# GIA Governance

AI workforce governance control plane. 29 governed MCP tools for decision classification (MAI framework), compliance scoring, audit chain verification, risk assessment, and multi-vendor AI governance…

## Quick Start

```bash
# Connect this server (installs CLI if needed)
npx -y @smithery/cli@latest mcp add knowledgepa3/gia-governance

# Browse available tools
npx -y @smithery/cli@latest tool list knowledgepa3/gia-governance

# Get full schema for a tool
npx -y @smithery/cli@latest tool get knowledgepa3/gia-governance classify_decision

# Call a tool
npx -y @smithery/cli@latest tool call knowledgepa3/gia-governance classify_decision '{}'
```

## Direct MCP Connection

Endpoint: `https://gia-governance--knowledgepa3.run.tools`

## Tools (29)

- `classify_decision` — Classify an AI agent decision using the MAI Framework (Mandatory/Advisory/Informational). Returns classification level,…
- `evaluate_threshold` — Compute the Storey Threshold — escalation rate (gates required / total operations). Returns current rate, status, and r…
- `score_governance` — Compute weighted governance score from caller-provided Integrity, Accuracy, and Compliance values (0-1). Returns weight…
- `audit_pipeline` — Query the audit ledger for governance entries. Search by operation name or retrieve recent entries. Returns hash-chaine…
- `monitor_agents` — Monitor the status and health of all governed AI agents. Returns supervisor state, repair history, and failure counts.
- `map_compliance` — Map GIA governance components to regulatory compliance frameworks (NIST AI RMF, EU AI Act, ISO 42001, NIST 800-53, LIND…
- `assess_risk_tier` — Assess the risk tier of an AI system using rule-based mapping to EU AI Act categories (Unacceptable, High, Limited, Min…
- `generate_report` — Generate a governance status report. Includes system health, threshold status, compliance coverage, and operational met…
- `system_status` — Get full GIA system status including engine health, uptime, governance metrics, and configuration.
- `approve_gate` — Approve or reject a pending MANDATORY gate decision. Lists pending gates if no gate_id provided. This is the human-in-t…
- `seal_memory_pack` — Create and hash-seal a new Governed Memory Pack (GMP). The pack becomes an immutable, TTL-bound institutional knowledge…
- `load_memory_pack` — Load a Governed Memory Pack into agent context. Validates TTL, trust level, role access, context class, and hash integr…
- `transfer_memory_pack` — Transfer a memory pack between agents via a governed knowledge corridor. Creates a derived pack with transfer provenanc…
- `compose_memory_packs` — Compose multiple memory packs into a unified execution context. Highest risk level wins, shortest TTL wins, roles inter…
- `distill_memory_pack` — Distill governance patterns from usage history into a draft heuristic pack. Returns EPHEMERAL draft that requires MANDA…
- `promote_memory_pack` — Promote a memory pack to a higher trust level after human review. This is how distilled EPHEMERAL packs become CASE or …
- `record_value_metric` — Record a workflow value metric — tracks time saved, risk blocked, success rate, autonomy level, and task complexity for…
- `record_governance_event` — Record a governance event — tracks gates triggered, drift prevented, violations blocked, red team findings, and human i…
- `generate_impact_report` — Generate a full economic + governance impact report. Returns pilot ROI data: time saved, cost avoided, risks blocked, s…
- `srt_run_watchdog` — Run real health check probes from the MCP container (API health, frontend, disk, memory, TLS cert, DB, DNS). Returns ac…
- `srt_diagnose` — Run the SRT Diagnostician on an incident. Matches finding to known playbooks, identifies root cause, and proposes a sta…
- `srt_approve_repair` — Approve or reject a pending SRT repair plan. Classification: MANDATORY — this is the human-in-the-loop gate. Repair pla…
- `srt_generate_postmortem` — Generate a structured postmortem report for a completed SRT incident. Includes timeline, root cause, what worked/failed…
- `verify_ledger` — Verify the integrity of the hash-chained forensic audit ledger. Recomputes every SHA-256 hash from genesis and reports …
- `gia_scan_environment` — Run scout swarm to detect target environment — OS, containers, services, network, storage. Returns EnvironmentProfile f…
- `gia_list_packs` — List available governed operations packs. Filter by intent (remediation/patrol/hardening/audit), category, risk level, …
- `gia_dry_run_pack` — Preview remediation pack execution — shows hydrated commands, compatibility check, validation, blast radius. Returns in…
- `gia_apply_pack` — Execute a remediation or hardening pack with MANDATORY gate approval. Requires inputsHash from gia_dry_run_pack (what-y…
- `gia_run_patrol` — Execute a patrol or audit pack — read-only posture checks that produce findings or compliance evidence. Classification:…

```bash
# Get full input/output schema for a tool
npx -y @smithery/cli@latest tool get knowledgepa3/gia-governance <tool-name>
```

## Resources

- `gia://spec/mai-framework` — MAI Framework (Mandatory/Advisory/Informational) specification and classification rules.
- `gia://spec/storey-threshold` — Storey Threshold quantitative governance health metric specification.
- `gia://spec/governance-scoring` — Three-dimensional governance scoring specification (Integrity, Accuracy, Compliance).
- `gia://status/live` — Live GIA system status including engine health, threshold, and telemetry.
- `gia://spec/architecture` — GIA system architecture and governance inheritance chain.

## Prompts (4)

- `gia-assess` (system_description, domain) — Perform a governance assessment on an AI system or operation. Walks through risk tier, MAI classification, scoring crit…
- `gia-design-gate` (pipeline_description, is_client_facing, has_pii) — Design a MAI gate strategy for an AI agent pipeline. Recommends classification levels and gate enforcement for each sta…
- `gia-compliance-report` (framework, format) — Generate a comprehensive compliance report mapping GIA governance to regulatory frameworks.
- `gia-health-check` — Run a full GIA system health check covering threshold, agents, and audit integrity.
