Skip to main content

Enterprise AI governance layer for deterministic execution control with policy-bound enforcement and immutable audit tracing.

Project description

Waveframe Guard

Enterprise AI governance layer for deterministic execution control with policy-bound enforcement and immutable audit tracing.

Waveframe Guard sits at the execution boundary for AI-initiated actions. It builds a governance proposal, routes it through deterministic policy enforcement, and returns a clear decision before your system mutates state.

What it does

  • Resolves a stored policy by policy_id
  • Builds a proposal from actor, action, and human execution roles
  • Enforces deterministic policy checks before execution
  • Returns structured outcomes such as allowed, pending, or blocked
  • Produces immutable audit records with policy-version traceability

What it does not do

  • Execute your business action
  • Manage approvals or identity proofing for you
  • Replace your system-of-record or workflow engine
  • Make post-hoc recommendations instead of enforcement decisions

Install

pip install waveframe-guard

Quick start

from waveframe_guard import WaveframeGuard

guard = WaveframeGuard(
    api_key="wf_test_key_123",
    policy_id="finance-core",
    base_url="http://localhost:8000",
)

decision = guard.execute(
    action={
        "type": "transfer",
        "amount": 5000,
        "system": "finance",
        "resource": "payroll",
    },
    context={
        "responsible": "user-alice",
        "accountable": "user-bob",
        "approved_by": "user-charlie",
    },
    actor="ai-agent-v2",
)

if decision["allowed"]:
    print("Execute downstream action")
else:
    print(decision["status"], decision["reason"])

Decision model

Guard returns deterministic, machine-friendly responses. Typical fields include:

{
  "allowed": false,
  "status": "pending",
  "summary": "AI proposed transfer on finance/payroll",
  "reason": "Approval missing or threshold exceeded",
  "risk_level": "critical"
}
  • allowed: whether the action may proceed
  • status: allowed, pending, or blocked
  • reason: human-readable explanation derived after enforcement
  • risk_level: UX-level severity classification for operators

Governance model

Waveframe Guard is designed around deterministic execution control:

  • Policies are resolved from stored policy versions, not injected inline at execution time
  • Guard may shape proposal structure from contract conditions
  • The enforcement kernel determines outcome
  • Audit records preserve policy-version linkage and execution trace data

Local development

Run the seeded backend and the example script:

python -m backend.seed
python examples/finance_usage.py

Release status

This repository is being prepared for the v0.2.0 release line.

License

Proprietary. See LICENSE.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

waveframe_guard-0.2.0.tar.gz (25.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

waveframe_guard-0.2.0-py3-none-any.whl (26.0 kB view details)

Uploaded Python 3

File details

Details for the file waveframe_guard-0.2.0.tar.gz.

File metadata

  • Download URL: waveframe_guard-0.2.0.tar.gz
  • Upload date:
  • Size: 25.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.14.0

File hashes

Hashes for waveframe_guard-0.2.0.tar.gz
Algorithm Hash digest
SHA256 322dfb53357e98c187ebdef64449b0ffba28d92cea1b7e2a134a6e7e2957050b
MD5 f5c7a00c56c092e593e1eca6ea0f6a34
BLAKE2b-256 e6601729eef5d1f13d4611736c88c99ad6cc36419f1a79f7411c3b3c144272bb

See more details on using hashes here.

File details

Details for the file waveframe_guard-0.2.0-py3-none-any.whl.

File metadata

File hashes

Hashes for waveframe_guard-0.2.0-py3-none-any.whl
Algorithm Hash digest
SHA256 e1c1bcd48ef1b5b988b36813b5637d15f6c24b7e77c090be2fe13e8215dabdc6
MD5 bd87c82c26c5a0680b3749f0c609510f
BLAKE2b-256 877e1dd68d24626c67f58bd25502ff77ed18c3680d56fee02ba0430bcd20f724

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page