software-assurance

Scoring Threat Objects Analysis Tool

Governed AI-assisted software delivery system record covering human authority, read-only audit, evidence-qualified claims, signed releases, and verifiable release-asset provenance.

A lightweight fuzzing tool to support testing other software or devices for flaws

Software build assurance for coding agents - enforced red-first TDD, self-tested gates, calibrated independent verification, and commit-bound evidence.

Reusable LabVIEW compare action with stewarded validation, release, and downstream adoption workflows.

AI proposes. Humans decide. Source-available AI assurance and control plane for governed code change: agent identity, scoped authorization, policy gates, PR/CI evidence binding, replayable evidence, chained receipts, traceability, revision-bound assurance packages, independent verification, and human review.

OMG Knowledge Discovery Metamodel (KDM) 1.4 (formal/16-09-01) / ISO/IEC 19506 — extensible TypeScript base classes and interfaces for the KDM metamodel. Pure KDM; downstream consumers extend through TypeScript inheritance.

Assurance and conformance toolkit for reproducible verification of AI-assisted software engineering.

Azure Workbook for monitoring Software Assurance compliance across Arc-enabled servers and SQL Server instances

Policy and assurance layer for AI-assisted software engineering — turning engineering rules into executable obligations, evidence, and release readiness.

Public replayable evidence package for CASTÚO-SYSTEM S-001A, including frozen fixtures, execution envelopes, hashes and bounded claims; does not imply production or field validation.

Security related improvements to be contributed to an open source software project

Track Azure Hybrid Benefit usage and Software Assurance entitlement consumption with this Azure Monitor Workbook. Monitor core-based licensing across Windows Server and SQL Server workloads.

Behavioral Provenance Record (BPR) — A vendor-neutral conformance specification for traceable AI-generated software

Synthetic, executable reliability mechanisms extracted from Nexora

Behavioral Assurance Runtime — a lightweight, model-optional Rust assurance daemon that learns intended behavior, prepares human-gated repairs, and independently verifies them.

Universal Governance Kernel (UGK): a stdlib-only Python constitutional governance substrate with receipt-before-effect execution, hash-chained receipts, fail-closed verification, and release continuity proofs.

Automated assurance and adversarial benchmarking engine for evidence-governed systems: testing, failure injection, replay validation and bounded-claim challenge.

Read-only GitHub Action and CLI for customer due diligence: generates a hashed public-repository evidence dossier without tokens or code execution.

A local-first trusted change control plane for multi-agent software work.