AI Governance Engineer
GitHub

Tool categories, by layer.

The tool categories that fill each layer of the stack, with 96 illustrative examples across 31 categories. The category is the substance; the brands are examples, each with its licence and a checked link. See how they fit together in the stack.

The five layers

Each category is keyed to the layer it serves. The colour ticks throughout follow this legend.

  • L1 Govern-as-Code
  • L2 Inventory & Transparency
  • L3 Evals & Red Teaming as Evidence
  • L4 Runtime Controls & Observability
  • L5 Assurance & Continuous Compliance
Reference toolchain by stack layer An architecture diagram generated by Archify. Evidence store · OSCAL evidence · 05 Assurance & Continuous Compliance Evidence store OSCAL evidence AI-governance suites · aggregate & present · 05 Assurance & Continuous Compliance AI-governance suites aggregate & present Guardrail frameworks · tool-call mediation · 04 Runtime Controls & Observability Guardrail frameworks tool-call mediation Agent workload identity · identity + kill switch · 04 Runtime Controls & Observability Agent workload identity identity + kill switch Observability · trace agent runs · 04 Runtime Controls & Observability Observability trace agent runs Evaluation frameworks · eval gate in CI · 03 Evals & Red Teaming as Evidence Evaluation frameworks eval gate in CI Adversarial probes · red-team & vuln probes · 03 Evals & Red Teaming as Evidence Adversarial probes red-team & vuln probes Agent registry · runtime-aware inventory · 02 Inventory & Transparency Agent registry runtime-aware inventory Agent-discovery tools · reconcile & flag drift · 02 Inventory & Transparency Agent-discovery tools reconcile & flag drift AIBOM formats · bill of materials · 02 Inventory & Transparency AIBOM formats bill of materials Policy engines · allow/deny logic · 01 Govern-as-Code Policy engines allow/deny logic Policy Cards · proposed policy artefact · 01 Govern-as-Code Policy Cards proposed policy artefact gate deploy on registration names object under test carries thresholds to runtime streams decisions & traces aggregated as OSCAL evidence rule as data reconciles, flags drift AIBOM per entry red-team evals identity & scope verdicts traced 05 Assurance & Continuous Compliance 04 Runtime Controls & Observability 03 Evals & Red Teaming as Evidence 02 Inventory & Transparency 01 Govern-as-Code Legend Backend Database Security External
Reference toolchain by stack layerThe reference toolchain mapped to the five stack layers, from policy engines and the agent registry up to guardrails, observability and the assurance store. Generated from the Body of Knowledge.Open interactive diagram (opens in a new tab)

The catalogue

Every category says what it does for governance and where the Body of Knowledge treats it. Filter by layer or by licence; the counts update as you choose.