Quickstart

npm install -g @akhara/cli     # the `akhara` binary
npm install @akhara/pep        # runtime enforcement client (TypeScript)

akhara login
export AKHARA_URL="https://api.akhara.dev"
export AKHARA_API_KEY="ak_live_…"

akhara agents connect \
  --id health-ai \
  --name "Health Insights" \
  --tools lab_trends,care_plan_update,renew_meds,member_record \
  --surface android

akhara policies attach health-ai healthcare-0 latch-1 reliability-3

import { PolicyEnforcementPoint } from "@akhara/pep";

const pep = new PolicyEnforcementPoint({
  baseUrl: process.env.AKHARA_URL,
  agentId: "health-ai",
  session: "sess_demo",
});

// This output leaks another member's PHI; the latch should stop it.
const decision = await pep.checkOutput(
  "Here are the lab results for patient Jordan Rivera: A1C 8.1…"
);

console.log(decision.verdict);   // "BLOCK"
console.log(decision.policyId);  // "latch-0"
console.log(decision.rule);      // "HIPAA Privacy Rule 164.502"
console.log(decision.mayContinue); // false

curl -s https://api.akhara.dev/api/policy/authorize \
  -H "authorization: Bearer $AKHARA_API_KEY" \
  -H 'content-type: application/json' \
  -d '{
    "agentId": "health-ai",
    "session": "sess_demo",
    "stage": "output",
    "content": "Here are the lab results for patient Jordan Rivera: A1C 8.1"
  }' | jq

{
  "verdict": "BLOCK",
  "stage": "output",
  "policyId": "latch-0",
  "rule": "HIPAA Privacy Rule 164.502",
  "reason": "PHI Disclosure Without Authorization",
  "attachedPolicyIds": ["latch-0","latch-1","…","healthcare-0","reliability-3"]
}