HELM SDK - Rust
Typed Rust client for the retained HELM kernel API.
Install
Package metadata declares crate version 0.7.5 in Cargo.toml; verify registry
state before publishing a pinned install claim.
Local Development
Generated Sources
src/types_gen.rs is generated from api/openapi/helm.openapi.yaml.
Protobuf bindings under src/generated/ are generated from
protocols/proto/; the codegen feature can rebuild them with
tonic-build.
Usage
use ;
Execution Boundary Methods
HelmClient includes calls for evidence envelope manifests, boundary records
and checkpoints, conformance vectors, MCP quarantine and authorization
profiles, sandbox profiles and grants, authz snapshots, approvals, budgets,
telemetry export, and coexistence capabilities. SandboxGrantInspection
returns either backend profiles or a sealed grant depending on whether a
runtime query is provided.
Release Notes
0.7.5 is a security patch: fail-closed production receipt signing and a golang.org/x/text update for GO-2026-5970. The kernel's Boundary Enforcement Profile is retained, along with the OpenAPI client surface and optional protobuf codegen.