fix(sdk): keep JWT runtime evaluation target-bound

Author: abhinav-galileo

sdks/python/src/agent_control/evaluation.py

@@ -229,7 +229,7 @@ async def _post_evaluation_request(
 ) -> httpx.Response:
     """Send an evaluation request, using runtime auth when the client supports it."""
     runtime_post = None
-    if target_type is not None and target_id is not None:
+    if (target_type is not None and target_id is not None) or client.runtime_auth_mode == "jwt":
         runtime_post = _runtime_post_evaluation(client)
     if runtime_post is not None:
         return await runtime_post(

sdks/python/tests/test_local_evaluation.py

@@ -11,6 +11,7 @@
 from typing import Any
 from unittest.mock import AsyncMock, MagicMock, patch
 
+import httpx
 import pytest
 from agent_control.client import AgentControlClient
 from agent_control.evaluation import (
@@ -418,6 +419,41 @@ async def test_mock_client_with_runtime_method_uses_runtime_auth_path(
         client.post_runtime_evaluation.assert_awaited_once()
         client.http_client.post.assert_not_called()
 
+    @pytest.mark.asyncio
+    async def test_jwt_runtime_client_without_target_raises(
+        self,
+        agent_name,
+        llm_payload,
+    ) -> None:
+        """JWT runtime mode requires target context through local evaluation."""
+        controls = [
+            make_control_dict(1, "server_ctrl", execution="server"),
+        ]
+        sent_requests: list[httpx.Request] = []
+
+        def handler(request: httpx.Request) -> httpx.Response:
+            sent_requests.append(request)
+            return httpx.Response(200, json={"is_safe": True, "confidence": 1.0})
+
+        transport = httpx.MockTransport(handler)
+
+        async with AgentControlClient(
+            base_url="https://agent-control.test",
+            api_key="test-key",
+            runtime_auth_mode="jwt",
+            transport=transport,
+        ) as client:
+            with pytest.raises(RuntimeError, match="requires target_type and target_id"):
+                await check_evaluation_with_local(
+                    client=client,
+                    agent_name=agent_name,
+                    step=llm_payload,
+                    stage="pre",
+                    controls=controls,
+                )
+
+        assert sent_requests == []
+
     @pytest.mark.asyncio
     async def test_server_only_template_backed_controls_still_call_server(
         self,