policy-as-code

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

GAMECHANGER aspires to be the Department’s trusted solution for evidence-based, data-driven decision-making across the universe of DoD requirements

Automate GitHub Actions allow list for GitHub Enterprise Cloud accounts

Reads your Terraform plan and Kubernetes changes and posts a plain-English risk summary on every pull request, blocking the dangerous ones

Local-first control layer for AI coding agents. Cap routed spend, constrain mission scope, and require CI replay before an AI-generated PR earns merge eligibility.

Syntax highlighting for Rego

User Interface application for rode that enables metadata discovery and policy creation/evaluation.

Policy gate and tamper-evident lineage log for AI coding agents. Decides before the agent acts, drops its trust after it reads untrusted content, and signs every decision into a Merkle log you can verify offline.

VELLA = Verifiable Evidence Ledger & Logic Authority; deterministic pre-execution authorization and signed proof for AI agents and automated workflows.

Advanced Conftest GitHub Action for Terraform, Kubernetes, Helm & Dockerfile policy scanning with SARIF, GitHub Security, Slack, Teams and Google Chat notifications.

面向 AI 编程工作流的确定性仓库治理工具：让 Git Hooks、GitHub Actions、Codex 与 Claude Code 执行同一套版本锁定规则，统一测试证据、命令契约、架构边界、任务范围与比例工程门禁。Deterministic repository governance for Git hooks, CI, Codex, and Claude Code — version-pinned rules for tests, architecture, task scope, and proportional engineering.

Policy-as-code checks for LLM agent tool-call traces

Offline verifier and GitHub Action for signed, revision-bound change gates; the private decision engine is not published.

bouncer — static compliance-controls checker (UK Online Safety Act & ICO Children's Code) as deterministic rule packs. CLI + MCP. No LLM.

GitHub-native governance automation — policy-as-code, rule enforcement, and compliance gatekeeping.

Fail the build when an AI agent gains a permission nobody signed off on — irreversible actions cleared to run live, high-risk actions with no rollback path.

Live consumer-repository proof for Runcap: a pinned CI gate that makes AI-generated pull requests earn merge eligibility.

Open, regulation-agnostic grammar for expressing legal obligations as typed predicates over a verifiable evidence corpus — the OSCAL-adjacent EU-obligation layer. CC0.

Dependency-free, path-aware pull-request policy contracts for maintainers and AI-assisted repositories.

Governance hooks for Claude Code — deterministic rules + LLM judgement that block destructive commands and hallucinated 'done' reports. Open-source client for the Kyntra AIMOps Control Tower (patent pending).