Centralized portal for interacting with governance frameworks and AI project tracking
🚀 New AI Project Onboarding
Register a new AI project to begin the governance process. This will create a project record and initialize the 5-gate workflow.
✅ Project Created Successfully
📋 What Happens Next?
1
Ideation
2
Design
3
Development
4
Deployment
5
Operations
Gate 1: Ideation
Define use case, identify stakeholders, assess feasibility. No artifacts required.
Gate 2: Design
Complete Risk Assessment and Policy Template before proceeding.
Gate 3: Development
Generate Model Card, DPIA, and Ethics Charter during development.
Gate 4: Deployment
Complete Fairness Audit and HITL SOP before deployment.
🏭 Software Factory — AGPF Pipeline Integration
Ideation
Design
🏭Development
Deployment
Operations
Every Factory Build-generated commit runs through this exact scan engine before merge — AI-generated code gets no exemption from the NIST / EU AI Act / ISO / FedRAMP / CMMC rule set applied here.
🔍 GitHub Repository Scanner
Scan your GitHub repository to assess governance compliance across selected frameworks
NIST AI RMF
NIST · Mixed
Trusted-AI/AIF360
IBM AI Fairness 360 · MEASURE strong (fairness metrics), MANAGE weak (no operational monitoring) · Good mixed-score demo
NIST · Strong
microsoft/responsible-ai-toolbox
Purpose-built responsible AI · All 4 NIST pillars: GOVERN, MAP, MEASURE, MANAGE
EU AI Act
EU AI Act
Trusted-AI/AIF360
Fairness metrics, bias detection, demographic parity — maps to EU AI Act Article 10 (data governance) & Article 15 (accuracy/robustness)
EU AI Act
microsoft/responsible-ai-toolbox
Explainability (Article 13), human oversight patterns (Article 14), risk documentation (Article 9) — strong EU AI Act signal
EU AI Act
openai/evals
Structured evaluation framework · Maps to EU AI Act Article 9 (risk management) & Article 15 (accuracy testing) · ISO-42001 clause 9
EU AI Act · GDPR
privacytrustlab/ml_privacy_meter
Privacy auditing, differential privacy, membership inference · EU AI Act Article 10 (data governance) + GDPR Article 25 (privacy by design)
ISO/IEC 23894 (AI Risk) — Issues Demo
ISO 23894 · 42%
scikit-learn/scikit-learn
predict() methods with no drift detection · Missing risk register, no residual-risk tracking · Realistic gap demo
ISO 23894 · 8%
SeldonIO/seldon-core
Model serving at scale · No drift detection, no risk register · 1 positive / 11 negative findings
Classic Python web framework · 7 high-severity gaps: route handlers with no Prometheus/OpenTelemetry (Continuous Monitoring gap) · Good contrast to FastAPI
ISO 27001 · Critical
OWASP/NodeGoat
Intentionally insecure Node.js app · Hardcoded secrets (Cryptography gap), PII exposure, no auth logging · Maximum impact gap demo
Terraform (ISO 27001 / CMMC)
Terraform · ISO 27001
hashicorp/terraform-provider-azurerm
examples/managed-disks/encrypted · Key Vault, disk encryption set · 7 positive findings · Clean Terraform demo
Terraform · Mixed
hashicorp/terraform-provider-azurerm
examples/storage · TLS enforcement + encryption positive, missing required tags against the CMMC configuration baseline · Good mixed demo
YAML / Kubernetes
YAML · Strong
prometheus-operator/kube-prometheus
Full observability stack · Health probes throughout, resource limits, RBAC defined · Strong FedRAMP continuous-monitoring signal
Factory Build projects appear in this same portfolio view and gate-distribution KPIs alongside manually-built projects — there is no separate dashboard for Factory-originated work.
🏢 PMO Portfolio Dashboard
Combined view of governance compliance scores and gate lifecycle status across all AI projects
Compliance Overview
Total Projects
—
Avg. Score
—
Deploy Ready
—
Needs Attention
—
Gate Lifecycle Distribution
Ideation
—
Design
—
Development
—
Deployment
—
Operations
—
All Projects
Loading...
🏭 Software Factory — AGPF Pipeline Integration
🏭Ideation
🏭Design
🏭Development
🏭Deployment
🏭Operations
A Factory Build project's compliance score and gate position update here in real time as the build progresses — this scorecard doesn't distinguish how the code was written, only whether it's compliant.
📊 Governance Scorecard
Select a project to view its compliance score, artifact status, and scan history.
Loading...
Overall Score
—
Current Gate
—
Artifacts
—
Compliance
—
IdeationDesignDevelopmentDeploymentOperations
Scan History & Trends
🏭 Software Factory — AGPF Pipeline Integration
Ideation
🏭Design
Development
🏭Deployment
Operations
Required artifacts identified in a Factory Build's Gate 2 Design build spec (DPIA, model card, risk register) are pre-populated here instead of authored from a blank template; deployment/audit artifacts land here at Gate 5 Deployment.
📄 Governance Artifact Generator
View existing artifacts or generate new ones for your AI project
Existing Artifacts
Generate New Artifact
✅ Artifact Generated
🏭 Software Factory — AGPF Pipeline Integration
🏭Ideation
🏭Design
🏭Development
🏭Deployment
🏭Operations
Factory Build projects move through all 5 gates below like any other project — gate advancement is blocked here if a Development/Deployment scan finding is unresolved.
🚪 Gate Lifecycle Summary
Distribution of all projects across the 5-gate governance lifecycle
Ideation
—
Design
—
Development
—
Deployment
—
Operations
—
Loading gate status...
🚪 Governance Gate Manager
Track progress through the 5-gate governance lifecycle across all frameworks
Loading...
Gate Progression
🏭 Software Factory — AGPF Pipeline Integration
Ideation
🏭Design
Development
Deployment
Operations
Frameworks selected here become generation constraints for Factory Build code generation at Gate 2 Design — the same framework rule set, not a separate one.
📚 Framework Explorer
Browse governance frameworks with pillar-based scorecards, KPIs, runbook guidance, and compliant code patterns
v2.3
Framework Actions
📚
Select a Framework to Explore
Choose a governance framework from the dropdown above to view its pillar structure, KPIs, and runbook guidance.
🛠️ Developer Dashboard
Manage project details, configure applicable frameworks, track your open artifact backlog, and generate code snippets
My Projects
Loading...
👈
Select a project to open your workspace
Edit project details, set frameworks, and manage your backlog
🔌 Developer Integration
Integrate AI governance into your development workflow using REST APIs and GitHub Actions