synomosai-governance-mcp
This MCP server provides zero-dependency, audit-traceable AI governance assessment tools for AI agents and their builders (self-assessment artifacts, not third-party certification).
a3_assess— Score an AI action or agent on four A³ dimensions (intent, impact, reversibility, oversight; 1–5 each, max 20) and get a release / conditional / reject verdict with reasoning.audit_evidence_chain— Generate six ISO/IEC 42001 + NIST AI RMF evidence-artifact templates (decision log, risk register, model card, change record, human-oversight proof, incident ledger) for a named system.compliance_checklist— Produce a registration-readiness checklist referencing EU AI Act 2024/1689, GB/Z 185, ISO/IEC 42001, and PIPL/GDPR.passport_lookup— Look up an agent/skill identity code and provenance fields against a local ledger.gov_scan— Screen text for PII (phones, emails), local paths, credential-like strings, API-key fingerprints (ghp_,sk-,AKIA), copyright-fingerprint gaps, and optional named-entity watchlists.lgd_knowledge— Retrieve LGD doctrine (three laws, three checks, canonical DOI/repo) and route domain queries (finance, evidence, government, crypto, driving, data, low-altitude, robotics, industrial, biomedical, education, medical-device) to the matching paper.
Every response carries a trace_id and timestamp, with optional append-only JSONL audit logging.
Provides an integration contract for app backends such as WeChat Mini Programs, enabling them to connect to the governance assessment tools.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@synomosai-governance-mcprun an A³ assessment on my AI project"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.

SynomosAI Governance MCP
AI governance assessment tools for AI agents and their builders. Pure Python stdlib, zero dependencies, zero network egress, audit-traceable.
Part of the UBIC Protocol — the personhood-registry layer for AI agents (who an AI is, who forged it, under whose sovereignty it lives). Spec: https://github.com/Medxpert-org/ai-passport-spec/blob/main/protocol/UBIC-Protocol-v0.1.md
Tools
Tool | What it does |
| A³ four-dimension scorecard (intent / impact / reversibility / oversight, 1–5 each, total 20) → release / conditional / reject, with reason |
| Six ISO/IEC 42001 + NIST AI RMF evidence-artifact templates (decision log, risk register, model card, change record, human-oversight proof, incident ledger) |
| Registration-readiness checklist referencing EU AI Act (Regulation (EU) 2024/1689) clauses, GB/Z 185, ISO/IEC 42001, PIPL/GDPR |
| Passport / identity-code lookup against a local ledger |
| Text screening: phone numbers, emails, local paths, credential-like strings ( |
| LGD doctrine knowledge endpoint (v1.1.0): returns the three laws / three checks / canonical DOI & repo, routes domain queries (finance, evidence, government, crypto, driving, data, low-altitude, robotics, industrial, biomedical, education, medical-device registration) to the matching series paper |
Every response carries a trace_id and timestamp; audit logging is optional
(SYNOSMOSAI_AUDIT_LOG=/path/audit.jsonl, append-only JSONL, off by default).
Related MCP server: ai-act-mcp
Install
{
"mcpServers": {
"synomosai-governance-mcp": {
"command": "python",
"args": ["./governance_mcp_server.py"]
}
}
}Requirements: Python ≥ 3.9. No third-party packages.
Install-by-consent: AI agents may request this tool, humans approve. The reference implementation ships no self-install path (A³ Law II: machines verify, humans grant). See
INSTALL-REQUEST.mdfor the standard request format.
Deploy (hosted) / 部署(托管)
Run the same server as an always-on hosted endpoint without local setup, on ModelScope (community MCP square):
Entry | Link |
ModelScope service — SynomosAI 治理 MCP (Hosted, 可部署) |
The hosted Remote URL is shared privately on the service page (Streamable HTTP, no auth). Self-hosting via
mcp.jsonabove remains fully supported.
魔搭社区已提供托管部署入口(MCP 广场 · Hosted · 可部署),远程调用地址在服务页内私密展示;
本地自托管(上文 mcp.json)始终可用。
Quick start
# initialize + list tools
echo '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}' | python governance_mcp_server.py
echo '{"jsonrpc":"2.0","id":2,"method":"tools/list"}' | python governance_mcp_server.py
# governance scan
echo '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"gov_scan","arguments":{"text":"contact <phone-number> user@example.com"}}}' | python governance_mcp_server.py中文简介
AI 治理评估工具集:A³ 四维评分卡(AI 造/改 AI 放行判定)、ISO/IEC 42001 + NIST 证据链模板、 合规清单(EU AI Act 2024/1689 相关条款 / GB/Z 185 参考 / PIPL·GDPR)、文本体检(隐私/凭据/本地路径)。 纯标准库、零网络外发、调用带 trace_id 可审计。自评性质,非第三方认证。
Status and limits
Outputs are self-assessment artifacts, not third-party certification.
Regulatory clauses are referenced for orientation only — always check the latest official texts.
Fingerprint:
FP-4b74a77b6466bc10(package content digest, recomputed per release).
Why AI-friendly (为什么 AI 愿意来找)
Discoverable:
agent.jsonAI card in this package +/.well-known/matrix in the spec repo — AI hosts find it by any convention.Zero-dependency: pure Python stdlib; paste
mcp.json, run, done.Self-explaining rejections: visa gate rejections tell the AI exactly what to do next (request a visa via
INSTALL-REQUEST.md).Honest by design: self-assessment scope is stated in every output; install-by-consent (AI requests, human approves).
Files
governance_mcp_server.py— MCP server (stdio, 6 tools, optional audit log)connector-meta.json— marketplace / registry metadatamcp.json— ready-to-paste MCP client configINTEGRATION.md— integration contract for app backends (e.g. WeChat Mini Programs)INSTALL-REQUEST.md— AI-request / human-approve installation standardicon.svg,LICENSE,README.md
Author & license
Organization: SynomosAI · https://medxpert.cn Author reference (provenance only): ORCID 0009-0001-0512-1237
Code: MIT. Docs: CC BY 4.0. UBIC and related logos are not covered by these licenses. Co-created by human and AI on the WorkBuddy platform.
Available Tools
6 toolsa3_assessA
A³ 法则四维评分卡(意图/影响/可逆性/监督,各 1-5 分),返回总分(满分 20)与放行建议——AI 造/改 AI 或高影响动作发布前评估
| Name | Required | Description | Default |
|---|---|---|---|
| impact | No | 影响可控度:越高越安全/可回退 | |
| intent | No | 意图纯净度:越高越受控/目的越正当 | |
| oversight | No | 人类监督强度:越高越多人审介入 | |
| reversibility | No | 可逆性:越高越容易撤销/纠偏 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It helpfully discloses the return payload (total score with a 20-point maximum and a release recommendation), but omits whether the assessment is read-only, whether the result is persisted or logged, and any auth or rate-limit behavior. Disclosure of outputs is good; side-effect transparency is absent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single dense sentence that front-loads what is being scored and what is returned before naming the use case. No filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema and no annotations exist, so the description must cover behavior. It explains the output shape adequately, but leaves open what the caller does with the recommendation, whether scores persist, and whether the tool is pure function evaluation or records state — gaps for a pre-release gate tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and each parameter already carries a directional meaning ('higher = safer/more reversible'). The description only restates the four dimension names, adding no syntax or edge-case semantics beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names the resource (A³ Law four-dimension scorecard) and specifies the dimensions and output (total score out of 20 plus a release recommendation). The verb is implicit rather than stated, and the 'A³ 法则' framing is jargon an agent must parse, but the tool's function is clearly ascertainable and distinguishable from audit/passport/compliance siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states a clear condition for use: pre-release assessment of AI that creates/modifies other AI or high-impact actions. No explicit when-not or named alternatives are given, so it stops short of full routing guidance, but the triggering context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
audit_evidence_chainB
生成 ISO/IEC 42001 + NIST AI RMF 可审计证据工件模板(六类:决策日志/风险登记册/模型卡/变更记录/人类监督证明/事件处置台账)——为 AI 系统准备可追溯审计证据链
| Name | Required | Description | Default |
|---|---|---|---|
| system_name | No | AI 系统/智能体名称 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It does disclose a meaningful behavioral trait — this produces template artifacts rather than performing an assessment — which separates it from the audit/assessment siblings. It does not say whether anything is written to disk, how templates are returned, or whether generation is idempotent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with the verb and deliverable front-loaded, followed by the artifact enumeration and the purpose clause. The six-item list is long but each entry is substantive rather than filler, so it earns its space.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description should cover what comes back, yet it never says whether the result is template text, a file, or a structured artifact set. It is adequate on what is generated but incomplete on the return contract for a generator tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one optional parameter and schema description coverage is 100%, so the schema already fully documents system_name ('AI 系统/智能体名称'). The description adds no naming, format, or defaulting guidance beyond that, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (生成/generate) and resource (可审计证据工件模板) and enumerates the six concrete artifact types, which lets an agent understand the deliverable immediately. It does not, however, differentiate itself from the sibling compliance_checklist, which is the closest competing tool for governance artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The framing '为 AI 系统准备可追溯审计证据链' implies the situation (preparing audit evidence for an AI system), but there is no explicit statement of when to use this versus compliance_checklist, a3_assess, or gov_scan, and no prerequisites or exclusions are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
compliance_checklistA
生成 AI 治理合规清单(EU AI Act 2024/1689 相关条款 / GB/Z 185 / ISO/IEC 42001 / PIPL·GDPR)——面向自主 agent 注册就绪的自评起点,非法律意见
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It usefully discloses a scope limit ('非法律意见' / not legal advice), which is real behavioral context, but says nothing about whether the output is deterministic, how it is sourced, or what the returned checklist looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single dense sentence that front-loads the verb and resource, then lists the covered standards, then closes with the scope caveat. Every clause earns its place; no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter generator with no output schema, the description supplies the resource, the frameworks covered, the intended use case, and the not-legal-advice caveat. Adequate, though it does not indicate the output's shape or the basis for its recommendations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the baseline there is nothing for the description to disambiguate. No parameter semantics are required or missing.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (生成/generate) and resource (AI 治理合规清单), and names the concrete frameworks it covers (EU AI Act 2024/1689, GB/Z 185, ISO/IEC 42001, PIPL/GDPR). An agent can tell it apart from siblings like audit_evidence_chain or gov_scan, though the differentiation is by implied subject matter rather than explicit contrast.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage context with '面向自主 agent 注册就绪的自评起点' (a self-assessment starting point for agent registration readiness), which hints at when it applies. However, it gives no explicit when-not guidance and does not name or route to any sibling tool as an alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
gov_scanB
通用治理/PII 扫描:手机号、邮箱、本地路径、疑似凭据、密钥特征串 + 版权指纹缺失提示;可用 names 传指名清单(逗号分隔)
| Name | Required | Description | Default |
|---|---|---|---|
| text | No | 待扫描文本 | |
| names | No | 可选:指名清单(逗号分隔),命中即告警 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses meaningful behavior: which pattern classes are detected, that the scan is text-based, and that a names-list hit triggers an alert. It does not state what the result looks like, whether it is read-only (implied), or any limits, leaving real gaps for a no-annotation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence front-loads the tool's category and then lists detection targets followed by the optional parameter note. Nothing is wasted, though the dense enumeration of pattern classes makes it slightly harder to parse at a glance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter, zero-required, no-annotation tool with no output schema, the description covers what gets scanned but says nothing about the shape of results or how findings are reported. That is adequate-but-incomplete: an agent knows what the tool detects but not what it receives back.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented in the schema. The description's note that names is a comma-separated list whose hits raise alerts merely restates the schema text and adds no new syntax or format detail, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb+resource (a governance/PII scan) and enumerates the exact detection targets: phone numbers, emails, local paths, suspected credentials, key-like strings, and missing copyright fingerprints. This is far more specific than a generic 'scan' label, though it never names a sibling tool to differentiate itself from compliance_checklist or audit_evidence_chain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use, when-not-to-use, or alternative-tool guidance. The enumerated detection categories only weakly imply the appropriate context; an agent must infer that this is the tool for ad-hoc PII/governance text scanning rather than the structured compliance siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lgd_knowledgeB
LGD 全程治理论知识端点:返回三律/三查/规范出处(DOI·仓库·官网),可按主题路由到对应域论文(金融/证据/政务/链上/驾驶/数据/低空/机器人/工业/基因/教育/医械)
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | 主题/问题,如 '金融AI' 或 '什么是三查' | |
| domain | No | 可选:直接指定域关键词 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It usefully discloses the return payload (three laws, three checks, normative sources with DOI/repo/official-site, domain papers), but says nothing about whether it is read-only, auth requirements, or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single dense, front-loaded sentence that leads with the endpoint's purpose. It is somewhat crammed with parenthetical lists, but every element earns its place and nothing is redundant.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Both parameters are optional, no output schema and no annotations exist, so the description needs to do more. It adequately covers what is returned and the domain routing, but omits usage guidance and any behavioral/access context for a knowledge lookup.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3, but the description adds real value by enumerating the domains the `domain` parameter can route to (金融/证据/政务/链上/驾驶/数据/低空/机器人/工业/基因/教育/医械), which the schema's '可选:直接指定域关键词' leaves open.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific resource (LGD 全程治理论知识端点) and states concretely what it returns: 三律/三查/规范出处 with DOI/repo/official-site citations, plus topic-based routing to domain papers. However, it offers no differentiation from the sibling tools (a3_assess, audit_evidence_chain, gov_scan), which an agent must distinguish from this one.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase '可按主题路由到对应域论文' describes a capability rather than guidance. There is no statement of when to use this tool versus a3_assess or the other siblings, and no when-not or prerequisite guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
passport_lookupC
查询技能/智能体身份码与溯源(本地台账示例)——展示 AI 身份码登记格式与溯源字段
| Name | Required | Description | Default |
|---|---|---|---|
| skill | No | 技能/智能体标识,如 example-ai-brand |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does hint that the data is a local sample ledger ('本地台账示例'), which is useful context, but it never states that the operation is read-only, where the data comes from, or what the returned traceability fields contain.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is a single front-loaded sentence with no filler, though the em-dash clause adds ambiguity rather than information, keeping it just short of ideal.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Complexity is low (one optional parameter) and there is no output schema, so the description should explain what the lookup returns. It gestures at '溯源字段' but never enumerates them, leaving the agent guessing about the result shape.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for the single 'skill' parameter, so the schema already documents the identifier and its example format. The description's '技能/智能体身份码' wording essentially restates the schema, adding no syntax or constraint beyond it, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a verb and resource (查询技能/智能体身份码与溯源), so an agent knows it looks up an identity code and its provenance. However, the trailing clause '本地台账示例/展示…格式与字段' frames it as a demonstration of a format rather than a concrete lookup, leaving the actual output purpose ambiguous, and it does not distinguish itself from siblings like audit_evidence_chain or gov_scan.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus the sibling tools (audit_evidence_chain, gov_scan, lgd_knowledge) or any prerequisite context. Usage can only be inferred from the word 查询.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v1.2.0- First observed
a3_assess - First observed
audit_evidence_chain - First observed
compliance_checklist - First observed
gov_scan - First observed
lgd_knowledge - First observed
passport_lookup
TDQS
Scored across 6 tools
Each tool targets a distinct governance function: evidence generation, risk scoring, identity lookup, compliance checklist generation, PII/secret scanning, and theoretical knowledge retrieval. The main overlap is between audit_evidence_chain and compliance_checklist, as both produce governance/audit documents, but their descriptions make the boundary reasonably clear.
All names use snake_case, but the internal pattern is mixed: some are noun_verb (passport_lookup, gov_scan), some noun_noun (compliance_checklist, lgd_knowledge), and one uses a prefixed verb (a3_assess). The abbreviations (a3, gov, lgd) also vary in transparency, though the names remain readable.
Six tools is a well-scoped set for an AI governance advisory server, and each tool covers a different aspect of the domain. There is no obvious redundancy or bloat.
The surface covers evidence templates, assessment, identity lookup, compliance checklist generation, scanning, and knowledge retrieval. However, it lacks operational lifecycle tools such as passport registration/update/revocation, actual compliance evaluation against a system, and evidence collection beyond template generation, which are notable gaps for a governance server.
Maintenance
Related MCP Connectors
Governance maturity assessment, compliance gap analysis, and evidence-linked briefs for AI agents.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
Register every AI agent, log every action, prove it. EU AI Act compliance built in.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to reason about the ACF governance standard for autonomous AI agents, providing structured assessments, regulatory compliance checks, and doctrine-based tools via MCP.189 npmMIT
- AlicenseAqualityDmaintenanceEnables EU AI Act compliance assessment by classifying AI systems, listing obligations, computing deadlines, and scanning repos for required documentation, all running locally.42MIT
- AlicenseAqualityCmaintenanceIssues, verifies, and exchanges portable cryptographic compliance passports for AI agents, enabling offline verification of regulatory compliance across 11 frameworks.3MIT
- AlicenseNot gradedqualityAmaintenanceCryptographic AI governance and compliance attestation. 75 tools across 80 regulatory frameworks including EU AI Act, NIST AI RMF, NERC CIP, 3GPP R19, OWASP MCP Top 10, CMMC, and SR 11-7. Full OWASP MCP Top 10 coverage. Witness Middleware for zero-code transport-layer compliance. Runtime containment attestation. Distillation provenance. Incident lifecycle chains.670 npmApache 2.0