#compliance

Scribo Claude/Codex skill — generate EN 16931-compliant e-invoices (ZUGFeRD, XRechnung, US plain PDF; Factur-X, Facturae, Peppol BIS UBL coming soon) via the public Scribo HTTP API

Multi-platform agent skills (Claude Code + Gemini CLI + OpenAI Codex) for EU AI Act compliance, anchored on ISO/IEC 42001 (AIMS) and ISO/IEC 27090 (AI cybersecurity). Citation-grade. Decision-support, not legal advice.

The trust control plane for enterprise AI agents — real-time policy verdicts in under 800ms and litigation-grade evidence of every decision. Pharos decides. Pharos proves.

Capa de jurisdicción LATAM para Claude. Skills neutrales + packs de datos legales por país, con fuente oficial y fecha en cada línea. No sustituye a un abogado.

Verifiable audit substrate for AI agents — EU AI Act Article 12 ready. Apache 2.0.

Tamper-evident audit logging for OpenClaw and other local AI agents: hash-chained, locally verifiable, zero cloud dependency.

Agentic AI co-pilot for crypto-exchange financial crime investigations: entity-network mapping, RFI contradiction checks (roadmap), and regulator-grounded SAR drafting over a tamper-evident audit trail. Synthetic-data research prototype.

Universal security audit skill for Claude Code — OWASP Top 10 (2021) + Russian security standards (ГОСТ Р 56939, ФСТЭК, ФЗ-152) + STRIDE threat modeling. Multi-stack: Node/Python/Go/Rust.

AI-agent reliability and governance layer: auto-firing compliance checks, persistent memory, security scanning, and verification loops that wrap any AI agent.

Asqav extension for the pi coding agent. Block out of mandate tool calls at sign time and keep a verifiable record.

Skill de Claude Code que audita un proyecto contra la Ley 21.719 de Proteccion de Datos Personales de Chile y genera un reporte de cumplimiento priorizado.

Audit-ready pentest reports (DE/EN) with built-in compliance checks for BSI, OWASP, PCI-DSS, DiGA & OSCP. A Claude skill + standalone Python pipeline.

A practical map for running a legal digital business in the EU: 206 sourced compliance checks, audit method, and AI-agent-ready requirements (GDPR, ePrivacy, AI Act, DSA, DMA)

An AI crew watches your commercial once, judges it against different geographical jurisdictions in parallel, builds its own Grafana instrument panel, and re-renders the shots that fail.

VoiceForge AI — build, test, govern and white-label AI voice calling agents from natural language. Spec-first, compliance-gated, multi-tenant. https://incfrog.ai

Luminos.AI — independent third-party profile of a public API surface, by API Evangelist. Luminos.AI is an AI governance and evaluation platform that tests AI systems — classical machine learning, generative AI, and autonomous agents — for legal, regulatory, and reputational risk.

Evidence-first enterprise knowledge retrieval & compliance agent: BM25+dense RRF hybrid, SHA-256 stable chunking, provenance-audited NIST/OWASP corpus, Recall@K/MRR eval

Portfolio case study for AI Call Agent — a self-hosted, multi-tenant, multilingual AI phone-agent platform where compliance is enforced outside the model. Live demo page included.

Source-traceable comparison of EU and China AI and data law — one question per comparison, every claim graded and dated

Governed AI Agents for State & Local Government on AWS — 8 agentic solutions, MCP authorization gateway, Whole-of-Government orchestration, and compliance-first governance framework

Microsoft Purview Data Security Posture Management (DSPM) for AI — discovery, monitoring, and governance of Microsoft 365 Copilot and generative AI interactions across the tenant.

Cryptographic provenance for AI agents on the live web. Ed25519-signed, hash-chained evidence for every Bright Data fetch. EU AI Act Article 12 compliant. MIT.

Claude skills for SEBI compliance in Indian capital markets. First skill: SEBI Algo Trading 2026 framework.

CG-AG Framework v1.0 — Open standard for governing AI agents (CC BY 4.0)

RSK's harness for agent models: AI does admin work, an independent reviewer checks it, and a human approves anything involving money or a client. Nothing can skip that last step.

Third-party and software supply chain risk assessment of the 2026 open-source compromise wave (Trivy, Bitwarden, Checkmarx → OpenAI/Vercel downstream). Full GRC workflow: methodology, risk register, NIST CSF 2.0 / ISO 27001 / SP 800-161 control mapping, TPRM program response, KRIs, and board briefing. OSFI B-10/B-13 context.

Regulatory-change remediation copilot for financial services — the agent maps, groups and drafts; a human approves every cohort; every action is proven and audited. DORA demo.

MCP server and agent skills for CVD Portal. Coordinated vulnerability disclosure and EU Cyber Resilience Act compliance for manufacturers.

AI governance document and evidence auditing engine: regulation -> control -> implementation -> evidence -> gap. Client-side, local-first.

EchoLint: call-recording compliance audit — Whisper transcription → DFA keyword screening → GPT-4o mini semantic re-screening → human review, feeding a corpus loop that mines new sensitive words.

GitHub Action + CLI for replayable CI/PR/release gate decisions - zero-config Self-Test turning checks, scanners, and AI-agent signals into deterministic, tamper-evident PASS/WARN/BLOCK records. Read-only, zero dependencies, Apache-2.0.