Agent Governance ToolkitAgent Governance Toolkit 4.1.0 · Python 3.10+
Dashboard
0%
1
Curious builder0 XP earned · 300 to level 2
0 daysFinish a lesson to begin
Badge collection0 of 6 unlocked
47 small wins to finish your pathNext lesson →

Checking the toolkit's files with agt integrity

agt integrity checks that the toolkit's own installed files match a manifest of hashes, so a tampered or corrupted install is caught. It covers the toolkit, not your code.

Last updated: 14 Oct, 2026 · Agent Governance Toolkit 4.1.0

The verify lesson checked coverage. This command checks something narrower and concrete: that the files the toolkit shipped are the files on disk, unchanged.

Running the check

With no arguments it verifies the installed modules against the manifest and reports how many it checked.

ExampleThe toolkit's own files match the manifest
agt integrity | grep -E "PASSED|Modules checked|verified"

What it covers

  • Fifteen of the toolkit's own modules, checked against hashes recorded in a manifest.
  • A handful of critical functions within them, so a swapped implementation is caught.
  • Not your policies or your agent. This proves the library on disk is intact, which is a supply-chain check, not a check of what you built.

integrity vs verify

agt integrityagt verify
ChecksThe toolkit's files match a manifestOWASP coverage or deployment evidence
ScopeFifteen library modulesThe ten risk areas or six signals
AnswersIs the install intactIs the code present, or the deployment governed

Where you use agt integrity

  • After an install or an upgrade, to confirm the files are the ones the toolkit shipped.
  • In a locked-down environment, as a supply-chain check that the library was not altered.
  • An incident check, ruling out a tampered toolkit as the cause.
Watch out. A passing integrity check says the toolkit's fifteen modules are intact. It says nothing about whether your policy is loaded or your agent is governed. Pair it with agt verify --evidence, which checks your deployment.
Try it yourself
  • Run agt integrity with no filter and read the timestamp and full module list it prints.
  • Run it twice and confirm the module count is stable at fifteen.
  • Read agt integrity --help to see whether a manifest can be generated for your own files.
PreviousWhat agt verify proves, and what it does not

Every expert started right here.