ckg-nvidia-guardrails
NeMo Guardrails as a traversable knowledge graph.
50 nodes · MCP-native · free · Graphify.md
pip install ckg-nvidia-guardrails
uvx ckg-nvidia-guardrails
The problem this solves
NeMo Guardrails rails govern conversation flow — but the tool fleet executes entirely outside the railed channel. There is no mutual visibility between config.yml rails configuration and tool/action bindings.
This means:
- Auto-approved shell-capable tools bypass guardrails entirely
- Outgoing responses from tool calls leave un-railed
- Rails config and tool config exist as separate files with no declared relationship
This knowledge graph maps those relationships explicitly. Query the Tool Authorization Gap node to traverse what's railed vs what isn't:
query_ckg('Tool Authorization Gap', 'nvidia-guardrails', 3)
What's covered (50 nodes)
| Domain | Nodes |
|---|---|
| Rails Architecture | NeMo Guardrails · Dialog Flow Manager · Input/Output/Dialog/Retrieval Rails |
| Colang Language | Colang 1.0 · Colang 2.0 · Flow · Message · Context Variables · Event System |
| Configuration | config.yml · Models · Rails · Actions · Prompts · Generation Options |
| Actions & Tools | Custom Actions · Python Actions · Action Server · Tool Bindings · Tool Authorization Gap |
| Rail Implementations | Jailbreak Detection · Hallucination Detection · Sensitive Data · Moderation · Topical Rails |
| Integrations | LangChain · LlamaIndex · NIM · Custom LLM Provider · OpenAI-Compatible API |
| Observability | Logging · Colang Tracing · Rail Testing · NemoGuardrails CLI |
| Deployment | Guardrails Server · REST API · Streaming Support |
MCP tools
| Tool | Description |
|---|---|
list_domains() |
List available domains |
search_concepts(query) |
Find concepts by keyword |
query_ckg(concept, depth) |
Traverse from any concept outward |
get_prerequisites(concept) |
Full upstream dependency chain |
ask_guardrails(question) |
Natural-language Q&A (requires local Ollama) |
Add to Claude Desktop
{
"mcpServers": {
"nvidia-guardrails": {
"command": "uvx",
"args": ["ckg-nvidia-guardrails"]
}
}
}
Benchmark
11× fewer tokens than RAG · F1 0.471 vs RAG 0.123 · 269 tokens/query vs 2,982
Full paper: github.com/Yarmoluk/ckg-benchmark/blob/main/paper/main.pdf
EVAL
benchmark: ckg-benchmark v0.6.2
dataset: huggingface.co/datasets/danyarm/ckg-benchmark
benchmarked: false
rag_baseline_f1: 0.123
graphrag_baseline_f1: 0.120
mean_tokens: 269
paper: github.com/Yarmoluk/ckg-benchmark/blob/main/paper/main.pdf
Built by Graphify.md · MIT License · Patent pending
Metadata
Release files for ckg-nvidia-guardrails 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| ckg_nvidia_guardrails-0.1.0.tar.gz | 10.0 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| ckg_nvidia_guardrails-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 21.7 kB
Release files / ckg_nvidia_guardrails-0.1.0.tar.gz
| Download URL | ckg_nvidia_guardrails-0.1.0.tar.gz |
|---|---|
| Size | 10.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0cb72af1119d23e7e8a1def570ff38a63ffad95dd17d281e9d2fe1e5f636ea55
|
|
BLAKE2b-256 checksum How to use checksums |
7d47e41fa6790bb3c13dc43cff2e5cbc5870bdfb00c70bff5deedc7b67d91471
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.11.14
|
Release files / ckg_nvidia_guardrails-0.1.0-py3-none-any.whl
| Download URL | ckg_nvidia_guardrails-0.1.0-py3-none-any.whl |
|---|---|
| Size | 11.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
232ec140fab9855eea702ed76cb60641c307704ffaba55318f19fb5977894240
|
|
BLAKE2b-256 checksum How to use checksums |
a23a793a7d96fae3b93f409bd40f40ea04a52aee25f46145e6e48e1b9a9eccfd
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.11.14
|
Security for ckg-nvidia-guardrails 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.