Quickstart & Installation

1. Installation Options

Choose the installation method suited for your environment:

Option A: Python SDK

# Install the core Boundrix SDK
pip install boundrix

# Or install directly from SASLABS GitHub repository
pip install git+https://github.com/saslabs/boundrix.git

Option B: Node.js / TypeScript SDK

npm install @boundrix/sdk
# or yarn / pnpm
pnpm add @boundrix/sdk

Option C: Docker Runtime Sidecar (Recommended for Kubernetes)

docker pull boundrix/sidecar:latest

# Run the local evaluation sidecar on port 8080
docker run -d -p 8080:8080 \
  -e BOUNDRIX_ENV=production \
  -e BOUNDRIX_POLICY_FILE=./policy.rego \
  -v $(pwd)/audit.db:/data/audit.db \
  boundrix/sidecar:latest

2. Initializing the Client & First Authorization Call

Connect your agent to the Boundrix decision engine in 3 lines of code:

from boundrix.client import BoundrixClient

# Initialize client pointing to local sidecar or centralized VPC cluster
client = BoundrixClient(base_url="http://localhost:8080", timeout=2.0)

# Evaluate execution boundary before executing a tool call
decision = client.authorize(
    agent_id="agent-coding-01",
    task_id="task-fix-auth-1029",
    action="repo.read",
    resource={"repo": "org/auth-service", "branch": "fix/token-expiry"}
)

if decision.is_allowed:
    print(f"Action ALLOWED! Decision ID: {decision.audit_id}")
else:
    print(f"Action DENIED: {decision.reason}")

3. Fail-Closed Execution Contract

Boundrix enforces a strict **fail-closed** contract:

• If the decision engine is unreachable due to network partition or DNS failure, the SDK raises `BoundrixConnectionError`.

• Agent frameworks **must treat any connection exception as an immediate DENY** and halt consequential tool execution.