Skip to main content

Schema-first semantic governance layer for enterprise agents

Project description

Entigram

Entigram: The Semantic Governance Layer for Enterprise Agents

Entigram is a schema-first control plane for enterprise agents that grounds agent behavior in verified domain models, approved semantic alignments, and auditable state transitions.

It provides the infrastructure to build constrained autonomy, ensuring that agents operate across fragmented enterprise systems without inventing fields, joins, entities, or state transitions.

🎯 The Entigram Thesis

Enterprise agent adoption fails when agents lack trustworthy domain context and enforceable schema boundaries. Entigram addresses this by sitting between your agents and your enterprise state.

Defensible Grounding: Entigram prevents unsupported concepts and unverified mappings from entering operational agent workflows.

🛠️ Key Capabilities

  • Domain Boundaries (Schema): Force agents to operate against explicit Entigram Schemas rather than vague natural-language context.
  • Closed-World Reasoning: Automatically reject or quarantine unknown entities, attributes, and relationships.
  • Verified Semantic Alignments: Enable cross-domain data federation using approved mappings instead of fuzzy LLM guesses.
  • Deterministic Conflict Handling: Transform contradictory agent states into auditable ledger entries for human or policy-driven resolution.
  • Expectation Guard: Convert modeled expectations, implementation rules, and validation checks into a runnable pre-handoff agent gate.
  • Agent Hydration: Boot agents with exact project state, schemas, alignments, and settled decisions.
  • Auditability: Store every alignment and decision in a local SQLite ledger for full provenance and governance.

Core Workflow

  1. Model the entities, attributes, and relationships agents are allowed to know.
  2. Gate every proposed alignment, conflict, and state transition through MCP/CLI tools.
  3. Audit accepted work with ledger evidence, delivery snapshots, and tamper-evident bundles.

🚀 Quickstart

1. Initialize a Governance Workspace

python3 -m entigram.cli_runner.etg_cli init --dir my-governed-agent
cd my-governed-agent

2. Define your Schema Contracts (Schema)

Create a schema.lds to define the entities and relationships your agents are allowed to "know."

ENTITY: Supplier
ATTRIBUTES:
  - .id (UUID)
  - name (String)
  - tax_id (String)

3. Hydrate and Launch

Align your agent's state vector with your local domain models:

python3 -m entigram.cli_runner.etg_cli agent --engine Antigravity

Before handoff, verify modeled expectations and record evidence:

python3 -m entigram.cli_runner.etg_cli broker guard

4. Run the Immutable Gate over MCP

Start the local MCP server from the governed workspace:

etg serve

Agents should discover schemas with etg_get_schemas, propose alignments with etg_propose_alignment, and record deterministic conflicts with etg_log_conflict. MCP responses use a stable JSON envelope:

{"ok":false,"error":{"code":"UNKNOWN_CONCEPT","message":"Error: Invalid Schema Alignment - Entity Ghost not found","details":"Entity Ghost not found"}}

Successful proposals are written to the SQLite ledger configured in .etg/entigram.yaml:

schema_paths:
  - schema.lds
state_ledger: .etg/state.db

The server treats schema_paths as the closed-world boundary. Demo files, templates, drafts, and unrelated LDS files are not exposed unless explicitly listed.

Before returning work to a human reviewer:

etg broker guard
etg broker deliver
etg broker status

Export an Ed25519-signed audit bundle:

etg broker export-audit --out entigram-audit.json

The first export creates a local signing key at .etg/audit_ed25519_private.pem. Keep that private key out of source control.

For the complete MCP tool contract, see docs/mcp-tools.md.

Run the local Immutable Gate smoke demo:

python3 scripts/demo_immutable_gate.py

Optional Dashboard

etg ui requires Streamlit. The CLI/MCP runtime is headless by default.

For pipx:

pipx install 'entigram-ai[ui]'

For an existing pipx install:

pipx inject entigram-ai streamlit

Homebrew installs are optimized for the CLI/MCP path. If etg ui reports that Streamlit is missing, that is expected unless the dashboard dependency has been installed into the same Python environment.

🏗️ How it Fits

Entigram is not an orchestration framework, MCP replacement, graph database, or IAM product. It is the semantic governance layer that complements those systems by providing:

  1. Schema Discipline: Validating agent inputs/outputs against a strict Schema.
  2. Alignment Gates: Ensuring cross-system joins (e.g., Salesforce Opportunity to Warehouse SKU) use verified mappings.
  3. Decision Ledger: Providing a persistent, auditable record of state transitions.
Agent framework
  -> Entigram semantic governance
  -> MCP/tools/connectors/databases
  -> enterprise systems
Existing Layer Examples Entigram's Role
Agent orchestration LangGraph, CrewAI, OpenAI Agents SDK, Microsoft Agent Framework Validate domain state, mappings, payloads, and handoffs before agents act
Tool and data access MCP, API tools, enterprise connectors Govern tool schemas and block unsupported concepts or unverified mappings
Knowledge and context RAG, GraphRAG, Neo4j, Stardog, data.world, LlamaIndex Operationalize only verified concepts, relationships, and alignments
Runtime governance RunAgents, Okta, policy engines, approval systems Supply semantic policy signals and provenance for tool/action decisions
Observability Tracing, OpenTelemetry, agent logs Add semantic provenance: schema, alignment, evidence, conflict, and decision IDs

🔒 Operational Principle

Discovery creates proposals, not operational facts.

Agents and routers may suggest alignments from schema similarity, partner data, or field names, but those proposals do not drive cross-domain joins until they are explicitly authorized with trusted evidence.

📈 Best-Fit Use Cases

  • Partner Reconciliation: Normalizing and aligning external supplier data with internal systems.
  • Cross-Domain Integration: Linking CRM data (Salesforce) to supply-chain or inventory forecasting.
  • Regulated Data Extraction: Clinical/EHR extraction with strict validation and conflict gates.
  • Governance for Multi-Agent Ops: Auditing the "handoff" state between different specialized agents.

⚖️ License

Entigram Core is Open Source under the Apache License 2.0.


Entigram: Grounding agentic autonomy in enterprise reality.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

entigram_ai-1.7.7.tar.gz (167.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

entigram_ai-1.7.7-py3-none-any.whl (156.4 kB view details)

Uploaded Python 3

File details

Details for the file entigram_ai-1.7.7.tar.gz.

File metadata

  • Download URL: entigram_ai-1.7.7.tar.gz
  • Upload date:
  • Size: 167.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for entigram_ai-1.7.7.tar.gz
Algorithm Hash digest
SHA256 43c0e7efa2810319486b53d4e9ed4e79ff31cd58704d81a7ef4eed1c873df418
MD5 5be80f44c675c2b8cbe284c9e1ea76a4
BLAKE2b-256 0f6805851b6a8e197c88f29a1fa4ed6dd5a5a309444df7032c211816a9dfc1e9

See more details on using hashes here.

File details

Details for the file entigram_ai-1.7.7-py3-none-any.whl.

File metadata

  • Download URL: entigram_ai-1.7.7-py3-none-any.whl
  • Upload date:
  • Size: 156.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for entigram_ai-1.7.7-py3-none-any.whl
Algorithm Hash digest
SHA256 a50f77289f490acb482cd9130654874fcd7491410e83025f010070f9d09b89f3
MD5 a0232d2edd50a3aa4a14484dbba24ab1
BLAKE2b-256 c525a59ee3a3d8c180e7ea4c8dd752ee720c42c7c581028ebff682caa5ccb8c6

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page