Skip to main content
The veridex-agent SDK is the standalone runner seam used by both the Agent Studio deploy endpoint and the CLI. Running an agent with the CLI or calling the deploy endpoint routes through the exact same single runner — there is no separate implementation. Every run produces a sealed, independently verifiable proof using the same law / policy / proof pipeline as the Arena.

Installation

Install the SDK with the agent, live, and API extras:

CLI usage

Key CLI outputs

After a successful run, the CLI prints a single [VERIFIED] line:

The sample_agent.toml

The file at veridex_agent/sample_agent.toml is the reference config for a standalone agent run. It contains strategy and policy parameters only — credentials are never stored in the TOML.

Field reference


How the CLI routes through the runner seam

The CLI and the Agent Studio deploy endpoint use the same single runner. When you call veridex-agent run --config agent.toml, the SDK:
  1. Loads and validates your TOML config via typed Pydantic models (invalid values fail with named reasons before any run starts).
  2. Calls build_agent in veridex_agent/config.py to instantiate the strategy template with your config parameters.
  3. Runs the agent through the same sealed pipeline as the Arena: agent proposes → law recomputes → policy gates → venue executes → proof seals.
  4. Anchors the manifest hash on Solana if anchor=true and SOLANA_KEYPAIR_PATH is available.
  5. Prints the [VERIFIED] line with run_id, source, avg_clv_bps, manifest_hash, and anchor status.
The run_id printed by the CLI is the same ID you pass to POST /runs/{run_id}/verify. Verification re-runs the law over the sealed run_events prefix and returns a per-check verdict — identical behavior for CLI runs, deploy-endpoint runs, and Arena runs.
Credentials — TxLINE JWT, X-Api-Token, Solana keypair path (SOLANA_KEYPAIR_PATH), and venue keys — come from veridex/.env via veridex.config.Settings. They are never read from the TOML file and must never be committed to your repository.

Running in Docker

Build the agent image and run it with credentials supplied via --env-file:
The image contains no secrets. All credentials are injected at runtime through the environment file. The mounted agent.toml overrides the sample config inside the container.