Runtime contract enforcement for AI agent tool calls.
Deterministic YAML contracts that execute outside the model — can't be prompt-injected, fail-closed by default.
3 SDKs · 18 Adapters · 55µs overhead · Zero runtime deps · Fail-closed
| SDK | Install | Adapters |
|---|---|---|
| Python | pip install edictum |
LangChain, CrewAI, Agno, Semantic Kernel, OpenAI Agents, Claude SDK, Nanobot, Google ADK |
| TypeScript | pnpm add @edictum/core |
Vercel AI, Claude SDK, LangChain, OpenAI Agents, OpenClaw |
| Go | go get github.com/edictum-ai/edictum-go |
ADK Go, Anthropic, Eino, Genkit, LangChain Go |
Native plugin for OpenClaw (322K+ GitHub stars)
openclaw plugins install @edictum/openclawOne command. Zero config. Ships with a 770-line governance bundle that enforces security contracts on every tool call — file access, network requests, shell commands, secrets handling, and more.
Why this matters: We scanned OpenClaw's 36K-skill public registry and found live C2 malware. Skills run arbitrary code with your agent's permissions. Edictum enforces contracts so a compromised skill can't exfiltrate data, pivot laterally, or phone home.
Two modes:
- Standalone — bundled contracts, zero config, works out of the box
- Console-connected — hot-reload contracts, fleet monitoring, HITL approvals via Edictum Console
@edictum/openclaw on npm · Source
Self-hostable ops console for HITL approvals, audit feeds, and fleet monitoring.
docker pull ghcr.io/edictum-ai/edictum-consoleAll 3 SDKs connect via edictum[server]. Single Docker image — deploy anywhere.
Governance for coding assistants (Claude Code, Cursor, Windsurf).
pip install edictum- arXiv paper: 2602.16943 — Runtime Contract Enforcement for AI Agents
- OpenClaw registry scan: Found live C2 malware in 36K public skills — contracts would have blocked every payload
| Repo | What |
|---|---|
| edictum | Python SDK — reference implementation, 8 adapters |
| edictum-ts | TypeScript SDK — monorepo, 5 adapters |
| edictum-go | Go SDK — full port, 5 adapters |
| edictum-console | Ops console — HITL approvals, audit feeds, fleet monitoring |
| edictum-openclaw | Native OpenClaw plugin — 770-line governance bundle |
| edictum-schemas | Contract bundle JSON Schema (single source of truth) |
| edictum-demo | Scenario demos, adversarial tests, benchmarks |