# Blekline Docs (llms-full.txt)
# https://app.blekline.com/docs/introduction/nhim

NHIM and runtime enforcement for production AI agents — mask secrets, enforce tool policy, block contaminated lineage, metadata-only audit at the MCP, SDK, and ingress sidecar boundary.

Marketing index: https://blekline.com/llms.txt
OSS: https://github.com/Blekline/blekline-oss
Last-Updated: 2026-08-06
Sidecar image: ghcr.io/blekline/sidecar:0.2.1-nhim
NHIM audit: @blekline/nhim-audit@0.2.1

## Get started
- /docs/get-started/eval-journey — Track 0→3 eval sequence
- /docs/get-started/nhim-audit-quickstart — static K8s audit, no account
- /docs/get-started/mcp-eval — MCP self-serve eval (Track 03)
- /docs/introduction/quick-start — workspace token, first mask
- /docs/introduction/troubleshooting — FAQ

## Core concepts
- /docs/introduction/nhim — NHIM hub, shipped/roadmap
- /docs/introduction/interaction-governance — runtime enforcement
- /docs/introduction/egress-governance — agent egress topology
- /docs/introduction/architecture — control plane + integrations
- /docs/introduction/ai-enablement-stack — 5-layer stack
- /docs/introduction/eu-ai-act — EU AI Act evidence (not certification)
- /docs/introduction/why-ingress — why ingress boundary

## Deploy
- /docs/tools/nhim-audit — NHIM Audit CLI (NHIM-001..019, schema 2.0)
- /docs/deploy/k8s-fleet — Kubernetes fleet eval
- /docs/deploy/docker-sidecar — Docker sidecar eval
- /docs/deploy/ci-nhim-gate — CI merge gate
- /docs/enterprise/k8s-deployment — Helm + mutating webhook auto-inject
- /docs/enterprise/deployment — VPC, sidecar, fleet MCP
- /docs/api/ingress-proxy — ingress proxy / sidecar API

## Playground
- /docs/playground/runtime-enforcement — runtime simulator

## MCP clients
- /docs/mcp/cursor
- /docs/mcp/claude-code
- /docs/mcp/claude-desktop
- /docs/mcp/claude-connector
- /docs/mcp/codex
- /docs/mcp/continue
- /docs/mcp/github-copilot
- /docs/mcp/openhands
- /docs/mcp/sourcegraph-cody
- /docs/mcp/server — @blekline/mcp-server
- /docs/mcp/proxy — @blekline/mcp-proxy
- /docs/mcp/model-matrix — client compatibility QA

## SDK
- /docs/sdk/typescript
- /docs/sdk/python
- /docs/sdk/ci-cd

## Integration hubs
- /docs/integrations/agent-clients
- /docs/integrations/model-providers
- /docs/integrations/frameworks-and-rag
- /docs/integrations/eval-and-safety
- /docs/integrations/sandbox-providers

## Model providers
- /docs/integrations/azure-openai-stack
- /docs/integrations/aws-bedrock-stack
- /docs/integrations/google-vertex-stack
- /docs/integrations/openrouter-stack
- /docs/integrations/together-stack
- /docs/integrations/fireworks-stack
- /docs/integrations/mistral-stack
- /docs/integrations/cohere-stack
- /docs/integrations/replicate-stack
- /docs/integrations/qwen-stack

## Frameworks and RAG
- /docs/integrations/langchain-stack
- /docs/integrations/llamaindex-stack
- /docs/integrations/pydantic-ai-stack
- /docs/integrations/taskweaver-stack
- /docs/integrations/relevance-ai-stack
- /docs/integrations/supabase-stack
- /docs/integrations/chroma-stack
- /docs/integrations/pinecone-stack
- /docs/integrations/contextual-ai-stack

## Eval and safety
- /docs/integrations/langsmith-stack
- /docs/integrations/guardrails-stack
- /docs/integrations/coderabbit

## Sandbox providers
- /docs/integrations/daytona-stack
- /docs/integrations/modal-stack
- /docs/integrations/e2b-stack
- /docs/integrations/cloudflare-stack
- /docs/integrations/vercel-sandbox-stack
- /docs/integrations/browser-extension

## Enterprise
- /docs/enterprise/trust-vault-sidecar
- /docs/enterprise/lineage-enforcement
- /docs/enterprise/nhim-verification
- /docs/enterprise/reference-architecture
- /docs/enterprise/shadow-mcp-detection
- /docs/enterprise/compliance-evidence
- /docs/enterprise/procurement-pack
- /docs/enterprise/telemetry
- /docs/enterprise/multi-region
- /docs/enterprise/sso-deployment
- /docs/enterprise/cursor-heavy-users
- /docs/enterprise/cursor-enterprise

## Architecture & security
- /docs/security/trust-boundaries — claims source of truth
- /docs/security/threat-model
- /docs/security/mcp-identity-pinning
- /docs/reference/benchmarks — lab B1–B8
- /docs/reference/telemetry-spec
- /docs/reference/latency-slo

## API
- /docs/api/mask — POST /api/mask
- /docs/api/openapi — OpenAPI 3.1
- /docs/api/ingress-proxy

## Meta
- /docs/changelog
- /docs/definitions — glossary

## Packages (npm / ghcr)
- @blekline/nhim-audit@0.2.1
- @blekline/contracts
- @blekline/client
- @blekline/mcp-server
- @blekline/mcp-proxy
- @blekline/cursor-hooks
- ghcr.io/blekline/sidecar:0.2.1-nhim
- ghcr.io/blekline/admission:0.2.1-nhim