
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
trigguard — canonical product SDKInstall: npm install trigguard
Official TrigGuard product SDK — one install for authorization, verification, attestation, audit, and coaching. Internal kernel packages (trigguard-sdk-core, @trigguard/execution-sdk, adapters) stay implementation details.
npm install trigguard
import { createTrigGuard, withExecute } from "trigguard";
const tg = createTrigGuard({
gatewayUrl: process.env.TRIGGUARD_GATEWAY_URL!,
apiKey: process.env.TRIGGUARD_API_KEY,
});
const result = await tg.authorize({
surface: "deploy.release",
actor: "ci-bot",
context: { environment: "production" },
});
if (result.decision === "PERMIT" && result.receipt) {
const trusted = await tg.verify(result.receipt);
console.log(trusted ? "receipt verified" : "receipt failed verification");
}
Offline demo: examples/quickstart-node/.
| Method | Purpose |
|---|---|
authorize | POST /execute — returns CustomerDecisionResult |
verify | Offline receipt signature verification |
explain | Human-readable decision summary |
attest | Record an attestation via authorize |
audit | Query workspace audit entries |
coach | Advisory outcome preview (non-binding) |
Integration helpers re-exported from scoped packages:
@trigguard/execution-sdk — withExecute, attemptExecute (deprecated direct install — use trigguard)@trigguard/proxy — Express proxy, LangChain protectAgentPolicy simulation (advisory, separate install):
npm install @trigguard/simulator
| Legacy | Status | Use instead |
|---|---|---|
@trigguard/execution-sdk | Supported, deprecated | npm install trigguard |
sdk/node (@trigguard/decision) | Supported, deprecated (Rail B) | createTrigGuard().authorize() |
trigguard-js | Legacy | createTrigGuard() |
Guide: docs/adoption/MIGRATE_TO_TRIGGUARD_SDK.md.
HOLD until verb parity with Node — see output/PYTHON_PUBLISH_HOLD.md.
Development: pip install -e sdk/python · examples/quickstart-python/
npm run build -w trigguard
npm run test -w trigguard
See docs/FIRST_10_MINUTES_V2.md for onboarding.
FAQs
TrigGuard public SDK — authorize, verify, receipts, agents, CLI. One install.
We found that trigguard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.