Skip to main content

ckg-nvidia-guardrails

NeMo Guardrails as a traversable knowledge graph.

50 nodes · MCP-native · free · Graphify.md

pip install ckg-nvidia-guardrails
uvx ckg-nvidia-guardrails

The problem this solves

NeMo Guardrails rails govern conversation flow — but the tool fleet executes entirely outside the railed channel. There is no mutual visibility between config.yml rails configuration and tool/action bindings.

This means:

  • Auto-approved shell-capable tools bypass guardrails entirely
  • Outgoing responses from tool calls leave un-railed
  • Rails config and tool config exist as separate files with no declared relationship

This knowledge graph maps those relationships explicitly. Query the Tool Authorization Gap node to traverse what's railed vs what isn't:

query_ckg('Tool Authorization Gap', 'nvidia-guardrails', 3)

What's covered (50 nodes)

Domain Nodes
Rails Architecture NeMo Guardrails · Dialog Flow Manager · Input/Output/Dialog/Retrieval Rails
Colang Language Colang 1.0 · Colang 2.0 · Flow · Message · Context Variables · Event System
Configuration config.yml · Models · Rails · Actions · Prompts · Generation Options
Actions & Tools Custom Actions · Python Actions · Action Server · Tool Bindings · Tool Authorization Gap
Rail Implementations Jailbreak Detection · Hallucination Detection · Sensitive Data · Moderation · Topical Rails
Integrations LangChain · LlamaIndex · NIM · Custom LLM Provider · OpenAI-Compatible API
Observability Logging · Colang Tracing · Rail Testing · NemoGuardrails CLI
Deployment Guardrails Server · REST API · Streaming Support

MCP tools

Tool Description
list_domains() List available domains
search_concepts(query) Find concepts by keyword
query_ckg(concept, depth) Traverse from any concept outward
get_prerequisites(concept) Full upstream dependency chain
ask_guardrails(question) Natural-language Q&A (requires local Ollama)

Add to Claude Desktop

{
  "mcpServers": {
    "nvidia-guardrails": {
      "command": "uvx",
      "args": ["ckg-nvidia-guardrails"]
    }
  }
}

Benchmark

11× fewer tokens than RAG · F1 0.471 vs RAG 0.123 · 269 tokens/query vs 2,982

Full paper: github.com/Yarmoluk/ckg-benchmark/blob/main/paper/main.pdf


EVAL

benchmark: ckg-benchmark v0.6.2
dataset: huggingface.co/datasets/danyarm/ckg-benchmark
benchmarked: false
rag_baseline_f1: 0.123
graphrag_baseline_f1: 0.120
mean_tokens: 269
paper: github.com/Yarmoluk/ckg-benchmark/blob/main/paper/main.pdf

Built by Graphify.md · MIT License · Patent pending

Metadata

Release files for ckg-nvidia-guardrails 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ckg-nvidia-guardrails 0.1.0
File Size Uploaded Provenance
ckg_nvidia_guardrails-0.1.0.tar.gz 10.0 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for ckg-nvidia-guardrails 0.1.0
File Interpreter ABI Platform
ckg_nvidia_guardrails-0.1.0-py3-none-any.whl Python 3 none any Details

Total release size: 21.7 kB

Release files / ckg_nvidia_guardrails-0.1.0.tar.gz

Download URL ckg_nvidia_guardrails-0.1.0.tar.gz
Size 10.0 kB
Tags Source
SHA-256 checksum
How to use checksums
0cb72af1119d23e7e8a1def570ff38a63ffad95dd17d281e9d2fe1e5f636ea55
BLAKE2b-256 checksum
How to use checksums
7d47e41fa6790bb3c13dc43cff2e5cbc5870bdfb00c70bff5deedc7b67d91471
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.11.14

Release files / ckg_nvidia_guardrails-0.1.0-py3-none-any.whl

Download URL ckg_nvidia_guardrails-0.1.0-py3-none-any.whl
Size 11.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
232ec140fab9855eea702ed76cb60641c307704ffaba55318f19fb5977894240
BLAKE2b-256 checksum
How to use checksums
a23a793a7d96fae3b93f409bd40f40ea04a52aee25f46145e6e48e1b9a9eccfd
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.11.14

Security for ckg-nvidia-guardrails 0.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page