KYE Agent Dev Kit™ · constitution §32 · SKU KYE-ADK-001

Build AI agents that prove every action they took.

A one-line wrapper that turns any async function into a KYE™-aware agent. Every privileged action auto-emits the §0.3 governance event family (purpose request, admissibility, decision map, context seal, evidence pack). A regulator can replay any decision your agent ever made by fetching its decision_id + your published JWKS — no vendor cooperation required.

rocket_launch Apply for pilot → menu_book Read the docs

The 12-line agent

// npm install @kye/agent-dev-kit
// or  pip install kye-agent-dev-kit

import { withKye } from "@kye/agent-dev-kit";

export const handler = withKye(
  async (ctx, input: { name: string }) => {
    await ctx.runtime.emitToolCall({ tool: "greet" });
    return { greeting: `hello ${input.name}` };
  },
  {
    tenant_id: "kye:tenant:my-tenant",
    actor:     "kye:agent:my-tenant:hello",
    principal: "kye:org:my-tenant",
    gateway:   "https://gateway.kyeprotocol.com",
  },
);

That's it. The wrapper emits 5 canonical events around every invocation; ctx.runtime.emitToolCall emits one per external call you make. Every event lands on your tenant's audit chain, signed Ed25519.

What every Dev-Kit-scaffolded agent gets for free

You get a precise, signed answer — every claim below maps to a canonical artefact you can verify against the open contract.

  • Self-governing by default (§0.3). Per-invocation emission of kye.purpose.request.v1 → kye.purpose.admissibility.v1 → kye.evidence.decision_map.v1 → kye.replay.context_seal.v1 → kye.evidence.pack.v1. Opt-out is a constitutional violation.
  • Lifecycle hooks. onBeforeDecision (veto via throw), onAfterDecision, onError, onEvidenceEmitted. Hooks compose left-to-right.
  • Per-tool-call evidence. ctx.runtime.emitToolCall({ tool, input_hash, output_hash, latency_ms, status }) — one kye.evidence.tool_call.v1 per external call.
  • Drift detection. ctx.runtime.emitDriftEvent({ subject, before_hash, after_hash, drift_kind }) — emits kye.resilience.drift_event.v1 when the agent observes a state diff.
  • Deterministic. Same input + injected clock + injected mint → byte-identical event sequence. CI-replayable.
  • IP-safe. The kit wraps the canonical SDKs; it never re-implements decision binding, cascade ordering, replay-proof construction, or meaning-continuity scoring — those remain proprietary.

CLI workflow

Every claim here is backed by the open KYE Protocol™ contracts and verifiable end-to-end from the publisher's JWKS — you check it yourself, you don't take our word for it.

# Scaffold
$ kye agent new my-kyc-agent --lang ts --template kyc

# Run tests against a local gateway stub
$ kye agent test --against local

# Run against the sandbox gateway
$ kye agent test --against sandbox

# Deploy to Cloudflare Workers
$ kye agent deploy --target cloudflare

# Diagnose missing config
$ kye agent doctor

Three canonical templates

Every claim here is backed by the open KYE Protocol™ contracts and verifiable end-to-end from the publisher's JWKS — you check it yourself, you don't take our word for it.

  • hello — 12-line minimal scaffold. Demonstrates the wrapper + one emitToolCall. Use this to understand the lifecycle.
  • kyc — full §31-instrumented KYC-verify agent. Ships one kye.data_use_manifest.v1 + four kye.data_asset.v1 records, each with PII inventory + redaction strategies. Customer-onboarding ready.
  • payment — dual-control payment-prepare agent. Ships idempotency-key wiring + dual-control gate + payments rule pack integration. Banking-grade.

What this is not (red lines)

You get a precise, signed answer — every claim below maps to a canonical artefact you can verify against the open contract.

  • Not a replacement for LangChain / CrewAI / OpenAI Agents SDK / Claude Agent SDK. The Dev Kit composes with them via withKye(langchainAgent.invoke); it does NOT re-implement agent orchestration, planning, retrieval, or memory.
  • Not a new runtime. Agents scaffolded by the Dev Kit run on Cloudflare Workers, Node, Python, or any user-chosen runtime. The PDP / Gateway / audit chain remain canonical — the kit is a thin instrumentation layer.
  • Not a new SDK. The kit wraps @kye/sdk-typescript / kye-sdk (Python). It never re-implements client transport, signing, or schema validation.
  • Not multi-tier. V1 ships one SKU at £75k annual. V2 may introduce a regulated-sector variant only on ≥3 enterprise asks.

The 9-artefact V1 stack

Every claim here is backed by the open KYE Protocol™ contracts and verifiable end-to-end from the publisher's JWKS — you check it yourself, you don't take our word for it.

#ArtefactStatus
1constitution/32-AGENT-DEV-KIT.md — lockshipped
2@kye/agent-dev-kit (TypeScript SDK)shipped, 11/11 tests green
3kye-agent-dev-kit (Python parity SDK)shipped, 10/10 tests green
4kye agent new/test/deploy/doctor CLIshipped
5templates/agent-helloshipped
6templates/agent-kyc (§31-instrumented)shipped
7templates/agent-payment (dual-control)shipped
8public/site/agent-dev-kit.html (this page)shipped
9KYE-ADK-001 SKU + KYE Agent Dev Kit™ trademarkshipped

Get started

Every claim here is backed by the open KYE Protocol™ contracts and verifiable end-to-end from the publisher's JWKS — you check it yourself, you don't take our word for it.