GovernanceOS home: Defensible AI Platform Northline Advisory
NA

Signed in as Practitioner, Northline Advisory.

AccountHelp and supportSign out

Nebula MutualDefensible AI Library / Agents

Agents

One agent for each module. Each reads a client’s workspace, read-only, after you sign in.

Prototype states

  • Maturity position MESAPlaces an institution on four altitudes, in words, from its records.
    Used by
    CRO, Compliance lead, Internal audit, and the practitioner
    Produces
    A maturity position report and board briefing inputs, with gaps marked missing
    Never
    Gives a score, a grade or a percentage
    Download the agent: Maturity position

    agents/gos-maturity-position.md

  • Charter and decision rights CADREDrafts the charter, decision rights and escalation paths, and checks that each approver holds authority.
    Used by
    CRO, Compliance lead, and the practitioner
    Produces
    A charter, a decision-rights table, escalation paths and the authority gaps
    Never
    Names a committee as an approver
    Download the agent: Charter and decision rights

    agents/gos-charter-authority.md

  • Gate review Five-GateAssembles the pack for a gate, G1 to G5, with each piece of evidence typed, produced or missing.
    Used by
    Model owner, Validator, CRO, and the practitioner
    Produces
    A gate record draft with one named approver, its conditions and the missing list
    Never
    Passes a gate, or says a system may run
    Download the agent: Gate review

    agents/gos-gate-review.md

  • Model validation MESA MRMDrafts the validation report: what was tested, what was not, bias by group and the revalidation triggers.
    Used by
    Validator, Model owner, and the practitioner
    Produces
    A validation report, a bias audit report and trigger register entries
    Never
    Records a result for a test nobody ran
    Download the agent: Model validation

    agents/gos-model-validation.md

  • Data governance Data governanceBuilds classification, lineage and residency for each system, and drafts the impact assessments.
    Used by
    Data lead, Model owner, Compliance lead, and the practitioner
    Produces
    A data governance view, lineage, a residency attestation and impact assessment drafts
    Never
    Takes in personal data: it works from metadata
    Download the agent: Data governance

    agents/gos-data-governance.md

  • Vendor assessment AVRFIssues the questionnaire, records the vendor’s answers and prepares a decision for signature.
    Used by
    Procurement lead, CISO, Compliance lead, and the practitioner
    Produces
    The questionnaire, findings, conditions, a comparison in words and a decision draft
    Never
    Decides, or scores a vendor
    Download the agent: Vendor assessment

    agents/gos-vendor-assessment.md

  • Incident response AIRPTakes an incident from the first signal to the review, with its severity, timeline and reconstruction.
    Used by
    CISO, CRO, and the practitioner
    Produces
    An incident pack, draft notices, the review and the trigger that reopens a system
    Never
    Sends a notice, or invents a deadline no regulation row states
    Download the agent: Incident response

    agents/gos-incident-response.md

  • Cross-border residency Cross-BorderNames the deployment pattern from where data sits and where the institution is supervised.
    Used by
    CISO, Data lead, Compliance lead, and the practitioner
    Produces
    A transfer risk register and a residency position for each system
    Never
    States a transfer basis no regulation row supports
    Download the agent: Cross-border residency

    agents/gos-cross-border-residency.md

  • Sharia dual review SACFPrepares the technical and Sharia tracks, and the questions for the Sharia supervisory board.
    Used by
    Sharia board liaison, Validator, and the practitioner
    Produces
    A dual validation draft kept as two tracks, the checklists and the board’s questions
    Never
    Makes or infers a Sharia ruling
    Download the agent: Sharia dual review

    agents/gos-sharia-dual-review.md

  • Engineering review PEVG, PARA and BOEAsks the engineering review questions of each system and drafts its BOE Declaration.
    Used by
    Model owner, CISO, Validator, Internal audit, and the practitioner
    Produces
    Review answers with their gaps, and a BOE Declaration draft for each system
    Never
    Accepts a system’s own say-so as verification
    Download the agent: Engineering review

    agents/gos-engineering-review.md

Connect an agent to a client

  1. Copy the client workspace’s address on Assistant.
  2. Add it to your assistant as a connector named governanceos, then sign in with your email code.
  3. Approve read-only access. The agent reads; its drafts stay in your assistant until you enter them here.
Learn more about connecting

In Claude Code, save the file in your agents folder, then run claude mcp add --transport http governanceos with the address, open /mcp and choose Authenticate.

In Claude, ChatGPT or Microsoft Copilot, add the address as a connector and use the file as the instructions.

One client at a time: to work on another, replace the address and sign in again. The email code lasts ten minutes.

Every read is in the log on Assistant, with the assistant, the person and the tool. Revoke access there at any time.

A client whose regime profile denies cloud assistants has no address. Its records stay out of every assistant.