Skip to main content
Use this path when you need a first validated Attesta gate in under 5 minutes.

​
1. Install (60s)

pip install "attesta[terminal,yaml]"

​
2. Create attesta.yaml (60s)

policy:
  fail_mode: escalate
  timeout_seconds: 30

audit:
  path: .attesta/audit.jsonl

​
3. Protect one high-impact action (90s)

from attesta import Attesta

attesta = Attesta.from_config("attesta.yaml")

@attesta.gate(risk_hints={"production": True, "destructive": True})
def rotate_prod_keys(service: str) -> str:
    return f"rotated {service}"

print(rotate_prod_keys("payments-api"))

​
4. Validate evidence (60s)

  • Confirm the action prompted for approval (or escalated on timeout).
  • Confirm .attesta/audit.jsonl was written.
  • Run attesta audit verify if using the Python CLI.

​
5. Expand immediately (60s)

  • Apply the gate to 3-5 highest impact tools first.
  • Add explicit risk_hints for production, financial, or PII operations.
  • Keep fail_mode: escalate for any action where silent timeout behavior is unsafe.