← Primust · Adapters

Framework adapters. One wire format.

Auto-instrument agent frameworks, wrap deterministic rule engines in place, and bind third-party detectors into the same VPEC model.

§ 02AI frameworks

For agents. autoinstrument().

Name
Integration path
Mode
What it does
OpenAI Agents SDK
primust
Python
Wraps Agents SDK runs, tool calls, handoffs, tracing spans.
LangGraph
primust
Python
Node-level and edge-level instrumentation. Bind graph traversal to the VPEC.
Google ADK
primust
Python
Agent Development Kit runs and tool invocations.
Microsoft Agent Framework
primust
Python
MSAF agents, skills, and orchestration.
Pydantic AI
primust
Python
Tool calls and validator decisions bound to the VPEC.
Semantic Kernel
primust
Python
SK functions, planners, and kernel invocations.
OpenTelemetry
primust
Python · JS · Go
Back OTel spans into Primust. Use for unsupported frameworks.
CrewAI
primust
Python
Crew tasks open/close per decision. Role, tool use, and handoffs recorded.
AG2 (AutoGen)
primust
Python
Multi-agent conversations instrumented. Agent-to-agent message commits.
LlamaIndex
primust
Python
Retriever, query-engine, and agent tool calls bound to the VPEC.
LiteLLM
primust
Python
Unified LLM interface. Every completion across 100+ providers recorded.
DSPy
primust
Python
DSPy modules and optimizers instrumented. Teleprompter runs captured.
Haystack
primust
Python
Pipeline components, retrievers, and generators recorded per run.
Strands
primust
Python
Strands agent tool calls and tool-use policy wrapped into the VPEC.
AWS Bedrock
primust
Python
boto3 Bedrock runtime. InvokeModel and Agent calls bound via HTTP events.
MCP
primust
Python
Model Context Protocol servers instrumented. Tool listings and calls recorded.
Custom checks
primust
Python
@record_check wraps your own governance logic, validators, or internal tools.
Custom pipeline
primust
Python
Pipeline() gives explicit run boundaries for proprietary agents and bespoke orchestration.
§ 03Rule engines

For decade-old policy. Wrap in place.

Name
Integration path
Mode
What it does
Open Policy Agent
primust
Rego
Decision log becomes a check execution record. Every opa eval can produce a VPEC-bound result.
Cedar
primust
Cedar
Policy evaluation results become check records with the policy pack hash.
Drools
primust
DRL · Java
Rule activations recorded. Agenda and working-memory commits attached.
IBM ODM
primust
ARL · Decision
Decision service calls wrapped. Rule flow and outcome bound to the VPEC.
AWS Cedar / AgentCore
primust
Cedar
Complementary: Cedar enforces policy, Primust proves it ran as declared.
§ 04Third-party detectors

For PII, prompt injection, and secrets. Same VPEC.

Drop-in subprocess or HTTP adapters. Every detector run produces a check record with the tool binary hash (local) or the recipe/model hash (cloud), so a third party can verify that the detector you say ran is the detector that actually ran.

Name
Integration path
Mode
What it does
Microsoft Presidio
check integration
local · PII/PHI
PII and PHI scanner. Runs locally — tool binary hashed, no network egress.
Pangea AI Guard
check integration
cloud API · multi
Prompt injection, PII, and malicious content. Recipes bound by hash.
Lakera Guard
check integration
cloud API · multi
Prompt injection and jailbreak detection. Request/response commits recorded.
OpenAI Moderation
check integration
cloud API · content
OpenAI's moderation endpoint. Category scores and verdicts bound to the VPEC.
ProtectAI LLM Guard
check integration
local · prompt/output
Prompt and output scanners. Per-scanner verdicts recorded as check rows.
TruffleHog
check integration
local · secrets
Secret-scanner. Detector count, verified-hit count, and rules hash captured.
HuggingFace PII
check integration
local · PII
HF transformers-based PII classifier. Entity counts and scores committed.
Semgrep
check integration
local · SAST
Static-analysis detector. Rule pack hash + per-rule verdicts recorded.
§ 09 — Next step

Keep the systems you already run. Add the evidence layer they do not produce on their own.