KYE Protocol · Open Source · oss.kyeprotocol.com
KYE Open Source · Apache 2.0 / CC-BY-4.0 · canonical registry

Open-source KYE Protocol

SDKs (TypeScript / Python / Go), CLI, Conformance Pack verifier, Shadow Mode SDK, schemas, OpenAPI, vocabulary — everything you need to integrate KYE Protocol™ locally. The operational engines (Authority Gap detection, Guard Recommendation, drift detection) ship as paid services on the hosted Cloud; the wire contract + verification surface are 100% open.

loading manifest…

Stakeholder
Language
Category
Search

Why this is open source

Trust without lock-in

Banks, regulators and auditors need to verify what they're running. SDKs + schemas + wire-format are Apache-2.0 + CC-BY-4.0 so anyone can read, fork, certify. The paid Cloud runs the operational engines (Authority Gap detection, Guard Recommendation, drift) — the wire-format you bind to is yours forever.

Audit-defensible by construction

Every package above has an open spec under private/specs/ mirrored to kye-protocol.github.io. Customer auditors can compile, conformance-test, and embed in their own change-control without a vendor NDA.

15 packages, 6 stakeholders

Each SDK has stakeholder labels (Developer · Integrator · Auditor · Regulator · Consultant · Contributor) — use the filter chips above. Coverage: TypeScript · Python · Go · CLI · Conformance verifier · Shadow Mode SDK · Schemas · OpenAPI · Webhook verifier · Vocabulary · ID format · Examples · Widget protocol.

Architecture at a glance

Your agent / service LangChain · Claude · OpenAI · … KYE OSS SDK TS · Python · Go · schemas KYE Gateway™ (paid) Authority · Purpose · Decision · Evidence · Replay Conformance Pack™ verify offline Shadow Mode SDK observe before enforce Webhook verifier · Widget protocol · CLI build & integrate

Get started in 60 seconds

TypeScript

npm install @kye-protocol/sdk

Drop-in client for the KYE Gateway™. Auth-aware fetch with retries, evidence-pack download, decision replay.

Python

pip install kye-sdk

Async + sync clients, typed models for every KYE schema, Conformance Pack verifier built in.

Go

go get github.com/KYE-Protocol/sdk-go

Zero-dep Go client. Webhook signature verification — implements the public vendor recipes; algorithm details not disclosed in this repository.

CLI

npm install -g @kye/cli

kye verify pack.bin · kye mint key · kye conformance run · kye replay <decision_id>.

Use cases

🏦 Banking — payment-issuing agent

Wrap an LLM payment agent in @kye-protocol/sdk; every submit_payment tool call routes through Authority + Purpose + Decision. Auditor downloads @kye/conformance-pack-verifier + replays a quarter of decisions offline.

⚖️ Regulator — supervisory pack

Bank's CRO ships an Evidence Pack URL to the regulator. Regulator opens it in the KYE Evidence Viewer (open-source PWA) — no vendor login, full decision walk-through, OSCAL export.

🏥 Healthcare — clinical decision support

A clinical-decision-support agent wraps its recommendation tool with kyeAgent.wrap(). Every recommendation carries a signed Decision Map; clinicians see the "why"; regulators get the integrity proof.

🛰️ Edge — disconnected vehicle fleet

Vehicles run the Edge Arbiter with a Compiled Authority Bundle. Off-grid decisions log to the Offline Evidence Log; sync to the cloud Audit Pilot when connectivity returns.

Contributing

Every package above accepts pull requests. The KYE Protocol™ specs live under private/specs/ in the mono-repo and are mirrored read-only to kye-protocol.github.io for offline reading.

How to contribute: open an issue on the package's GitHub repo · sign the CLA (one-click via GitHub OAuth) · submit a PR · CI runs the Conformance Pack against your change · two-maintainer review · merge.

GitHub organisation ↗ Governance & CLA Contributor wall Working groups

FAQ

What's open source vs paid?

Wire-format + SDKs + schemas + Conformance Pack verifier + Shadow Mode SDK are open source. Operational engines — Authority Gap detector, Guard Recommendation, drift detection, Audit Pilot orchestration — ship as paid services on the hosted Cloud. You can always self-host the verification side; you'd build the operational side yourself if you want zero hosted dependency.

Can I fork the SDK?

Yes. Apache-2.0. Keep the LICENSE + NOTICE; the trademark rules (no using "KYE Protocol™" to label a non-conformant fork) are in trademarks.

Does the SDK send telemetry?

No silent telemetry. The only data the SDK sends is what your code explicitly hands it (decision payloads, evidence packs). All clients support KYE_DRY_RUN=true to print-only.

How are vulnerabilities handled?

Public via SECURITY.md in each repo. PGP key on /security.html. CVE disclosure within 7 days, fix within 30 unless coordinated extension. Severity follows CVSS v4.