Commit Graph
21 Commits
Author SHA1 Message Date
Magnus HedemarkandGitHub f73162d176 feat: add GxP AI governance coverage (#348)
* feat: add GxP AI governance coverage

* fix: complete GxP governance attribution and evaluation coverage

* fix: complete GxP provenance references

* fix: expose GxP routing and complete research provenance

* chore: regenerate marketplace metadata

* chore: regenerate marketplace metadata

* chore: regenerate llms skill catalog
2026-08-20 22:48:41 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> bb2578790f fix(ai-governance): reconcile AI Act timeline, exit-code contract, and UK institute naming
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 21:28:12 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 888872cdfd fix(ai-governance): rephrase passages to clear the 8-word n-gram copyright gate
Reword reference and template sentences in ai-governance that shared
8-word contiguous runs with the mission research notes and source books,
so the VAL-IP-001 n-gram check reports zero overlaps.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 21:00:09 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 96721d647f feat(ai-governance): assemble SKILL.md router, README, evals, and repo integration
Add the trigger/router SKILL.md (description, you-own/don't-own table, router
tables accounting for every bundled file, When-not-to-use, neighbor routing), the
human-facing README, the schema-valid evals manifest with six output-quality cases,
the root README catalog entry, the skill-triggers row, and regenerated llms.txt plus
the three marketplace/plugin artifacts.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:47:04 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> fffc38ed81 fix(ai-governance): make reference cross-links resolve for the router gate
References cited templates and research notes as backtick .md tokens that do
not resolve inside the repository, which the stale-reference scanner flags once
the skill ships SKILL.md. Convert template citations to resolvable markdown
links and de-backtick research-note citations (they live in the mission library).

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:46:49 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> e750ffce06 feat(ai-governance): add use-case risk-tier classifier script
Add use-case-risk-tier.py, a stdlib-only CLI that classifies an AI use case
(data sensitivity, autonomy, exposure, decision impact) into a low/medium/high
governance tier and the controls that tier requires, with --json and --dry-run.
Ship test_use_case_risk_tier.py covering scoring, tier forcing, validation,
CLI exit codes, graceful failure, and deterministic/dry-run behavior.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:28:16 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 3060606a8a feat(ai-governance): add governance-maturity self-assessment scorer
Add the stdlib-only governance-maturity CLI (reads a JSON answers file of
governance dimensions scored 1-5, computes a maturity level and gap list,
supports --json and --dry-run, exits 0 on healthy input and 1 on critical
all-minimum gaps) with a pytest suite, plus a skill pytest.ini that overrides
the repo-wide coverage addopts for subprocess-based skill tests.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:24:31 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 912dad635b feat(ai-governance): add third-party due diligence and board report templates
Add fillable third-party-due-diligence.md and board-ai-governance-report.md
templates implementing the procurement, third-party, and board oversight
reference, each with purpose, guided fields, sections, and completion notes.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:20:32 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 3a870a1e92 feat(ai-governance): add model risk assessment and model card templates
Add NIST-aligned model-risk-assessment.md tiering worksheet and model-card.md
documentation template, each with title, purpose, guided fields, and a
completion section. Governing references already mention both slugs.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:19:11 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 452c061a7e feat(ai-governance): add governance charter and use-case intake templates
Add fillable governance-charter.md (council terms of reference) and
use-case-intake-form.md (intake/registry entry with risk classification)
templates, each with an H1 title, purpose statement, guided fields with
placeholders, and completion instructions, aligned with the operating-model
and risk/lifecycle references.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:17:30 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 8520ce1b77 feat(ai-governance): add reference source-index for provenance
Consolidate the synthesized-from footers of the 10 domain references into a
source-index.md that names all 11 reference files, maps each to its book short
names and research notes, lists the full 12-book bibliography, and states the
paraphrase/synthesis idea-level attribution invariant.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:15:43 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 315fe937c8 feat(ai-governance): add procurement, third-party, and board oversight reference
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:13:48 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 485c28e845 feat(ai-governance): add regulatory-landscape reference
Synthesizes the mission research note on the current AI regulatory
landscape (EU AI Act, GDPR, US federal/state, UK, China, sectoral rules,
enforcement, horizon scanning) into a dense jurisdiction-by-jurisdiction
reference. Book regulatory chapters are treated as historical context.
Flags the US federal/state position and the EU AI Act high-risk timing as
in-flux and to be verified at use time.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:08:38 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> f8b547594e feat(ai-governance): add llm-and-agent-security reference
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 20:03:03 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 9b63dc44b8 feat(ai-governance): add privacy-and-data-governance reference
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:57:59 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> ad6b87a462 feat(ai-governance): add transparency-explainability reference
Author dense reference on transparency and explainability (XAI methods,
explainability requirements, disclosure, human-AI interaction,
auditability) synthesized from Responsible AI in the Enterprise, Platform
and Model Design for Responsible AI, and Introduction to Responsible AI.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:54:41 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 37c0b00760 feat(ai-governance): add fairness-bias-accountability reference
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:51:38 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> a78adef385 feat(ai-governance): add ai-lifecycle-governance reference
Synthesizes stage gates, model inventory, lineage, drift detection, and
incident response across the AI lifecycle from the Platform and Model
Design, Designing Data Governance, and Data Governance Handbook sources
plus the technical-controls research note.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:48:03 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 777c0656d3 feat(ai-governance): add risk-management-and-frameworks reference
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:41:41 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 0d7c806e45 feat(ai-governance): add governance-operating-model reference
Teach the AI governance operating model: the six-step model, council and
steward roles, decision rights and RACI, federated vs centralized
structures, maturity, and culture. Synthesized from Designing Data
Governance from the Ground Up, the Data Governance Handbook, and the
org/board governance research note; original prose, no verbatim book
text.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:38:16 -04:00
Magnus Hedemarkandfactory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com> 1e9aea7810 feat(ai-governance): add foundations-and-principles reference
Author the first ai-governance reference: what AI governance is, the six
core principles (fairness, accountability, transparency, privacy, safety,
human oversight), and the governance vs compliance vs risk distinction,
synthesized from the four primary books and current research.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
2026-08-14 19:35:22 -04:00