Policy As Code Python Packages

pulumi-policy

Pulumi's Policy as Code SDK, CrossGuard. Define infrastructure checks in code to enforce security, compliance, cost, and other practices, enforced at deployment time.

shadow-diff

Behavior contracts for AI agents

assay-it

CI-native evidence compiler for agent systems: MCP policy enforcement, evidence receipts, Trust Basis claims, and reviewable artifacts.

cleancloud

Read-only cloud hygiene for AWS, Azure, and GCP. Multi-account org scanning, CI/CD enforcement, and deterministic cost modeling. No agents, no telemetry.

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

opal-common

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

prodcycle

Multi-framework policy-as-code compliance scanner for infrastructure and application code. Evaluates Terraform, Kubernetes, Docker, and source code against SOC 2, HIPAA, and NIST CSF.

actra

Actra - control what runs before it runs, controls what actions are allowed before they execute. Evaluate policies across APIs, workflows and AI agents in real time.

opal-client

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

opal-server

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

agent-aegis

LLM guardrails & prompt injection detection for Python. Auto-instruments LangChain, CrewAI, OpenAI, LiteLLM + 8 more frameworks. PII masking, toxicity detection, policy CI/CD. One line, zero code changes.

cloudmorph-tessera

Deterministic firewall for MCP agent tool calls. YAML policies, hash-chained audit, blast-radius scoring, multi-cloud cost intelligence.

squash-ai

🛡️ Automated EU AI Act compliance for AI/ML teams — Annex IV docs, SBOMs, policy checks, and signed audit records inside your CI/CD pipeline. August 2, 2026 enforcement deadline. ⏰

kitelogik

Governance control plane for autonomous AI agents — OPA/Rego policy enforcement at the agent action layer. Apache 2.0.

resoto-plugin-aws

Runs collector plugins and sends the result to resotocore.

resotolib

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

coding-ethos

Policy-as-code enforcement for AI agents: MCP server, CEL policies, git hooks, SARIF, and static analysis guardrails.

resoto-plugin-onprem

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-digitalocean

Resoto DigitalOcean Collector Plugin

resoto-plugin-example-collector

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-gcp

Resoto GCP Collector Plugin

resoto-plugin-k8s

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-github

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

resoto-plugin-vsphere

Resoto VSphere Collector Plugin