crewai - 💡(How to fix) Fix Integration: Cryptographic audit trails for agent actions with asqav [17 comments, 4 participants]

Fix Plan

To integrate asqav with CrewAI for signing agent actions, we'll implement a middleware solution.

Steps:

• Install the asqav SDK: npm install asqav-sdk or pip install asqav-sdk
• Create a CrewAI callback or middleware function to wrap task execution with asqav signing
• Use the asqav SDK to generate ML-DSA-65 signatures for each agent task execution and tool call

Example Code (Node.js):

const asqav = require('asqav-sdk');

// CrewAI callback function
async function signAgentAction(taskExecution) {
  // Generate ML-DSA-65 signature
  const signature = await asqav.sign(taskExecution, 'your-asqav-private-key');

  // Create tamper-proof audit trail with public verification URL
  const auditTrail = await asqav.createAuditTrail(signature, 'your-asqav-public-key');

  // Return the signed task execution and audit trail
  return { taskExecution, signature, auditTrail };
}

Verification

To verify the fix, test the CrewAI callback or middleware function with sample task executions and tool calls. Check that:

• ML-DSA-65 signatures are generated correctly
• Tamper-proof audit trails are created with public verification URLs
• Policy enforcement gates are triggered correctly (e.g., require approval before high-risk actions)

Extra Tips

• Ensure you handle errors and exceptions properly when generating signatures and creating audit trails
• Consider implementing a retry mechanism for failed signature generations or audit trail creations
• Review the asqav SDK documentation for any specific requirements or recommendations for integration with CrewAI.