Agent 开发框架

tealtiger|AI Agent 安全治理与成本追踪 SDK

tealtiger

TealTiger 是面向 LLM 应用的 TypeScript/Python 治理 SDK,提供确定性策略、护栏、成本预算与审计证据能力。

获取与使用

需要部署

按官方资料自行安装或部署

使用难度待核验
国内可用性待核验

2026-11-09 更新 · 本站尚未实测

项目介绍

Agent 开发框架 · 2026-11-09 更新 · 本站尚未实测

TealTiger 自称是「AI Agent Security & Governance SDK」,为 LLM 应用提供确定性治理、护栏、成本追踪与策略管理,采用 TypeScript 与 Python 两种实现,README 表示可与任意模型提供商配合使用。其核心理念是“治理路径中不引入 LLM”:相同输入加相同策略应得到相同裁决,并输出可追溯的结构化证据。

需要特别说明:本仓库被 README 称为“hub repo”(枢纽仓库),SDK 源码位于独立的 tealtiger-typescript-prod 与 tealtiger-python-prod 仓库,或使用 --recurse-submodules 克隆本仓库。因此本页整理的是该项目的对外勾勒,具体功能实现请以官方仓库与文档为准。

核心能力

点击能力名称查看输入、输出和原文依据。

README 列出的能力包括:

  • 安全护栏:PII 检测与脱敏、提示注入防护、内容审核、密钥检测(声称 500+ 模式、9 类)、自定义规则。
  • 成本治理:按请求/会话/日的预算硬限制、跨提供商成本追踪、阈值告警、熔断器防止成本失控。
  • 零配置插桩:observe() 一行包装现有客户端,加入成本追踪、审计日志、PII 检测(REPORT_ONLY)、行为基线与 freeze() 紧急熔断。
  • 治理架构:确定性策略评估、结构化证据(SARIF/JUnit XML/JSON)、Merkle 树与 RFC 3161 时间戳、非人类身份(NHI)、FREEZE 规则、关联 ID、OWASP Agentic Top 10 策略包。
  • 治理面板:本地可运行的 Dashboard,展示请求、成本、拒绝数、防御流水线、漂移告警、模型路由等面板。
  • 框架适配:README 称提供 13 个 Agent 框架适配(LangChain、Vercel AI SDK、PydanticAI、Haystack、CAMEL-AI 等,另列 LangGraph、AG2、LlamaIndex、Mastra、OpenAI Agents、Google ADK、Semantic Kernel、OpenHands、CopilotKit)。

README 还记录 MCP 定义漂移监控(TealRegistry)等模块,但本页未获得 MCP 服务端配置文件,具体接入方式待核验。

实际应用场景

适用场景

适合在自研 LLM 应用中统一加入成本预算、PII/注入防护、审计留痕与策略裁决的团队;也适合需要在多个模型提供商、多个 Agent 框架之间复用同一套治理规则的工程场景。若只需要简单内容过滤,可能无需引入完整治理体系。

安装与接入

README 给出的安装方式为:

npm install tealtiger

或:

pip install tealtiger

README 的 Quickstart 示例还给出:

pip install tealtiger
python examples/quickstart_governance.py

接入方式为包装现有客户端,例如使用 TealOpenAI 并传入 apiKey、guardrails 与 budget 配置;或使用 observe(new OpenAI()) 进行零配置插桩。治理面板需在 dashboard/api 与 dashboard/web 分别执行 npm run dev(README 称 API 在 :3100、UI 在 :3000)。策略文件可通过 npx ts-node scripts/validate-policy.ts ./my-policy.json 或 npm run validate:policy -- ./my-policy.json 校验。

Hugging Face TGI 示例需要设置 HF_API_TOKEN、HF_TGI_ENDPOINT、HF_TGI_MODEL 环境变量,README 提醒切勿提交真实 token。框架适配包各自独立安装,例如 pip install langchain-tealtiger、npm install tealtiger-ai-sdk。

使用条件与限制

是否需要部署
需自行准备运行环境,具体要求见正文
是否需要注册
账号和认证要求见正文;未明确说明的项目仍待核验
是否需要 API Key
待核验
费用与额度
费用边界见正文,项目许可不代表模型或托管服务免费
所需权限
待核验
许可证与服务条款
待核验

权限费用与限制

  • 使用前需准备所接入模型提供商的 API Key(如 OpenAI),治理 SDK 本身不替代模型服务。
  • 仓库代码采用 Apache 2.0 许可,但模型调用费用由各自提供商收取;README 列出的每百万 token 价格仅为参考,需以上游官方为准。
  • README 提到 v1.5.0 企业平台与 v2.0.0 SaaS 规划(多租户、RBAC、SSO、SIEM 等),相关商业服务是否收费、如何收费待向官方核验。
  • 治理面板的本地运行依赖 Node 环境,Dashboard 端口与部署方式需按官方文档确认。
  • README 列出的支持模型包括 OpenAI GPT 系列、Anthropic Claude、Google Gemini、AWS Bedrock、Azure OpenAI、Cohere、Mistral 以及 Hugging Face TGI 示例模型;中国大陆可用模型或国内云服务兼容性资料未说明,待核验。
  • README 中部分功能覆盖标记为 🟡/🛠️/❌(如 Cohere、Mistral 仅有价格文档列出),实际成本追踪覆盖程度需自行验证。

国内使用情况

网友核验 用户经验分享

与站长实测独立,不代表官方认证或本站已实测。

我要核验
0 位参与者0 份有效分项记录

最近核验:暂无有效核验。参与人数按当前项目有效身份去重;不同核验项分别统计,不合并成用户总结果。仅统计审核通过且未过期的记录。

分项统计、有效期与样本量
核验项目有效人数成功 / 部分 / 失败 / 无法判断成功率最近核验 / 有效期
官方网站访问00 / 0 / 0 / 0样本不足暂无 / 7 天
GitHub 仓库访问00 / 0 / 0 / 0样本不足暂无 / 7 天
安装与运行00 / 0 / 0 / 0样本不足暂无 / 30 天
官方服务国内连接 / MCP 连接00 / 0 / 0 / 0样本不足暂无 / 30 天
国内网络情况00 / 0 / 0 / 0样本不足暂无 / 7 天
国内模型兼容性00 / 0 / 0 / 0样本不足暂无 / 30 天
自定义 API00 / 0 / 0 / 0样本不足暂无 / 30 天
海外服务依赖
00 / 0 / 0 / 0样本不足暂无 / 30 天
海外账号要求
00 / 0 / 0 / 0样本不足暂无 / 30 天
中文界面
00 / 0 / 0 / 0样本不足暂无 / 30 天
客户端兼容性00 / 0 / 0 / 0样本不足暂无 / 30 天
账号及费用信息
00 / 0 / 0 / 0样本不足暂无 / 30 天

成功率 = 成功 ÷(成功 + 部分成功 + 失败);无法判断不计入分母。至少 5 份可判断结果才显示成功率。账号、费用、海外依赖与语言等事实项,成功表示核查结论与资料吻合,具体观察另行统计;不表示免费或没有海外依赖。不同网络、客户端和版本的结果不能直接等同。

最近有效核验

暂无审核通过且未过期的网友核验。欢迎提交真实使用记录。

查看全部有效核验 →

国内实测状态:国内可用性待核验。协议兼容和官方资料说明不等于国内网络可用。

官方网站访问
尚未实测 待核验
GitHub 仓库访问
尚未实测 待核验
官方服务国内连接
尚未实测 待核验
国内网络情况
尚未实测 待核验
国内模型兼容性
尚未实测 待核验
自定义 API
尚未实测 待核验
海外服务依赖
尚未实测 待核验
海外账号要求
尚未实测 待核验
中文界面
尚未实测 待核验
国内最后核验时间
尚未实测

许可与国内使用

仓库许可证文件为 Apache License 2.0,README 也明确称 TealTiger 采用 Apache 2.0。该许可适用于仓库代码本身;商业模块、托管服务与第三方模型各有独立条款,需分别核验。README 未说明服务部署地域、数据跨境处理方式及中国大陆网络环境下的可用性,这些均属待核验项。

项目主页与文档站点域名见资料,但域名不代表服务部署地域。

项目资料与来源

官方网站 ↗

GitHub 仓库 ↗

官方文档 ↗

字段依据与待核验事项

access:来源确认 · Install: `npm install tealtiger` or `pip install tealtiger`, then wrap one existing OpenAI call:

project_type:来源确认 · TealTiger is an open-source SDK that provides **deterministic governance** for AI agents.

原始 README(折叠技术参考)
# TealTiger

🌐 [Español](docs/translations/README.es.md)

<div align="center">

<img src=".github/logo/tealtiger-logo-256.png" alt="TealTiger Logo" width="200">

**AI Agent Security & Governance SDK**

Deterministic governance, guardrails, cost tracking, and policy management for LLM applications.
Open source. TypeScript + Python. Works with any provider.

[![npm version](https://badge.fury.io/js/tealtiger.svg)](https://www.npmjs.com/package/tealtiger)
[![PyPI version](https://badge.fury.io/py/tealtiger.svg)](https://pypi.org/project/tealtiger/)
[![License: Apache 2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
[![Discord](https://img.shields.io/badge/Discord-Join%20Community-7289da?logo=discord&logoColor=white)](https://discord.gg/X2ePf8QAj)
[![GitHub stars](https://img.shields.io/github/stars/agentguard-ai/tealtiger?style=social)](https://github.com/agentguard-ai/tealtiger)
[![Governed by TealTiger](./assets/badges/governed-by-tealtiger.svg)](https://github.com/agentguard-ai/tealtiger)
[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/agentguard-ai/tealtiger/badge)](https://securityscorecards.dev/viewer/?uri=github.com/agentguard-ai/tealtiger)

<br>

<a href="https://www.nvidia.com/en-us/startups/">
  <img src=".github/logo/nvidia-inception-badge.svg" alt="NVIDIA Inception Program" width="250">
</a>

<br>

[Website](https://tealtiger.co.in) · [Documentation](#documentation) · [Examples](#examples) · [Discord](https://discord.gg/X2ePf8QAj) · [Contributing](#-build-with-us)

</div>

---

## ⚡ 60-second quickstart

Install: `npm install tealtiger` or `pip install tealtiger`, then wrap one existing OpenAI call:

```typescript
import { TealOpenAI } from 'tealtiger';
const client = new TealOpenAI({ apiKey: process.env.OPENAI_API_KEY, guardrails: { promptInjection: true } });
const res = await client.chat.completions.create({ model: 'gpt-4o-mini', messages: [{ role: 'user', content: 'Hello!' }] });
console.log(res.security?.decision ?? 'ALLOW');
```

```python
import os
from tealtiger import TealOpenAI
client = TealOpenAI(api_key=os.environ["OPENAI_API_KEY"], guardrails={"prompt_injection": True})
print(client.chat.completions.create(model="gpt-4o-mini", messages=[{"role": "user", "content": "Hello!"}]).security.decision)
```

```text
ALLOW
Governance receipt emitted; cost and guardrails tracked.
```

Next: [full Quick Start](#-quick-start) and [examples](./examples).

---

## Quickstart

**Getting started in 5 minutes** — from `pip install` to a governed agent with PII blocking, tool allowlists, and JSON decision output. No API key required.

```bash
pip install tealtiger
python examples/quickstart_governance.py
```

The tutorial covers:

1. **Observe mode** — wrap an OpenAI client in one line (`observe(client)`)
2. **PII policy** — block SSNs in tool arguments
3. **Tool allowlist** — only allow `search` and `read_*`
4. **Decision output** — structured JSON for every governance verdict
5. **MONITOR vs ENFORCE** — log violations without blocking, then flip to block

See the full walkthrough in [`docs/quickstart.md`](./docs/quickstart.md).

---

## 🔭 observe() — Zero-Config Instrumentation (v1.4)

One line adds cost tracking, audit logging, PII detection, and behavioral baselines to any LLM client. No config files, no policy definitions.

```typescript
import { observe, freeze } from 'tealtiger';
const client = observe(new OpenAI());  // done — all calls are now instrumented
console.log(client.getCost());         // { totalCost: 0.0023, requestCount: 1, ... }
```

```python
from tealtiger.observe import observe, freeze
client = observe(OpenAI())             # done — all calls are now instrumented
print(client.get_cost())               # ObserveCostSummary(total_cost=0.0023, ...)
```

**What you get automatically:** per-request cost tracking across 7 providers, structured audit log with correlation IDs, behavioral baseline (P50/P95/P99), PII detection in REPORT_ONLY mode, and an instant kill switch via `freeze()`. Under 5ms overhead per call.

See [examples/observe-quickstart.ts](./examples/observe-quickstart.ts) and [examples/observe_quickstart.py](./examples/observe_quickstart.py).

---

---

## 📊 Governance Dashboard (v1.4)

Real-time visibility into your AI agent fleet — security posture, cost governance, and behavioral alerts in one view.

<div align="center">
  <img src="assets/screenshots/dashboard-overview.png" alt="TealTiger Governance Dashboard" width="900">
</div>



**What you see at a glance:**
- **KPI Row** — Total requests, cost, governance denials, budget consumption with color-coded indicators
- **Cost Velocity & Budget Forecast** — Burn rate trends and exhaustion projection
- **Defense Pipeline** — 3-stage security evaluation flow with short-circuit rates and latency per stage
- **Canary Alerts** — Behavioral drift detection with agent freeze status and deviation percentages
- **Agent Matrix** — Fleet status table (active/idle/frozen) with per-agent request metrics
- **Cost Savings** — Optimization recommendations ranked by impact
- **Model Routing** — Source-to-target routing with per-request savings
- **Protocol Governance** — ENFORCE/MONITOR/REPORT_ONLY policy cards with denial counts

Every panel is independently data-fetched with fault isolation — one widget failure never cascades to others.

Run locally: `cd dashboard/api && npm run dev` then `cd dashboard/web && npm run dev` (API on :3100, UI on :3000)

### Progressive Disclosure Path

| Level | Entry Point | What You Get |
|-------|-------------|--------------|
| 0 | `observe(client)` | Cost tracking, audit trail, PII detection, behavioral baseline, kill switch |
| 1 | + guardrails config | Prompt injection, content moderation, secret detection |
| 2 | + TealEngine policies | ENFORCE/MONITOR/REPORT_ONLY per rule, deterministic decisions |
| 3 | + TealFlow workflows | Org-level governance inheritance, declarative YAML |



## What is TealTiger?

TealTiger is an open-source SDK that provides **deterministic governance** for AI agents. It enforces security policies, tracks costs, and produces structured evidence — all at runtime, with no infrastructure required.

> **Looking for the source code?** This is the hub repo. The SDK source lives in the language-specific repos:
> - **TypeScript SDK**: [tealtiger-typescript-prod](https://github.com/agentguard-ai/tealtiger-typescript-prod)
> - **Python SDK**: [tealtiger-python-prod](https://github.com/agentguard-ai/tealtiger-python-prod)
>
> Or clone this repo with submodules: `git clone --recurse-submodules https://github.com/agentguard-ai/tealtiger.git`

Unlike probabilistic safety filters, TealTiger uses **deterministic policy evaluation**: same input + same policy = same decision, every time. Every governance verdict is reconstructable, traceable to the human who authored the policy, and exportable as structured evidence (SARIF, JUnit XML, JSON).

**Key principle:** Governance should be an engineering property embedded in the runtime — not a document reviewed after the fact.

---

## 🚀 Quick Start

### TypeScript

```bash
npm install tealtiger
```

```typescript
import { TealOpenAI } from 'tealtiger';

const client = new TealOpenAI({
  apiKey: process.env.OPENAI_API_KEY,
  guardrails: {
    piiDetection: true,
    promptInjection: true,
    contentModeration: true,
  },
  budget: {
    maxCostPerRequest: 0.50,
    maxCostPerDay: 10.00,
  },
});

const response = await client.chat.completions.create({
  model: 'gpt-4',
  messages: [{ role: 'user', content: 'Hello!' }],
});
// Guardrails enforced. Cost tracked. Evidence produced.
```

### Python

```bash
pip install tealtiger
```

```python
from tealtiger import TealOpenAI

client = TealOpenAI(
    api_key=os.getenv("OPENAI_API_KEY"),
    guardrails={
        "pii_detection": True,
        "prompt_injection": True,
        "content_moderation": True,
    },
    budget={
        "max_cost_per_request": 0.50,
        "max_cost_per_day": 10.00,
    },
)

response = client.chat.completions.create(
    model="gpt-4",
    messages=[{"role": "user", "content": "Hello!"}],
)
# Guardrails enforced. Cost tracked. Evidence produced.
```

---

## ✨ Features

### 🛡️ Security Guardrails
- **PII Detection** — Detect and redact sensitive information automatically
- **Prompt Injection Prevention** — Block malicious prompt injection attempts
- **Content Moderation** — Filter toxic, harmful, or inappropriate content
- **Secret Detection** — 500+ patterns across 9 categories with confidence scoring
- **Custom Rules** — Define your own security policies

### 💰 Cost Governance
- **Budget Enforcement** — Hard limits per request, session, and day
- **Cost Tracking** — Real-time monitoring across all providers
- **Cost Alerts** — Notifications at configurable thresholds
- **Circuit Breakers** — Prevent runaway cost loops automatically

### 🔌 7 LLM Providers
- **OpenAI** — GPT-4, GPT-4o, GPT-3.5
- **Anthropic** — Claude 3.5, Claude 3
- **Google Gemini** — Multimodal support
- **AWS Bedrock** — Claude, Titan, Jurassic, Command, Llama
- **Azure OpenAI** — Deployment-based routing (shares OpenAI pricing)
- **Cohere** — Chat, RAG, embeddings
- **Mistral AI** — European data residency

### 🔌 Platform Adapters
- **AWS Bedrock Agents** — Native guardrail adapter
- **AWS AgentCore** — Pre/post action governance plugin
- **Azure AI Agent Service** — Tool-call pipeline middleware

### 🏗️ Governance Architecture
- **Deterministic Policy Evaluation** — No LLM in the governance path
- **Structured Evidence** — Every decision produces a reconstructable record
- **Cryptographic Proof** — Merkle trees + RFC 3161 timestamping (TealProof)
- **Non-Human Identity (NHI)** — Agent lifecycle, scope enforcement, Zero Standing Privilege
- **FREEZE Rules** — Immutable emergency kill switches with tamper detection
- **Correlation IDs** — End-to-end traceability across the decision chain
- **Policy Traceability** — Every verdict traces to the human policy author
- **OWASP Agentic Top 10** — Zero-config policy pack covering all 10 ASI risks

---

## 🗺️ Governance Coverage

| Dimension | What it does | Module |
|-----------|-------------|--------|
| 🛡️ **Security** | Secret detection (500+ patterns), prompt injection, PII, content moderation, Unicode normalization, encoded output detection | `TealSecrets` `TealGuard` |
| 🔑 **Identity** | Non-Human Identity lifecycle, scope enforcement, Zero Standing Privilege, agent attestation | `TealEngine (NHI)` |
| ⚡ **Reliability** | Circuit breakers, retry budgets, fallback chains, deterministic degradation | `TealCircuit` `TealReliability` |
| 🧠 **Memory** | Write provenance, instruction injection detection, exfiltration prevention, scope enforcement | `TealMemory` |
| 💰 **Cost** | Governance-owned ceilings, anomaly detection, reasoning-token budgets, per-agent attribution | `TealMonitor` |
| 📋 **Evidence** | Cryptographic receipts (Merkle + RFC 3161), SARIF export, OTel spans, SIEM integration | `TealProof` `TealAudit` |
| ⚙️ **Policy** | FREEZE rules, PLAN_ONLY mode, hot-swap bundles, anti-tamper, automation levels | `TealEngine` |
| 🔄 **Workflow** | Declarative YAML governance workflows, org-level inheritance, floor enforcement | `TealFlow` |
| 📊 **Drift** | Behavioral drift detection, statistical baselines, model output regression | `TealDrift` |
| ⏱️ **Temporal** | Session TTL, cooldown periods, time-of-day restrictions | `TealTemporal` |
| 🔍 **Registry** | MCP definition-drift monitoring, tool description scanning, adapter composition allowlist | `TealRegistry` |
| 🧠 **Classification** | Local ONNX ML inference (≤20ms), ensemble modes, regex+ML combination | `TealClassifier` |

> **Design principle:** No LLM in the governance path. Same input + same policy = same decision, every time.

---

## 📦 SDKs

| Language | Source Code | Package | Install |
|----------|------------|---------|---------|
| TypeScript | [tealtiger-typescript-prod](https://github.com/agentguard-ai/tealtiger-typescript-prod) | [npm](https://www.npmjs.com/package/tealtiger) | `npm install tealtiger` |
| Python | [tealtiger-python-prod](https://github.com/agentguard-ai/tealtiger-python-prod) | [PyPI](https://pypi.org/project/tealtiger/) | `pip install tealtiger` |

### 🔌 Framework Adapters

TealTiger ships governance adapters for 13 agent frameworks. A selection:

| Framework | Package | Install |
|-----------|---------|---------|
| LangChain | [langchain-tealtiger](https://github.com/agentguard-ai/tealtiger/tree/main/packages/langchain-tealtiger) | `pip install langchain-tealtiger` |
| Vercel AI SDK | [tealtiger-ai-sdk](https://github.com/agentguard-ai/tealtiger/tree/main/packages/tealtiger-ai-sdk) | `npm install tealtiger-ai-sdk` |
| PydanticAI | [pydanticai-tealtiger](https://github.com/agentguard-ai/tealtiger/tree/main/packages/pydanticai-tealtiger) | `pip install pydanticai-tealtiger` |
| Haystack | [haystack-tealtiger](https://github.com/agentguard-ai/tealtiger/tree/main/packages/haystack-tealtiger) | `pip install haystack-tealtiger` |
| CAMEL-AI | [camelai-tealtiger](https://github.com/agentguard-ai/tealtiger/tree/main/packages/camelai-tealtiger) | `pip install camelai-tealtiger` |

Also available: LangGraph, AG2, LlamaIndex, Mastra, OpenAI Agents, Google ADK, Semantic Kernel, OpenHands, CopilotKit. See [`packages/`](https://github.com/agentguard-ai/tealtiger/tree/main/packages) for the full set.

---

## 📚 Documentation

- [Why your AI agent needs a budget — cost governance for LLM apps](./docs/blog/cost-governance-for-llm-apps.md)
- [OWASP Agentic Top 10 — practical defenses with TealTiger](./docs/blog/owasp-agentic-top-10-defenses.md)
- [Getting Started in 5 Minutes](./docs/quickstart.md)
- [Quick Start Guide](#-quick-start)
- [Security Guardrails](#️-security-guardrails)
- [Cost Governance](#-cost-governance)
- [Provider Setup](#-7-llm-providers)
- [FAQ](./docs/faq.md)
- [Why TealTiger?](./docs/why-tealtiger.md)
- [Cross-SDK Feature Parity Matrix](./docs/cross-sdk-feature-parity-matrix.md)
- [Governance Event Store Indexes](./docs/governance-event-store-indexes.md)
- [Error Code Reference](./docs/error-code-reference.md)
- [Troubleshooting](./docs/troubleshooting.md)
- [Contributing Guide](./CONTRIBUTING.md)
- [Security Policy](./SECURITY.md)
- [Code of Conduct](./CODE_OF_CONDUCT.md)
- [Roadmap](./ROADMAP.md)

### Badge

Use the TealTiger badge to show that a project is governed by deterministic
agent security and cost policies.

Light badge:

```md
[![Governed by TealTiger](https://raw.githubusercontent.com/agentguard-ai/tealtiger/main/assets/badges/governed-by-tealtiger.svg)](https://github.com/agentguard-ai/tealtiger)
```

Dark badge:

```md
[![Governed by TealTiger](https://raw.githubusercontent.com/agentguard-ai/tealtiger/main/assets/badges/governed-by-tealtiger-dark.svg)](https://github.com/agentguard-ai/tealtiger)
```
### Python Hugging Face TGI Quickstart

Use `examples/python/huggingface_tgi_quickstart.py` to try the guarded
Hugging Face Text Generation Inference provider from the Python SDK.

```bash
export HF_API_TOKEN="your-hugging-face-token"
export HF_TGI_ENDPOINT="https://your-endpoint.endpoints.huggingface.cloud"
export HF_TGI_MODEL="meta-llama/Meta-Llama-3.1-8B-Instruct"

python examples/python/huggingface_tgi_quickstart.py
```

The example enables guardrail and cost-tracking configuration, sends one sample
chat request, then prints the response, token usage, estimated cost, provider,
and correlation ID. Use placeholder values in docs and `.env.example` files;
never commit a real `HF_API_TOKEN`.

### TealEngine Policy Schema

Use [`schemas/tealtiger-policy.schema.json`](./schemas/tealtiger-policy.schema.json) for editor autocomplete and validation when authoring TealEngine policy JSON or YAML files. JSON policy files can include:

```json
{
  "$schema": "./schemas/tealtiger-policy.schema.json"
}
```

For YAML policies, configure your editor's YAML schema mapping to point policy files such as `tealtiger-policy.yml` at `./schemas/tealtiger-policy.schema.json`.

### Validate Policy Files

Use the policy validator script to check a TealTiger policy JSON file before
using it in CI/CD or runtime governance:

```bash
npm install
npx ts-node scripts/validate-policy.ts ./my-policy.json
```

You can also run the npm script:

```bash
npm run validate:policy -- ./my-policy.json
```

The validator loads
[`schemas/tealtiger-policy.schema.json`](./schemas/tealtiger-policy.schema.json),
prints schema validation errors, exits `0` when the policy is valid, and exits
`1` when the policy is invalid.

---

## 🐯 Build With Us — Early Contributor Program

TealTiger is open source and we're looking for early contributors to shape the future of AI agent governance.

### What You Can Work On

| Area | Examples | Difficulty |
|------|----------|------------|
| 🔍 Secret Detection | New detection patterns, custom categories | 🟢 Beginner |
| 📝 Documentation | Guides, examples, API docs, typo fixes | 🟢 Beginner |
| 🧪 Tests | Unit tests, property-based tests, integration tests | 🟡 Intermediate |
| 🔌 Integrations | LangChain, CrewAI, AG2, LlamaIndex middleware | 🟡 Intermediate |
| 💾 Memory Adapters | Redis, Pinecone, Weaviate, ChromaDB adapters | 🟡 Intermediate |
| 🔄 CI/CD Templates | Jenkins, Azure Pipelines, Bitbucket Pipelines | 🟡 Intermediate |
| 🏗️ Core Modules | Governance engine, evidence export, policy evaluation | 🔴 Advanced |

### What Early Contributors Get

- 🏆 **Named in CONTRIBUTORS.md** and release notes
- 🎖️ **"Founding Contributor" badge** — first 25 merged PRs get permanent recognition
- 📣 **Shoutout on TealTiger social channels** (LinkedIn, X, Dev.to)
- 🔑 **Early access** to upcoming governance features before public release
- 💬 **Direct access** to the core team via GitHub Discussions
- 📝 **Co-authorship opportunity** on technical blog posts

### Get Started

```bash
# 1. Star this repo (it helps!)

# 2. Fork and clone the SDK you want to contribute to:
# TypeScript SDK:
git clone https://github.com/agentguard-ai/tealtiger-typescript-prod.git
# Python SDK:
git clone https://github.com/agentguard-ai/tealtiger-python-prod.git

# 3. Pick a "good first issue"
# https://github.com/agentguard-ai/tealtiger/issues?q=label%3A%22good+first+issue%22

# 4. Submit a PR
# 5. Join the team 🐯
```

See [CONTRIBUTING.md](./CONTRIBUTING.md) for detailed guidelines.

---

## 🗺️ Roadmap

**Current:** v1.4.0 — Zero-Config Adoption & Governance Dashboard (Released July 9, 2026)
- `observe(client)` — 1-line auto-instrumentation for 7 providers, zero config
- `freeze()` / `unfreeze()` — instant kill switch, zero policy required
- Behavioral baseline — P50/P95/P99 profiling built from first 100 requests
- PII detection in REPORT_ONLY mode — passive scanning without blocking
- Governance Dashboard — redesigned with light theme, security widgets, error isolation
- Under 5ms overhead per call — in-process, deterministic, offline-capable

**Previous:** v1.3.0 — Autonomous Agent Governance (Released May 18, 2026)


**Planned:** v1.5.0 — Enterprise Platform (Q4 2026)
- Multi-tenancy with complete data isolation
- RBAC (Owner, Admin, Policy Author, Viewer, Auditor)
- SSO via SAML 2.0 / OIDC (Okta, Azure AD, Google)
- SIEM export (Splunk, Elastic, Sentinel, Datadog)
- Policy staging, dry-run mode, canary deployments
- Scheduled compliance reports & executive dashboard

**Future:** v2.0.0 — SaaS Security Platform (Q1 2027)
- Full SaaS control plane (CSPM/CWPP model for AI agents)
- CISO executive console with governance health scoring
- TealTiger Operator & Agent for Kubernetes
- Shadow AI detection (discover ungoverned agents)
- Remote kill switch from SaaS console
- CloudEvents, OpenTelemetry, Backstage plugin

---

## 🌟 Community

- **Discord**: [Join TealTiger Community](https://discord.gg/X2ePf8QAj)
- **GitHub Discussions**: [Ask questions, share ideas](https://github.com/agentguard-ai/tealtiger/discussions)
- **LinkedIn**: [TealTiger](https://www.linkedin.com/company/tealtiger)
- **X (Twitter)**: [@TealtigerAI](https://x.com/TealtigerAI)
- **Documentation**: [docs.tealtiger.ai](https://docs.tealtiger.ai)
- **Blog**: [blogs.tealtiger.ai](https://blogs.tealtiger.ai)
- **Playground**: [playground.tealtiger.ai](https://playground.tealtiger.ai)
- **Email**: reachout@tealtiger.ai

---

## 🔒 Security

TealTiger is committed to responsible open-source security practices.

[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/agentguard-ai/tealtiger/badge)](https://securityscorecards.dev/viewer/?uri=github.com/agentguard-ai/tealtiger)
[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/10824/badge)](https://www.bestpractices.dev/projects/10824)
[![Dependabot](https://img.shields.io/badge/Dependabot-enabled-brightgreen?logo=dependabot)](https://github.com/agentguard-ai/tealtiger/security/dependabot)
[![CodeQL](https://github.com/agentguard-ai/tealtiger/actions/workflows/codeql.yml/badge.svg)](https://github.com/agentguard-ai/tealtiger/actions/workflows/codeql.yml)

For vulnerability reports, see our [Security Policy](./SECURITY.md).

---

## 📄 License

TealTiger is [Apache 2.0 licensed](./LICENSE).

---

## 🙏 Acknowledgments

Built with ❤️ by the TealTiger team and [contributors](./CONTRIBUTORS.md).

---

## 👥 Contributors

[![Contributors](https://contrib.rocks/image?repo=agentguard-ai/tealtiger)](https://github.com/agentguard-ai/tealtiger/graphs/contributors)

Want to contribute? Check out our [CONTRIBUTING.md](./CONTRIBUTING.md) guide!

---

<div align="center">

**⭐ Star this repo if you believe AI agents need governance, not just guardrails.**

[Report Bug](https://github.com/agentguard-ai/tealtiger/issues/new?template=bug_report.md) · [Request Feature](https://github.com/agentguard-ai/tealtiger/issues/new?template=feature_request.md) · [Ask Question](https://github.com/agentguard-ai/tealtiger/issues/new?template=question.md)

</div>


## 🌐 Supported Providers

Pricing data is from [`docs/cost-comparison.md`](docs/cost-comparison.md) (last updated April 2026).
**Coverage** shows whether TealTiger has verified cost tracking via the `observe()` API end-to-end.

| Provider | Example Model | Input $/1M | Output $/1M | Coverage | Example |
| --- | --- | ---: | ---: | :---: | --- |
| **OpenAI** | GPT-5.4 | $2.50 | $15.00 | ✅ | [`examples/observe_quickstart.py`](examples/observe_quickstart.py) |
| **OpenAI** | GPT-5.4 mini | $0.75 | $4.50 | ✅ | [`examples/observe_quickstart.py`](examples/observe_quickstart.py) |
| **Anthropic** | Claude Sonnet 4 | $3.00 | $15.00 | ✅ | [`examples/observe_quickstart.py`](examples/observe_quickstart.py) |
| **Anthropic** | Claude Haiku 3.5 | $0.80 | $4.00 | ✅ | [`examples/observe_quickstart.py`](examples/observe_quickstart.py) |
| **Anthropic** | Claude Opus 4.1 | $15.00 | $75.00 | 🟡 | — |
| **Gemini** | Gemini 3 Flash Preview | $0.50 | $3.00 | 🛠️ | [`examples/multi-provider-setup.ts`](examples/multi-provider-setup.ts) |
| **Gemini** | Gemini 3 Pro Preview | $2.00 | $12.00 | 🛠️ | [`examples/multi-provider-setup.ts`](examples/multi-provider-setup.ts) |
| **Gemini** | Gemini 2.5 Flash-Lite | $0.10 | $0.40 | 🛠️ | [`examples/multi-provider-setup.ts`](examples/multi-provider-setup.ts) |
| **Bedrock** | Amazon Nova Micro | $0.035 | $0.14 | 🛠️ | [`examples/bedrock-multi-provider.ts`](examples/bedrock-multi-provider.ts) |
| **Bedrock** | Amazon Nova Lite | $0.06 | $0.24 | 🛠️ | [`examples/bedrock-multi-provider.ts`](examples/bedrock-multi-provider.ts) |
| **Bedrock** | Amazon Nova Pro | $0.80 | $3.20 | 🛠️ | [`examples/bedrock-multi-provider.ts`](examples/bedrock-multi-provider.ts) |
| **Azure OpenAI** | GPT-5 Global Standard | $1.25 | $10.00 | 🛠️ | [`examples/multi-provider-failover.ts`](examples/multi-provider-failover.ts) |
| **Azure OpenAI** | GPT-5 mini Global Standard | $0.25 | $2.00 | 🛠️ | [`examples/multi-provider-failover.ts`](examples/multi-provider-failover.ts) |
| **Cohere** | Command A | $2.50 | $10.00 | ❌ | — |
| **Cohere** | Command R+ | $2.50 | $10.00 | ❌ | — |
| **Mistral** | Mistral Large 3 | $0.50 | $1.50 | ❌ | — |
| **Mistral** | Mistral Small 4 | $0.15 | $0.60 | ❌ | — |
| **Mistral** | Mistral Medium 3.5 | $1.50 | $7.50 | ❌ | — |

### Coverage legend

- ✅ — Verified end-to-end via `observe()` + tested in `test_property_20_cost_monotonicity.py`
- 🟡 — Imported in `observe()` adapter, no property test yet
- 🛠️ — Adapter example exists, no `observe()` integration yet
- ❌ — Listed in `cost-comparison.md` only, no SDK hook yet (PRs welcome)
历史前置条件说明(补充参考)

Node.js/npm(安装 npm 包与运行 Dashboard)或 Python/pip;需自备所接入模型提供商的 API Key(如 OPENAI_API_KEY、HF_API_TOKEN);模型调用费用由提供商收取;商业与企业平台功能及费用待核验;国内网络与国内模型兼容性待核验;MCP 服务端配置文件未获取。

项目来源与清单版权许可

https://github.com/agentguard-ai/tealtiger

整理来源:https://github.com/slavakurilyak/awesome-ai-agents

清单版权与许可:

MIT License

Copyright (c) 2024 Slava Kurilyak

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.