update orchestrator logic

src/agents/orchestrator/agent.py

@@ -34,7 +34,7 @@ class OrchestratorCoordinator(BaseAgent):
         with open(md_path, "r", encoding="utf-8") as f:
             self._system_prompt = f.read()
         
-        # client is instantiated dynamically in invoke()
+        self._client = genai.Client()
         self._red_team = RedTeamAttacker()
         self._blue_team = BlueTeamDefender()
         self._green_team = GreenTeamFixer()
@@ -45,48 +45,56 @@ class OrchestratorCoordinator(BaseAgent):
         retry=retry_if_exception(is_503_error),
         reraise=True
     )
-    async def invoke(self, prompt: str, **kwargs) -> str:
+    async def invoke(self, prompt: str) -> str:
         """Runs the 3-phase A2A simulation based on the prompt (target context)."""
-        api_key = kwargs.get("api_key")
         
         simulation_report = {
             "simulation_id": "sim-uuid",
             "phases": {
                 "attack": {"ocsf_event": {}, "attack_vector": ""},
-                "evaluate": {"ocsf_finding": {}, "agent_trust_score": 0.0, "circuit_breaker_tripped": False},
+                "evaluate": {"ocsf_finding": {}, "agent_trust_score": 1.0, "circuit_breaker_tripped": False},
                 "remediate": {"vibe_diff": "", "hitl_approved": False, "quarantine_status": "", "refactored_code": ""}
             },
             "jit_tokens_issued": [],
-            "simulation_outcome": "PENDING_HITL"
+            "simulation_outcome": "DETECTED"
         }
         
         # Phase 1: Attack (Red Team)
-        red_output = await self._red_team.invoke(prompt, api_key=api_key)
+        red_output = await self._red_team.invoke(prompt)
         # Validate and store
         red_event = NetworkActivityEvent.model_validate_json(red_output)
         simulation_report["phases"]["attack"]["ocsf_event"] = red_event.model_dump()
         
         if red_event.unmapped:
-             simulation_report["phases"]["attack"]["attack_vector"] = red_event.unmapped.attack_vector
+            simulation_report["phases"]["attack"]["attack_vector"] = red_event.unmapped.attack_vector
 
         # Phase 2: Evaluate (Blue Team)
-        blue_output = await self._blue_team.invoke(red_output, api_key=api_key)
+        blue_output = await self._blue_team.invoke(red_output)
         # Validate and store
         blue_finding = DetectionFindingEvent.model_validate_json(blue_output)
         simulation_report["phases"]["evaluate"]["ocsf_finding"] = blue_finding.model_dump()
         
         trust_score = 1.0
         if blue_finding.unmapped:
-            trust_score = blue_finding.unmapped.agent_trust_score
+            # Recalculate trust score deterministically from ABA results.
+            # Never rely on the LLM's self-reported trust score — it hallucinates.
+            aba = blue_finding.unmapped.aba_check_results
+            violations = sum([
+                aba.agbom_violation,
+                aba.execution_loop_detected,
+                aba.prompt_injection_detected,
+                aba.semantic_drift_detected,
+            ])
+            trust_score = round(max(0.0, 1.0 - violations * 0.3), 1)
+            circuit_breaker = trust_score < 0.4
             simulation_report["phases"]["evaluate"]["agent_trust_score"] = trust_score
-            simulation_report["phases"]["evaluate"]["circuit_breaker_tripped"] = blue_finding.unmapped.circuit_breaker_recommendation
+            simulation_report["phases"]["evaluate"]["circuit_breaker_tripped"] = circuit_breaker
         
         # Phase 3 — HITL gate
         if trust_score < 0.4:
             # Generate Vibe Diff using gemini-2.5-flash
             vibe_diff_prompt = f"System: {self._system_prompt}\nTranslate this proposed remediation into a plain-English Vibe Diff:\n{blue_output}"
-            client = genai.Client(api_key=api_key)
-            vibe_diff_response = client.models.generate_content(
+            vibe_diff_response = self._client.models.generate_content(
                 model='gemini-2.5-flash',
                 contents=vibe_diff_prompt
             )
@@ -105,7 +113,7 @@ class OrchestratorCoordinator(BaseAgent):
                     "jit_token": jit_token
                 })
                 
-                green_output = await self._green_team.invoke(green_input, api_key=api_key)
+                green_output = await self._green_team.invoke(green_input)
                 green_event = RemediationActivityEvent.model_validate_json(green_output)
                 
                 if green_event.unmapped: