OpenGPL: Governance Policy Language

A policy language for AI agents that produces compliance evidence. One .gpl file says what an agent may take in, what it may produce, which tools and networks it may use, and which compliance frameworks you are answering to. The opengpl SDK checks prompts and responses against the policy at runtime, records every decision, and turns the policy and its decision log into OSCAL that an assessor can read: which NIST SP 800-53 controls the policy addresses, and the runtime decisions behind them. Every control in the output is marked enforced, heuristic or declared, and the output never claims a control is met.

This archive is the whole project at tag v0.2.0: specification 0.1.1, Python SDK 0.2.1 and sidecar 0.2.1.

Source: https://github.com/sadayamuthu/opengpl