Initial commit: Elydora Open Source — self-hosted audit platform for AI agents

Full self-hosted port of the Elydora tamper-evident audit protocol:
- Hono API server with PostgreSQL, Redis, MinIO adapters
- Ed25519 signed operations, chain hashing, Merkle epoch rollups
- PBKDF2 password hashing, HMAC-SHA256 JWT, 5-role RBAC
- Next.js management console
- Node.js, Python, and Go SDKs
- Docker Compose for local deployment
- Helm chart for Kubernetes
- Comprehensive security hardening and audit fixes applied

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sdks/go/agents.go

@@ -0,0 +1,64 @@
+package elydora
+
+import (
+	"fmt"
+	"net/http"
+)
+
+// RegisterAgent registers a new AI agent within the organization.
+func (c *Client) RegisterAgent(req *RegisterAgentRequest) (*RegisterAgentResponse, error) {
+	var result RegisterAgentResponse
+	if err := c.doPost("/v1/agents/register", req, &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+// GetAgent retrieves an agent by ID.
+func (c *Client) GetAgent(agentID string) (*GetAgentResponse, error) {
+	var result GetAgentResponse
+	if err := c.doGet(fmt.Sprintf("/v1/agents/%s", agentID), &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+// FreezeAgent freezes an agent, preventing it from submitting operations.
+func (c *Client) FreezeAgent(agentID, reason string) error {
+	return c.doPost(fmt.Sprintf("/v1/agents/%s/freeze", agentID), &FreezeAgentRequest{
+		Reason: reason,
+	}, nil)
+}
+
+// RevokeKey revokes a specific key for an agent.
+func (c *Client) RevokeKey(agentID, kid, reason string) error {
+	return c.doPost(fmt.Sprintf("/v1/agents/%s/revoke", agentID), &RevokeAgentRequest{
+		KID:    kid,
+		Reason: reason,
+	}, nil)
+}
+
+// ListAgents retrieves all agents for the organization.
+func (c *Client) ListAgents() (*ListAgentsResponse, error) {
+	var result ListAgentsResponse
+	if err := c.doGet("/v1/agents", &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}
+
+// UnfreezeAgent unfreezes a previously frozen agent.
+func (c *Client) UnfreezeAgent(agentID, reason string) error {
+	return c.doPost(fmt.Sprintf("/v1/agents/%s/unfreeze", agentID), &UnfreezeAgentRequest{
+		Reason: reason,
+	}, nil)
+}
+
+// DeleteAgent permanently deletes an agent and all associated data.
+func (c *Client) DeleteAgent(agentID string) (*DeleteAgentResponse, error) {
+	var result DeleteAgentResponse
+	if err := c.doRequest(http.MethodDelete, fmt.Sprintf("/v1/agents/%s", agentID), nil, &result); err != nil {
+		return nil, err
+	}
+	return &result, nil
+}