runtime.checks

Public Cayu API. Definitions are grouped by their public source module, and definitions from private implementation modules appear on their package’s page; adding a symbol does not move existing links. The import shown at each entry is a supported public namespace. Read the Python API overview and install the required extra.

from cayu.runtime import AVAILABLE_CHECK_TAGS
AVAILABLE_CHECK_TAGS = frozenset({'authoring', 'configuration', 'deploy', 'providers', 'security'})

Release source · Runtime guarantees · Capability guides

from cayu.runtime import BUILTIN_DIAGNOSTIC_CODES
BUILTIN_DIAGNOSTIC_CODES = ('AGENT_GENERATED_TRACER_BULLET_UNFINISHED', 'AGENT_PROVIDER_AMBIGUOUS', 'AGENT_PROVIDER_NOT_FOUND', 'AGENT_WORKFLOW_COMMAND_POLICY_NOT_REGISTERED', 'AGENT_WORKFLOW_RUNNER_NOT_REGISTERED', 'AGENT_WORKFLOW_TOOL_NOT_REGISTERED', 'AGENT_WORKFLOW_WORKSPACE_NOT_REGISTERED', 'APP_NO_AGENTS', 'EVALS_PROJECT_IDENTITY_NOT_CONFIGURED', 'EVALS_PROJECT_STORE_NOT_CONFIGURED', 'EVALS_SERVICE_FACTORY_CONTEXT_MIGRATION_REQUIRED', 'EXTERNAL_TOOL_COVERAGE_UNKNOWN', 'EXTERNAL_TOOL_UNGUARDED', 'PUBLIC_SERVICE_DEVELOPMENT_MODE', 'PUBLIC_SERVICE_IDENTITY_STORE_NOT_DURABLE', 'PUBLIC_SERVICE_OPERATOR_ACCESS_UNSAFE', 'PUBLIC_SERVICE_PRODUCT_ACCESS_UNSAFE', 'PUBLIC_SERVICE_SESSION_STORE_NOT_DURABLE', 'PUBLIC_SERVICE_TASK_STORE_NOT_DURABLE', 'PUBLIC_SERVICE_TASK_STORE_REQUIRED', 'TOOL_INPUT_SCHEMA_UNCONSTRAINED', 'TOOL_INPUT_SCHEMA_RUNTIME_UNSUPPORTED', 'TOOL_APPROVAL_VALIDITY_RULE')

Release source · Runtime guarantees · Capability guides

from cayu import check_manifest

Run deterministic, side-effect-free checks over an application manifest.

check_manifest(manifest: AppManifest, *, service_manifest: PublicServiceManifest | None=None, project_control_plane: ProjectControlPlaneCheckEvidence | None=None, tags: frozenset[str] | None=None, deploy_only: bool=False) -> ProjectCheckReport

Release source · Runtime guarantees · Capability guides

from cayu.runtime import CHECK_REPORT_SCHEMA_VERSION
CHECK_REPORT_SCHEMA_VERSION = '2'

Release source · Runtime guarantees · Capability guides

from cayu import DiagnosticSeverity

Bases: StrEnum.

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name Type Default
INFO class attribute 'info'
WARNING class attribute 'warning'
ERROR class attribute 'error'

Release source · Runtime guarantees · Capability guides

from cayu import ProjectCheckReport

Bases: BaseModel.

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name Type Default
schema_version Literal['2'] CHECK_REPORT_SCHEMA_VERSION
manifest_fingerprint str required
diagnostics tuple[ProjectDiagnostic, ...] required
service_evidence ServiceCheckEvidence required

Release source · Runtime guarantees · Capability guides

from cayu import ProjectDiagnostic

Bases: BaseModel.

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name Type Default
code str required
severity DiagnosticSeverity required
subject str required
path str required
message str required
hint str | None None
tags tuple[str, ...] ()
parameters FrozenJsonObject Field(default_factory=lambda: MappingProxyType({}))
documentation_anchor str | None None
verification_command str required

Release source · Runtime guarantees · Capability guides

from cayu import ServiceCheckEvidence

Bounded claims for the maintained public-service deployment path.

Bases: BaseModel.

Defaults below are source expressions; Field(...) includes schema/validation settings and default_factory creates a fresh value. Inherited declarations are included. Constructor behavior follows the model or dataclass shown in the bases/decorators.

Name Type Default
control_plane_access Literal['not_evaluated', 'verified_authenticated', 'verified_unsafe'] required
service_contract Literal['not_declared', 'verified_maintained'] required
application_security Literal['not_evaluated', 'generated_suite_required'] required
configuration Literal['not_applicable', 'supported', 'unsupported'] required
host_owned_behavior Literal['unverified_outside_contract'] required
security_verification_command Literal['pytest -q tests/test_public_service_security.py'] required

Release source · Runtime guarantees · Capability guides