Skip to main content
Glama
Sign In
AI Governance Chain

AI Governance Chain

by mathieugouanou
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

AI Governance Chain

Can you stop your AI agent, and prove it? Open data and tools that turn the world's AI laws into checks your code, your agents and your CI can run.

Licence: Apache-2.0 Data: CC BY 4.0 Spec: ai-governance/v0.1 Atlas as of 4 Nov 2026 Status: alpha

Run it now. Needs Node 18 or newer. Nothing to install, no account, no API key.

npx github:mathieugouanou/aigovernancechain jail

In 30 seconds you watch the rules in an AI_GOVERNANCE.md file stop a misbehaving agent:

Agent Jail: AI_GOVERNANCE.md rules blocking a misbehaving agent

Pick your door

Developers

Leaders

Public bodies

Check every pull request against your AI_GOVERNANCE.md with the Shield Action, and ask which rules hit a feature with scope.

Five plain questions to ask your team, each answered by a file or a command: Ask your team.

Obligations for public bodies, model procurement clauses and a transparency record template: Public-sector edition.

Find which rules apply to your system in your browser: aigovernancechain.com

LAW  ->  OBLIGATION  ->  CONTROL  ->  GATE  ->  EVIDENCE  ->  OVERSIGHT
what      what you         what you     what CI    what you      who can stop
applies   must do          built        checks     can prove     the system

"Chain" means a chain of accountability, from the law to the person who can press stop. There is no blockchain.

Try it in 60 seconds

# Which AI rules apply to a chatbot agent you run in the EU and California?
npx github:mathieugouanou/aigovernancechain scope -j EU,US-CA -r deployer -u chatbot,agent

# Write an AI_GOVERNANCE.md for your repo, then check it
npx github:mathieugouanou/aigovernancechain init
npx github:mathieugouanou/aigovernancechain check

Related MCP server: AI Compliance Calendar MCP Server

What is in the repository

Piece

What it does

Start here

Obligation Atlas

198 cited obligations from 17 regime files covering the 12 Tier-1 regimes: EU, US federal, US states (CA, CO, TX, NY, NYC, IL), China, South Korea, Japan, Vietnam, India, UK, Singapore, Switzerland, Council of Europe

atlas/ · FORMAT.md

Regime cards

One page per regime: who it hits, dates, every obligation with its source

cards/

Deadline calendar

300 dated events. Subscribe once, get updates when dates move

DEADLINES.md · https://aigovernancechain.com/deadlines.ics

AI_GOVERNANCE.md standard

One file that tells people, agents and CI how an AI system is governed. Draft spec, JSON schema, generator

spec/

aigovchain CLI

scope, deadlines, init, check, badge, evidence, atlas, ctf, jail, bench, mcp, policy, aibom

npx github:mathieugouanou/aigovernancechain help

Shield GitHub Action

17 checks on every PR from @v0.3.0, including a drift check of the agent config in the repository (check 17; @v0.2.0 runs 16), job summary, SARIF in code scanning, Evidence Pack artifact

action/

MCP server

Lets any MCP-capable agent query the Atlas and check files

below

Agent Skills

ai-law-check, ai-governance-md, agent-oversight in the open Agent Skills format

skills/

Agent rails

Zero-dependency runtime guard for agents in JavaScript and Python: default deny, limits, human approval, spend limit, kill switch, prompt-injection boundaries, least-privilege identities, read-only SQL, circuit breaker, memory write sources, decision log. JavaScript also screens manipulative messages and marks generated content

rails/ · sdk/python

Policy packs (OPA and Cedar)

Compile the agent rules to Open Policy Agent Rego or Cedar. CI checks that rails, OPA and Cedar decide the same on 600 requests

aigovchain policy --target rego · spec section 3.1

AI-BOM generator

Inventory of declared models, datasets and dependencies as CycloneDX 1.6 or SPDX 3.0.1 (AI and Dataset profiles)

aigovchain aibom --format cyclonedx · spec section 3.2

Fact-based badges

AI_GOVERNANCE.md 16/16 checks. States checked facts, never "certified"

spec section 6

Evidence Pack

Dated, hashed bundle of what was declared and checked, ready to attest

aigovchain evidence

Crosswalks

32 controls mapped to the EU AI Act, NIST AI RMF, ISO/IEC 42001 Annex A and the OWASP Agentic Top 10

crosswalks/

GovBench

549 questions testing whether AI models know when AI rules apply and where they are written

govbench/

AI Governance CTF

Break a toy agent, fix it with AI_GOVERNANCE.md. Levels 01 to 10 live

ctf/

Public-sector edition

Obligations for public bodies, procurement clauses, transparency record template

editions/public-sector/

Translations

Quickstart in French, German, Italian, Spanish and Brazilian Portuguese

i18n/

Who it is for

  • Developers: know which rules hit your feature before you ship it, and keep the answer in the repo.

  • Agent builders: put hard limits outside the model. A prompt is not a control.

  • Leaders and boards: five questions to ask your team, each answered by a file or a command. Start with Ask your team.

  • Risk, legal and audit teams: one cited dataset, one file per system, evidence generated by CI.

  • Public bodies: procurement clauses and transparency records built on the same data.

  • Researchers and model builders: GovBench and an open, versioned dataset of AI obligations.

Add it to your repo

GitHub Action (.github/workflows/ai-governance.yml):

name: AI governance
on: [pull_request, push]
permissions: { contents: read }
jobs:
  shield:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: mathieugouanou/aigovernancechain/action@v0.3.0

Badge (after aigovchain badge writes .governance/badge.json and you commit it):

[![AI_GOVERNANCE.md](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/OWNER/REPO/main/.governance/badge.json)](AI_GOVERNANCE.md)

MCP server

{
  "mcpServers": {
    "aigovernancechain": { "command": "npx", "args": ["-y", "github:mathieugouanou/aigovernancechain", "mcp"] }
  }
}

Tools: scope_check, upcoming_deadlines, atlas_search, atlas_get_obligation, atlas_get_regime, atlas_list_regimes, check_ai_governance_md, generate_ai_governance_md. All read-only.

Agent rails

import { createRails } from 'aigovernancechain/rails';   // npm install github:mathieugouanou/aigovernancechain
const rails = createRails({ file: 'AI_GOVERNANCE.md', approver: askHuman });
const refund = rails.guard('issue_refund', issueRefund, { amount: a => a.amount });
from aigovchain_rails import Rails   # pip install "git+https://github.com/mathieugouanou/aigovernancechain#subdirectory=sdk/python"
rails = Rails.from_file("AI_GOVERNANCE.md", approver=ask_human)

Status and trust

  • Alpha. Every regime file is marked draft-unreviewed until a named expert reviewer signs it off. Each Tier-1 regime has an open reviewer seat.

  • Dated and cited. Every obligation has an "as of" date, a primary source link and a confidence level (high, medium, low). Dates move; the changelog records each change.

  • Not legal advice. The data helps you find and track obligations. It does not tell you whether you comply. See DISCLAIMER.md.

  • Honest outputs. Tools state facts ("14/16 checks passed"). Nothing here certifies anyone.

  • AI-assisted. Much of v0.1 was drafted with AI assistance and checked against primary sources by a human. Details in this repo's own AI_GOVERNANCE.md.

Roadmap

Release

Date

Focus

v0.1

4 Nov 2026

Atlas, cards, calendar, standard, CLI, Shield Action, MCP server, rails, skills, CTF 01 to 03

v0.2

9 Nov 2026

Shipped early from v1: policy packs (OPA/Cedar), AI-BOM generator, CTF levels 04 to 10, new agent rules

v0.3

13 Nov 2026

Shipped early from v1: check 17 in the Shield Action. Also the Ask your team page for leaders and the files to list the project on GitHub Marketplace and the MCP Registry

v1

30 Nov 2026

Neutral charter in force, GitHub organisation, foundation application, attestation recipe (Sigstore), first Tier-2 regimes, weekly Law Diff releases

v2

18 Jan 2027

Signed badges backed by attestations, OpenTelemetry governance events, red-team runner, Annex IV and NIST exporters, CTF levels 11 to 20, 15 languages

All 37 planned ideas and their dates: ROADMAP.md.

Help wanted

Governance and neutrality

The project runs under a neutral technical charter and is preparing an application to a neutral open-source foundation by 30 Nov 2026. No paid features live in this repository.

Disclosure. The founder, Mathieu K. Gouanou, also offers commercial AI-governance products and services, including the instrument library that used to live in this repository. That library moved to mathieugouanou/aigovernancechain-library under its original licence. This repository stays vendor-neutral; see CHARTER.md for conflict-of-interest rules.

Licence

Code: Apache-2.0. Data, documentation and the AI_GOVERNANCE.md specification: CC BY 4.0. See NOTICE and TRADEMARK.md. Cite with CITATION.cff.

If this saved you time, a star helps other teams find it.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers

    • ai-act-mcp

      a2welt
      A
      license
      A
      quality
      D
      maintenance
      Enables EU AI Act compliance assessment by classifying AI systems, listing obligations, computing deadlines, and scanning repos for required documentation, all running locally.
      4
      2
      MIT

    • conformite-ia-mcp

      AgentIA1984-cmd
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides an AI agent with regulatory compliance tools for the French/European market based on the AI Act and GDPR, including system classification, obligation listing, deadline schedules, legal reference lookup, and GDPR crosschecks.
      -

    • Clearon AI Legal Watch MCP

      kwgoodwin
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables review-gated, local-first monitoring of AI legislation, regulations, litigation, sanctions, court rules, and ethics guidance by collecting and verifying leads from official sources, managing human review workflows, and generating digests and exports.
      MIT