GovAI

Documentation

What is GovAI?Contact for private pilotSign inSupport / contact

Audit-backed governance for AI systems

GovAI records lifecycle evidence, evaluates policy, and returns VALID, INVALID, or BLOCKED per run. Start with What is GovAI? or the 5-minute quickstart.

Start here

QuickstartGovAI Core

Run the audit service locally and submit your first evidence in minutes.

ArchitectureAPI

Rust ledger, policy enforcement, Postgres, and how components connect.

Governance model

VALID, INVALID, BLOCKED verdicts and trust boundaries.

Evidence packs

Pack schema, digests, and exportable audit artefacts.

API referenceAPI

OpenAPI surfaces: evidence ingest, compliance summary, enterprise routes.

DeploymentHosted

Hosted backend, Postgres, readiness checks, and operator configuration.

Security

Tenant isolation, secrets, incident response, and secure deployment.

Enterprise readinessEnterprise

Buyer due diligence hub: architecture, security, deployment, and FAQ.

Evidence lifecycle

How an evidence event moves from emission to an auditable ledger record.

Implementation flow

  1. 1Emit evidencePOST /evidence
  2. 2Policy + ledgerHash-chained append
  3. 3Compliance summaryVALID / INVALID / BLOCKED
  4. 4CI gate or exportBlock deploy · bundle

Capability matrix

GovAI Core (self-host) vs proprietary hosted platform and enterprise layers. Full comparison →

CapabilityGovAI CoreHostedEnterprise
Hash-chained audit ledger✓✓✓
POST /evidence + policy enforcement✓✓✓
CI compliance summary gate✓✓✓
API key → tenant isolation✓✓✓
JWT /api/* workflow & assessments—✓✓
Operator dashboard (govbase.dev)—✓✓
Stripe billing (operator-configured)—✓✓

Compliance verdict

Summarize prerequisites for VALID — same contract as CI gates.

Preview
GovAI try console
local
Try thisCopy and run in your environment

GET /compliance-summary

Command
curl -sS "$GOVAI_AUDIT_BASE_URL/compliance-summary?run_id=demo-run" \
  -H "Authorization: Bearer $GOVAI_API_KEY"
Expected output
View expected output
{ "verdict": "VALID" | "INVALID" | "BLOCKED", "reasons": […] }

Try it

GovAI try console
requires API key
Try thisCopy and run in your environment

Check compliance for a run

Fetch the authoritative compliance-summary verdict for a run_id after evidence is recorded.

Environment
export GOVAI_AUDIT_BASE_URL=https://audit.example.com
export GOVAI_API_KEY=your_key
export GOVAI_RUN_ID=your_run_id
Command
curl -sS "$GOVAI_AUDIT_BASE_URL/compliance-summary?run_id=$GOVAI_RUN_ID" \
  -H "Authorization: Bearer $GOVAI_API_KEY"
Expected output
View expected output
{"verdict":"VALID"|"INVALID"|"BLOCKED",...}

Next step5-minute quickstart

Product

What GovAI is and why it matters

Developers

Quickstarts, integrations, and contributing

Architecture

System design and onboarding flow

Compliance & trust

Governance, regulatory mapping, trust center

Enterprise

Buyers, pilots, and platform packaging

Reference

API, CLI, and Functions 2.0

Operations

Deployment and security operations

Canonical Markdown sources live in the repository under docs/. Full index: docs/index.md.

← Back to home