#Governance

Tool Wrapping: From ADK Functions to MAF Governed Tools

How to port tools, add policy enforcement, and integrate OPA.

From ADK functions to MAF governed tools. Adding policy enforcement, DLP, approval gates, and OPA integration.

AI governance — from credential to codebase

Board policy as a YAML file the risk team owns. Annexure VI as a database query. Every governance recommendation rendered as a file path in a Go repository.

Sovereign AI is a policy, not a slide

Classification → provider allowlist. A pii-classified message can only reach a provider whose region is in the allowlist for pii. Sovereignty as a runtime gate, not a checkbox.

Policy as code, without the risk team having to ship code

A tiny CEL-style DSL plus a board-approved YAML file. The risk team adds a governance rule by editing a config file; engineering ships the rule by restarting the service.