Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.
Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI configuration. Joins protect-mcp and signed-audit-trails in the governance category; composes with protect-mcp for runtime enforcement.
Teaching skill: cookbook-style walkthrough for signed audit trails on every Claude Code tool call. Cedar policy, Ed25519 receipts, offline verification, CI/CD integration, SLSA composition. Pairs with the protect-mcp runtime plugin.
Builds an evidence pack for an Apache Incubator podling against the 38 items of the Apache Project Maturity Model, marking each evidenced, proxy or human. Never a score or verdict.
DSG Spacetime production MCP client: governed plan, discover, owner approval, execute, verify evidence. Uses the existing https://aws.dsg.pics/mcp backend; does not deploy another control plane.
Enforces the repo truth boundary and claim policy. Helps classify statements as verified fact / inference / pending / blocked / not verified, and warns about forbidden readiness claims. Ships an advisory PostToolUse hook.
AI governance toolkit — DLP scanning, data guardrails, risk register, compliance evidence, audit trail, and EU AI Act classification embedded in your workflow.
Cedar policy enforcement + Ed25519 signed receipts for every Claude Code tool call. First cryptographic governance plugin — decisions are policy-gated before they run and every decision produces a tamper-evident receipt verifiable offline.
Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI configuration. Joins protect-mcp and signed-audit-trails in the governance category; composes with protect-mcp for runtime enforcement.
Teaching skill: cookbook-style walkthrough for signed audit trails on every Claude Code tool call. Cedar policy, Ed25519 receipts, offline verification, CI/CD integration, SLSA composition. Pairs with the protect-mcp runtime plugin.
Ten drift classes scanned continuously. Catches regressions before they ship. Primary framework: Signal Detection Theory (Green & Swets, 1966). MOAT-03.
Decision memory for Claude Code. Automatically tracks architectural decisions, code changes, and engineering choices into TraceMem's governed audit trail.
An operating constitution for AI coding agents. Supreme layer: the Ten Base Laws — invariant-grounded, precedence-ordered, model-agnostic. Below it: dispatch discipline, never-self-verify acceptance, escalation ladders, judgment rubrics, and a perishable bindings layer.