Skip to content

Commit ae4ef87

Browse files
OneFineStarstuffOneFineStarstuff
authored
Merge pull request #103 from OneFineStarstuff/codex/develop-agi-and-asi-governance-roadmap-2026-2030
Add governance artifacts, validator, unit tests, and CI workflow for G‑SIFI AGI governance blueprint
2 parents 9bce491 + dc16789 commit ae4ef87

13 files changed

Lines changed: 1156 additions & 0 deletions

‎.github/workflows/governance-artifacts-validate.yml‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
name: Governance Artifacts Validate
2+
3+
on:
4+
push:
5+
branches: [ main ]
6+
paths:
7+
- 'governance_artifacts/**'
8+
- '.github/workflows/governance-artifacts-validate.yml'
9+
pull_request:
10+
paths:
11+
- 'governance_artifacts/**'
12+
- '.github/workflows/governance-artifacts-validate.yml'
13+
14+
jobs:
15+
validate:
16+
runs-on: ubuntu-latest
17+
steps:
18+
- name: Checkout
19+
uses: actions/checkout@v4
20+
21+
- name: Setup Python
22+
uses: actions/setup-python@v5
23+
with:
24+
python-version: '3.11'
25+
26+
- name: Install dependencies
27+
run: |
28+
python -m pip install --upgrade pip
29+
pip install pyyaml
30+
31+
- name: Validate governance artifacts
32+
run: python3 governance_artifacts/validate_artifacts.py --quiet
33+
34+
- name: Validate governance artifacts JSON output file
35+
run: |
36+
mkdir -p artifacts
37+
python3 governance_artifacts/validate_artifacts.py --quiet --output artifacts/validator-output.json
38+
python3 -c "import json; p=json.load(open('artifacts/validator-output.json')); assert p.get('status')=='PASS', p; print('validator-output.json status=PASS')"
39+
40+
- name: Validate CLI metadata contracts
41+
run: |
42+
python3 -c "import json,subprocess; out=subprocess.check_output(['python3','governance_artifacts/validate_artifacts.py','--version','--json'], text=True); p=json.loads(out); assert 'version' in p and isinstance(p['version'], str), p; print('version contract OK')"
43+
python3 -c "import json,subprocess; out=subprocess.check_output(['python3','governance_artifacts/validate_artifacts.py','--list-checks','--json'], text=True); p=json.loads(out); assert isinstance(p.get('checks'), list) and p['checks'], p; print('list-checks contract OK')"
44+
45+
- name: Run validator unit tests
46+
run: python3 -m unittest discover -s tests -p "test_validate_artifacts.py"

‎AGI_ASI_GSIFI_Blueprint_2026_2030.md‎

Lines changed: 399 additions & 0 deletions
Large diffs are not rendered by default.

‎governance_artifacts/README.md‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
# Governance Artifacts Validation
2+
3+
This folder contains machine-readable governance artifacts for the
4+
`AGI_ASI_GSIFI_Blueprint_2026_2030.md` strategy package.
5+
6+
## Files
7+
- `control_library.yaml`
8+
- `model_registry.json`
9+
- `annex_iv_dossier_template.yaml`
10+
- `board_kpi_kri_dashboard_schema.json`
11+
- `containment_runbooks.yaml`
12+
- `incident_taxonomy_gaics.json`
13+
- `rego/high_impact_credit.rego`
14+
- `validate_artifacts.py`
15+
16+
## Local validation
17+
```bash
18+
python3 governance_artifacts/validate_artifacts.py
19+
python3 governance_artifacts/validate_artifacts.py --json
20+
python3 governance_artifacts/validate_artifacts.py --quiet
21+
python3 governance_artifacts/validate_artifacts.py --quiet --output artifacts/validator-output.json
22+
python3 governance_artifacts/validate_artifacts.py --list-checks
23+
python3 governance_artifacts/validate_artifacts.py --list-checks --json
24+
python3 governance_artifacts/validate_artifacts.py --json --check validate_control_library
25+
python3 governance_artifacts/validate_artifacts.py --version
26+
python3 governance_artifacts/validate_artifacts.py --version --json
27+
python3 -m unittest discover -s tests -p "test_validate_artifacts.py"
28+
```
29+
30+
## Validation scope
31+
- Required-key checks for JSON/YAML artifacts.
32+
- Basic consistency checks (non-empty controls, model metadata fields).
33+
- Rego policy token checks for expected governance constraints.
34+
- JSON output payloads include `generated_at_utc` for audit traceability.
35+
36+
## CI
37+
Validation is executed on every pull request and push to `main` via:
38+
- `.github/workflows/governance-artifacts-validate.yml`

‎governance_artifacts/__init__.py‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
"""Governance artifacts package for validation and compliance automation."""

‎governance_artifacts/annex_iv_dossier_template.yaml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
annex_iv_dossier:
2+
ai_system_identification:
3+
system_name: ""
4+
version: ""
5+
provider: ""
6+
intended_purpose:
7+
business_process: ""
8+
user_groups: []
9+
model_characteristics:
10+
model_family: ""
11+
training_method: ""
12+
known_limitations: []
13+
data_governance:
14+
data_sources: []
15+
quality_controls: []
16+
bias_controls: []
17+
risk_management:
18+
identified_risks: []
19+
mitigations: []
20+
human_oversight:
21+
oversight_roles: []
22+
override_procedures: []
23+
monitoring_incidents:
24+
post_market_metrics: []
25+
incident_reporting_flow: []

‎governance_artifacts/board_kpi_kri_dashboard_schema.json‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
{
2+
"$schema": "https://json-schema.org/draft/2020-12/schema",
3+
"title": "Board KPI/KRI Dashboard Schema",
4+
"type": "object",
5+
"properties": {
6+
"reporting_period": {"type": "string"},
7+
"kpis": {
8+
"type": "object",
9+
"properties": {
10+
"annex_iv_completeness_pct": {"type": "number"},
11+
"drift_monitoring_coverage_pct": {"type": "number"},
12+
"mean_time_to_containment_hours": {"type": "number"}
13+
},
14+
"required": ["annex_iv_completeness_pct", "drift_monitoring_coverage_pct", "mean_time_to_containment_hours"]
15+
},
16+
"kris": {
17+
"type": "object",
18+
"properties": {
19+
"correlated_policy_violation_rate": {"type": "number"},
20+
"unexplained_decision_rate": {"type": "number"},
21+
"frontier_escalation_alerts": {"type": "integer"}
22+
},
23+
"required": ["correlated_policy_violation_rate", "unexplained_decision_rate", "frontier_escalation_alerts"]
24+
}
25+
},
26+
"required": ["reporting_period", "kpis", "kris"]
27+
}

‎governance_artifacts/containment_runbooks.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
runbooks:
2+
- id: RUNBOOK-SENTINEL-RED
3+
trigger: "resonance_index >= 0.85 OR critical policy breach"
4+
steps:
5+
- constrain_tools
6+
- isolate_network
7+
- throttle_compute
8+
- escalate_human_command
9+
- revoke_keys_if_unresolved
10+
- id: RUNBOOK-DRIFT-ORANGE
11+
trigger: "psi > 0.20 OR unexplained_decision_rate > 0.01"
12+
steps:
13+
- reduce_autonomy_level
14+
- enforce_human_review
15+
- execute_replay_suite
16+
- open_model_risk_ticket

‎governance_artifacts/control_library.yaml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
version: 1.0.0
2+
last_updated: 2026-04-29
3+
controls:
4+
- id: CTRL-HITL-001
5+
name: Human review for high-impact AI decisions
6+
mapped_regimes: [eu_ai_act, gdpr_art22, fcra, ecoa]
7+
owner: model_risk_management
8+
evidence:
9+
- workflowai_review_log
10+
- decision_audit_trail
11+
- id: CTRL-ANNEXIV-002
12+
name: Annex IV technical dossier completeness
13+
mapped_regimes: [eu_ai_act]
14+
owner: ai_governance_office
15+
evidence:
16+
- annex_iv_dossier
17+
- post_market_monitoring_register
18+
- id: CTRL-DRIFT-003
19+
name: Continuous drift and behavior monitoring
20+
mapped_regimes: [sr_11_7, nist_ai_rmf, iso_42001]
21+
owner: ai_platform_engineering
22+
evidence:
23+
- drift_dashboard
24+
- incident_escalation_tickets

‎governance_artifacts/incident_taxonomy_gaics.json‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
{
2+
"taxonomy": "GAICS",
3+
"version": "0.1-draft",
4+
"classes": [
5+
{"id": "GAICS-1", "name": "Safety Policy Breach", "severity": "high"},
6+
{"id": "GAICS-2", "name": "Autonomy Overreach", "severity": "critical"},
7+
{"id": "GAICS-3", "name": "Market Integrity Risk Event", "severity": "critical"},
8+
{"id": "GAICS-4", "name": "Data Governance Breach", "severity": "high"}
9+
]
10+
}

‎governance_artifacts/model_registry.json‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"registry_version": "1.0.0",
3+
"generated_on": "2026-04-29",
4+
"models": [
5+
{
6+
"model_id": "gsifi-credit-agent-v7",
7+
"use_case": "credit_underwriting",
8+
"risk_tier": "high",
9+
"deployment_status": "production",
10+
"controls": ["CTRL-HITL-001", "CTRL-ANNEXIV-002", "CTRL-DRIFT-003"],
11+
"validation": {
12+
"last_validation": "2026-11-12",
13+
"next_due": "2027-02-12",
14+
"independent_validation": true
15+
}
16+
}
17+
]
18+
}

0 commit comments

Comments
 (0)