Skip to main content
Glama
dingdawg-governance

dingdawg-governance

by dingdawg

DingDawg Governance SDK — Universal governance layer for AI agents

CI npm version PyPI version License: Apache 2.0

Any agent. Any framework. Governed by default.


What it does

Every AI agent action — writing files, calling APIs, sending emails, modifying data — executes without a receipt. You don't know what ran, what was blocked, or why.

DingDawg Governance adds a pre-execution gate that:

  • Blocks policy violations before they execute — fail-closed, not fail-open

  • Generates LNN causal traces — interpretable reasoning chain for every decision

  • Issues IPFS audit proofs — tamper-evident receipts pinned to distributed storage

  • Supports rollback — every governed action carries enough context to reverse it

  • Assigns @handle identities — agents get a governed identity (@billing-agent, @hr-screener) with a full action history tied to that handle


Related MCP server: dingdawg-loop

Regulated niches

Built for frameworks where AI agent decisions carry legal weight:

Industry

Regulation

Healthcare

HIPAA — PHI access, treatment decision logging

Insurance / Fintech

State regulations, adverse action documentation

Employment

CO SB 205, EEOC — automated hiring decision audit

Legal

Chain-of-custody, privileged data access controls

Edtech

FERPA — student data access receipts


Install

npm install dingdawg-governance
pip install dingdawg-loop

Quick start — Claude Code (MCP config)

Add to ~/.claude/mcp.json or project-level .mcp.json:

{
  "mcpServers": {
    "dingdawg-governance": {
      "command": "npx",
      "args": ["dingdawg-governance"],
      "env": {
        "DINGDAWG_API_KEY": "your-api-key"
      }
    }
  }
}

Without an API key, all tools work locally. Receipts stored at ~/.dingdawg/governance/receipts/.


Quick start — Python (scheduled governed agents)

from dingdawg_loop import schedule_governed

@schedule_governed(
    agent_id="@data-sync-agent",
    cron="0 * * * *",
    risk_tier="medium"
)
def sync_records():
    # Your agent logic here
    pass

Two lines. Every execution is pre-checked, receipted, and fail-closed. If governance denies, the function does not run.


MCP tools (6)

Tool

What it does

govern_action

Pre-execution gate — evaluates risk, issues receipt, blocks on violation

audit_trail

Retrieve receipts by agent handle, time range, or receipt ID

compliance_check

Score against EU AI Act, CO SB 205, NIST AI RMF, ISO 42001

rollback_action

Reverse a governed action using its receipt context

register_agent

Assign a governed @handle identity to an agent

ipfs_proof

Retrieve or pin IPFS audit proof for a receipt


Open-core model

Layer

License

Where

SDK core (govern, audit, compliance)

Apache 2.0

This repo

LNN causal trace engine

Cloud only

dingdawg.com/harness

IPFS proof pinning

Cloud only

dingdawg.com/harness

Team audit trail + cross-agent history

Cloud only

dingdawg.com

Compliance report PDFs (certified)

Paid tier

dingdawg.com/compliance

The core gate runs fully offline. Cloud unlocks team visibility, IPFS pinning, and certified compliance reports.


Examples

Runnable examples in examples/:

File

What it shows

Regulated use case

01-basic-governance.js

govern_action via MCP JSON-RPC subprocess

Fintech — payment transfer gate

02-python-scheduled-agent.py

@schedule_governed decorator with cron

Healthcare — HIPAA PHI sync

03-crewai-integration.py

CrewAI agents wrapped with governance

Employment — CO SB 205 hiring audit

04-claude-code-mcp-config.json

Drop-in .mcp.json config

All regulated verticals

Each example includes expected output as comments and the governance receipt structure.


Available Tools

3 tools
audit_trailB

Get the governance audit trail. Returns governance receipts from local storage or cloud API. Free to use.

Inputs: receipt_id, agent_id, time_range, limit.

compliance_checkA

Quick compliance check against common AI governance frameworks. Free tier: 10 checks per day. Evaluates against EU AI Act, Colorado AI Act, NIST AI RMF, and ISO 42001.

Inputs: system_description (required), framework, deployment_stage.

govern_actionA

Govern any AI agent action. Performs capability check + policy evaluation + generates a governance receipt. Returns a receipt proving the action was governed. When API key is set, uses cloud API with local fallback.

Inputs: agent_id (required), action_type (required), action_description (required), target_resource, +2 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    A3.8/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool serves a distinct function: audit_trail for retrieving records, compliance_check for framework evaluation, and govern_action for governing an action. No overlap in purposes.

    Naming Consistency5/5

    All tool names follow a consistent verb_noun pattern with snake_case: audit_trail, compliance_check, govern_action. Predictable and uniform.

    Tool Count5/5

    Three tools is ideal for a focused governance server, covering auditing, compliance checks, and action governance without redundancy or bloat.

    Completeness4/5

    The set covers core governance workflows (audit, compliance, action governance). Minor gaps exist (e.g., no tool to manage or delete receipts), but the surface is coherent and functional for its scope.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      F
      maintenance
      Governance kernel for AI agents — policy enforcement, code safety verification, multi-model hallucination detection (CMVK), trust attestation (IATP), and immutable audit trails. Works with Claude Desktop, Cursor, and any MCP client.
      74
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      DingDawg Loop Protocol (DDLP) — safe scheduled AI agents with governance gates. Every loop execution is verified, receipted, and fail-closed. MCP-native, works with CrewAI, LangGraph, Claude Code, Cursor.
      62 npm
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Fail-closed AI agent governance — approve or block agent actions in real time, score compliance risk, and generate tamper-evident receipts. Free tier: 10 governed actions/day. Upgrade for unlimited + Ed25519-signed audit receipts.
      1
      MIT
    • A
      license
      B
      quality
      B
      maintenance
      A governance proxy for AI tools — every MCP/agent tool call is policy-gated, secret-redacted, and written to a hash-chained, offline-verifiable audit trail.
      13
      MIT