GovernorAI™ by SentinelLayer™

The AI Governance Control Plane

Four pillars of governance. One control plane. Every cloud. <10ms enforcement.

One Platform. Full Visibility.

Real-time governance dashboard with fleet health, policy decisions, live event feed, and latency monitoring.

GovernorAI Dashboard — Real-time fleet overview with KPI metrics, policy decisions chart, live event feed, latency percentiles, and agent fleet health grid
GovernorAI Dashboard — Fleet overview with real-time policy decisions, live event feed, and agent health monitoring

Four Pillars of AI Governance

Every pillar enforced deterministically. No LLM in the governance loop.

Pillar 1

Universal Enforcement

Policy Enforcement Gateway

Every tool call from every agent passes through GovernorAI before reaching target systems. Fail-closed by default—if no policy matches, the action is denied.

  • <10ms p99 latency at 1000+ RPS
  • Stateless gateway scales horizontally
  • Allow / Deny / Require Approval decisions
  • Fail-closed: no policy = denied
JSON
{
  "agent_id": "finance-agent-v1",
  "session_id": "sess-123",
  "tool": "erp.process_payment",
  "args": {"amount": 100, "currency": "USD"}
}

// Response
{
  "action_id": "act-789xyz",
  "decision": "allow",
  "reason": "Tool allowed by policy",
  "latency_ms": 2
}
Pillar 2

Behavioral Intelligence

Rogue Agent Detection

Agents that stop reporting are the most dangerous agents. GovernorAI monitors heartbeats, detects orphaned sessions, and escalates anomalies automatically.

  • Heartbeat monitoring with configurable TTL
  • Orphan session detection
  • Severity escalation: INFO → CRITICAL
  • Auto kill switch on EMERGENCY
Deep-dive →
YAML
heartbeat:
  interval: 30s
  ttl: 90s
  escalation:
    warning_after: 60s
    critical_after: 90s
    emergency_after: 120s
  on_emergency: kill_switch
Pillar 3

Continuous Remediation

Instant Containment

When something goes wrong, shut it down instantly. Scope the kill switch to a single session, an entire agent, a namespace, or everything.

  • <100ms propagation to all gateways
  • Scopes: agent, session, namespace, global
  • Configurable TTL for auto-recovery
  • API-triggered for SIEM/SOC integration
Multi-Cloud →
Bash
curl -X POST http://localhost:8080/api/v1/killswitch \
  -H "Content-Type: application/json" \
  -d '{
    "scope": "agent",
    "target": "finance-agent-v1",
    "reason": "Suspicious activity",
    "initiated_by": "security-team",
    "ttl": "1h"
  }'
Pillar 4

Provable Compliance

Immutable Audit Trail

Every action, every decision, every outcome—logged immutably. Structured events designed for compliance, not raw prompt dumps.

  • Append-only event store
  • SOC 2, GDPR, HIPAA-aligned controls
  • Structured JSON events
  • No raw prompts stored
Compliance →
JSON
{
  "event_type": "action_executed",
  "timestamp": "2025-01-15T10:30:00Z",
  "agent_id": "finance-agent-v1",
  "session_id": "sess-123",
  "action_id": "act-789xyz",
  "tool": "erp.process_payment",
  "decision": "allow",
  "policy_id": "finance-agent-policy",
  "policy_version": 3,
  "latency_ms": 2
}
Code Patent-Pending

Governance-as-Code

Define what your agents can and cannot do. As YAML. As Rego. Version controlled, auditable, and reviewable—just like infrastructure.

  • YAML policies for common patterns
  • OPA/Rego for complex logic
  • Full version history with rollback
  • 4 OPA evaluation modes
Deep-dive →
YAML
id: finance-agent-policy
name: "Finance Agent - Production"
agent_id: "finance-agent-v1"
governance_mode: enforcement
fail_closed: true

session:
  max_steps: 50

cost:
  max_usd_per_session: 25.00

tools:
  allowed:
    - "erp.*"
    - "email.send"
  denied:
    - "shell.*"

rules:
  - id: high_value_payment
    priority: 1
    match:
      tool: "erp.process_payment"
      condition:
        field: "args.amount"
        operator: ">"
        value: 5000
    action: require_approval
Approval

Human-in-the-Loop Workflows

Some actions are too important for automation alone. GovernorAI pauses execution and routes high-risk actions to human approvers via webhooks.

  • Configurable approval thresholds
  • Webhook-based notifications
  • Timeout-based auto-deny
  • Full audit trail of approvals
JSON
{
  "action_id": "act-456abc",
  "decision": "require_approval",
  "reason": "Payment exceeds $5,000 threshold",
  "approval": {
    "status": "pending",
    "required_by": "finance-team",
    "timeout": "30m"
  }
}

Built for Production

GovernorAI is designed as infrastructure, not middleware. Performance is a feature.

<10ms
p99 latency
<3ms
median eval
1000+
requests/sec
<100ms
kill switch

SDKs & Integrations

Integrate GovernorAI into any agent framework. Python, Go, or raw REST.

from governor import governed

@governed(agent_id="finance-agent-v1")
def run_agent(input, __gov_ctx__=None):
    # Every tool call goes through GovernorAI
    result = __gov_ctx__.execute(
        "erp.process_payment",
        {"amount": 100, "currency": "USD"}
    )
    return result
curl -X POST http://localhost:8080/api/v1/gateway/execute \
  -H "Content-Type: application/json" \
  -d '{
    "agent_id": "finance-agent-v1",
    "session_id": "sess-123",
    "tool": "erp.process_payment",
    "args": {"amount": 100, "currency": "USD"}
  }'
# List policies
curl http://localhost:8081/api/v1/policies

# Rollback to previous version
curl -X POST \
  http://localhost:8081/api/v1/policies/my-policy/rollback \
  -H "Authorization: Bearer <token>" \
  -d '{"target_version": 1}'

Architecture

Four components. One enforcement point. No exceptions.

Least Trusted
Most Trusted
Untrusted

AI Agent

LangChain · CrewAI · LlamaIndex · Bedrock Agents · Azure AI · GCP ADK · AutoGPT

tool call intercepted
Your Environment · VPC / On-Prem

Execution Gateway

Stateless enforcement proxy deployed in your infrastructure. Every tool call evaluated against policy. No data leaves your environment.

<10ms p99 Fail-Closed OPA/Rego Kill Switch No LLM
encrypted · mTLS
SaaS · Self-Hosted · Air-Gapped

GovernorAI Control Plane

Centralized governance services. Policy management, compliance automation, audit trail, and fleet orchestration.

Policy Engine
YAML · OPA/Rego
Event Ingest
Merkle-sealed
Compliance
SOC 2 · GDPR · HIPAA
Approvals
Human-in-the-loop
Dashboards
Fleet observability
Audit Trail
Immutable · Exportable

Deploy GovernorAI

Join the Design Partner Program for early access, direct founder access, and roadmap influence.