Fail-closed action governance, sensitive-data detection, and audit evidence for n8n.

XREPORT by XQA — All-in-One Enterprise Test Reporter for Playwright, WebdriverIO (WDIO), Jasmine, Cypress, Jest, Vitest & Mocha. Local audit evidence, quality gates, control tagging, flaky detection, run history, traces, AI + MCP. Zero Java. From xqa.io.

Official Sigigo SDK — cryptographically verifiable audit evidence for applications, AI agents, and workflows

Repo knowledge system — relational catalog with full-text search, audit evidence, and MCP access

Bylaw ALCV runtime enforcement SDK for AI agent actions with policy-gated clearance, A-JWT authorization, and audit evidence

Evidence layer for agentic AI systems: turn OTLP agent traces into signed, independently verifiable audit evidence (EU AI Act, ISO/IEC 42001, NIST AI RMF).

MCP server for EU VAT validation via VIES — returns official consultation numbers (audit evidence) through the Vatnode API, inside Claude, Cursor, or any MCP client.

AI claim verification CLI. Paste what an AI told you — Faultline extracts every claim, verifies against live sources, scores the risk, and generates audit evidence. Provider-agnostic: Gemini, OpenAI, Claude, Perplexity.

Official TypeScript SDK for Lodger audit evidence.

Compliance and audit-evidence layer for AI agents. Pre-flight checks return allow, block, or hold before a risky action runs, and every decision produces an Ed25519-signed evidence record that anyone can verify offline with the published public key and op

Sotto CLI and buyer MCP server for Canton x402 APIs — search, inspect, purchase with human wallet approval, and audit evidence. Never holds a key.

AWS SDK for JavaScript Auditmanager Client for Node.js, Browser and React Native

Official JavaScript/TypeScript client for Open AI Guardrails policy distribution, audit evidence, and OPA control-plane APIs.

Audits NPM, Yarn, and PNPM projects in CI environments

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles, optional paid runtime intelligence (Fallow Runtime). Quality, risk, architecture, dependencies, duplication, and design-system drift for humans, CI, and the agen

Evidence-first, read-only coding-agent skills and project adapter tooling.

Verdaccio Middleware plugin to bypass npmjs audit

Deterministic test-enforcement harness — escape-scan, hash-pinning, CRAP, architecture checks, bias detection, Gherkin lint. Companion to the audit-tests and implement-tests Claude Code skills.

AI work audit receipts — verifies and records what an AI coding agent actually changed in your local git tree. Provides git-based evidence for compliance review (not a compliance guarantee).

Mission control for autonomous pi: interview-drafted goals, an audited task queue, and forever-loops (metric, spec, project-audit) that run for hours. A detached extension-less auditor process re-verifies every completion with raw evidence without holding