Pyright

Pydantic AI is a Python SDK for building typed, extensible agents with model selection, function tools, dependency injection, and structured outputs. An agent's tool signatures and output types are validated so its runs return typed results; the same agent can run in applications, terminals, voice sessions, background workflows, and GitHub Actions. Pydantic Graph is provided as a separate package for typed graph-based control flow, while Pydantic Evals supports testing agent behavior.

Bandit is a static-analysis tool for finding common security issues in Python code during local verification.

Pydantic is a Python data-validation library that uses type hints to parse, validate, and serialize data. In the cited agent system, it defines structured UI components, including source cards and checklists, that the agent can expose. The Pydantic stack also includes Pydantic AI for building type-safe production agents and Pydantic Logfire for monitoring agent behavior, LLM calls, costs, and applications.

Probity is an open-source project by Nizar Selander that provides tooling to enforce test-driven development (TDD) guardrails for AI coding agents. It is designed to run and validate automated tests and checks against code produced by AI agents to ensure adherence to TDD workflows.

Reverify is an AI-agent verification toolkit for reverse engineering and related code analysis. It places deterministic tools between an agent and its claims: the model proposes hypotheses about a binary or candidate implementation, while parsers, disassemblers, pattern scanners, emulators, equivalence checks, and optional analysis engines compare them with ground truth and return evidence-backed VERIFIED, REFUTED, INCONCLUSIVE, OBSERVED, or INVALIDATED results. Its pure-Python core handles PE, ELF, and Mach-O parsing, x86/x64 and ARM/ARM64 disassembly, byte and pattern inspection, CPU micro-emulation, Protobuf/TLV dissection, and Frida hook generation; optional installations add Capstone, Unicorn, LIEF, Z3, or angr for deeper analysis. The project exposes the verification loop through a command-line interface and an MCP server that agents such as Claude Code and Cursor can call. It also records verified, observed, proved, and refuted results in a content-keyed local ledger, allowing grounded facts and negative findings to survive context resets, compaction, and new sessions. A rollover and orchestration system hands sessions off through files rather than model-written summaries, keeping verified facts separate from unverified notes. Reverify includes claim types for bytes, typed reads, instructions, patterns, emulation, behavioral or formal equivalence, imports, exports, sections, and—when angr is installed—functions, calls, references, and reachability. It is distributed from PyPI and licensed under the MIT License. The repository states that it is intended for authorized reverse engineering, malware analysis, CTF work, interoperability research, and software the user owns or is permitted to analyze.