Graphorin API reference v0.1.0

---

Graphorin API reference / @graphorin/agent / / CausalityMonitor

Class: CausalityMonitor

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:82

In-memory primitive instantiated per RunContext. Bounded-depth append discipline keeps the memory footprint trivial even on long runs.

Stable

Constructors

Constructor

new CausalityMonitor(cfg): CausalityMonitor;

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:89

Parameters

Parameter	Type
cfg	CausalityMonitorConfig

Returns

CausalityMonitor

Properties

Property	Modifier	Type	Defined in
auditAllChains	readonly	boolean	packages/agent/src/lateral-leak/causality-monitor.ts:86
denialPatterns	readonly	readonly RegExp[]	packages/agent/src/lateral-leak/causality-monitor.ts:85
maxChainDepth	readonly	number	packages/agent/src/lateral-leak/causality-monitor.ts:84
strictness	readonly	CausalityMonitorStrictness	packages/agent/src/lateral-leak/causality-monitor.ts:83

Accessors

chain

Get Signature

get chain(): readonly string[];

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:99

Snapshot the current causality chain.

Returns

readonly string[]

Methods

checkMessage()

checkMessage(content): CausalityMonitorCheck;

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:129

Inspect a candidate assistant-visible string and return whether the lateral-leak defense should fire. Pure decision based on the current chain + the operator-extensible denial patterns.

Parameters

Parameter	Type
content	string

Returns

CausalityMonitorCheck

---

flush()

flush(reason): {
  chain: readonly string[];
  reason: "agent.run.complete" | "agent.abort";
};

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:215

Drain the chain to the audit log on agent.run completion or agent.abort. The runtime supplies the audit emitter — the primitive itself is storage-agnostic.

Parameters

Parameter	Type
reason	"agent.run.complete" | "agent.abort"

Returns

{
  chain: readonly string[];
  reason: "agent.run.complete" | "agent.abort";
}

Name	Type	Defined in
chain	readonly string[]	packages/agent/src/lateral-leak/causality-monitor.ts:216
reason	"agent.run.complete" | "agent.abort"	packages/agent/src/lateral-leak/causality-monitor.ts:217

---

recordCall()

recordCall(entry): void;

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:110

Append an entry to the causality chain, dropping the oldest when the chain exceeds maxChainDepth. Bounded-length, no PII, no secret values — entries are short opaque strings like tool:slack-notify, tool.error:SecretAccessDenied, subagent:research-east, compaction:auto-trigger.

Parameters

Parameter	Type
entry	string

Returns

void

---

reset()

reset(): void;

Defined in: packages/agent/src/lateral-leak/causality-monitor.ts:120

Reset the chain — e.g. on agent.run boundary.

Returns

void