governance-as-code

Governance-as-Code for AI agents. Declarative constraints with deterministic enforcement. Provisioning Identity, Tool-based rules, Brokering Credentials & Ensuring safe deployment

This Bicep module helps to automate resource name generation following the recommended naming convention and abbreviations for Azure resource types.

Governance-enforced Requirements Engineering für KRITIS, NIS2 und DORA. Claude-Skill mit EARS, Gherkin, STRIDE, F-Stufen und Phase Gates.

Seiso's Grand Opinionated AutoTester (GOAT)

Source Governance for OpenTelemetry: Policy-based Sampling

This GitHub repository shows data collection and analysis for “Regulatory Fragmentation” paper by Kalmenovitz, Lowry and Volkova, The Journal of Finance (Forthcoming)

Atlas is a transport-protcol-agnostic P2P decentralized publishing and discovery protocol where users own their data and govern it to converge into structured, interoperable databases, empowering users and developers.

Zero-trust security and governance framework for autonomous multi-agent AI networks. Implements the CSA Agentic Trust Framework to mitigate OWASP Top 10 Agentic Risks using SPIFFE/SPIRE identities, OPA/Rego policy-as-code, and semantic guardrail gateways.

Lean governance for AI-assisted development: requirements tracking, test enforcement, epistemic context compression, auditable evidence, Grace local REPL, and coding-agent integrations.

Human-in-the-loop governance middleware preventing AI hallucination at the Git level.

GovSCH is an Open-Source Schema for Authoring Cybersecurity & AI Governance Documents

Graph engineering: run AI-agent workflows as governed graphs — specs, human gates, agent registries, and a CI validator. A linter for your agent fleet's governance.

Document Context Protocol (DCP)

An open-source modeling language and static risk scanner for secure AI agents, MCP servers, and A2A integrations. Model agent boundaries before they act.

This project allows data science teams to orchestrate their model governance processes. Ensuring models built for production environments are gated properly with the adequate flags pointing to data and/or model artefacts to review.

GRC, Compliance, ISO27001, SOC2, NIST-CSF, AI-Governance, ISO 42001, EU-AI-Act, DevSecOps, Risk-Management, Security-Automation

🚀🛡️ Enterprise governance framework designed to reduce operational risk, governance drift, audit exposure, and recovery time through AI governance, HITL/HOTL controls, auditable decision trails, and evidence-driven operations.

AI-powered code refactoring assistant: A bot that automatically suggests and applies code refactors based on best practices and performance improvements.

Solid Stadi Diccionaryo (aka Permafrost)

It is a defensive runtime and language stack where execution, side effects, policy, proof, authority, audit, mutation, symbolic constraints, and build outputs are treated as governable surfaces.