One engineer.
683 substantive repos.
22 languages.14 named platforms.

Live visual atlas of every public repo at github.com/mizcausevic-dev — 190+ repos across 20+ languages, classified into named platforms and industry verticals. Auto-refreshed every 6 hours via gh api. Deploys to portfolio.kineticgain.com.

Operator surface for lease obligations, renewal blockers, landlord packet readiness, and property-safe review posture.

Operator surface for FinTech merchant risk review, chargeback pressure, reserve coverage, KYB drift, payout throttle risk, and review backlog.

Composite GitHub Action: runs deprecated-API + RBAC over-scope + Pod Security Standards + Helm values-coverage scans against a manifests dir (+ optional Helm chart), aggregates into one PR comment, fails on configurable severity. Turnkey form of the lane-#3 K8s pre-merge kit.

Validate OpenTelemetry GenAI spans against the official semantic conventions — 10 rules covering required attrs (provider/operation), token usage names + ranges, legacy attr-name detection, span kind, name format. Library + CLI.

Audit Kubernetes workload manifests against the Pod Security Standards. Flags privileged containers, host namespaces, hostPath mounts, dangerous capabilities, runAsRoot, missing seccomp, missing resource limits/probes, default ServiceAccount with token automount. Library + CLI.

Cross-reference {{ .Values.* }} usage in a Helm chart's templates/ against the dotted keys in values.yaml. Surfaces missing-default (no value declared) and unused-default (value declared, never referenced). Pure offline transform. Library + CLI.

Diff two MCP Tool Card documents — classify safety transitions (side-effect class escalation, reversible flipped to false, rate-limit removed, PII / secrets exposure escalation, human-approval removed, external systems added) and surface a breaking flag. The MCP tool-card counterpart to agent-card-diff.

Turn LLM usage records into OpenTelemetry GenAI spans with computed per-call cost — OTLP/JSON output, model price table, cost summary.

Scan a directory of Kubernetes YAML manifests for over-scoped RBAC: wildcard verbs/resources/apiGroups, escalation verbs, pod-exec, Secret reads, cluster-admin bindings, system:masters bindings. Pure offline transform. Library + CLI.

Generate adversarial test cases from an MCP tools/list — valid-minimal, missing-required, wrong-type, extra-field, boundary, enum-violation — each with an expected accept/reject verdict you can replay against the server.

Build a corpus-level citation/evidence graph from RAG interactions — most-cited docs, co-citation edges, and phantom (cited-but-never-retrieved) nodes. JSON-graph, Graphviz DOT, and summary output.

Attach RAG retrieval evidence to an LLM generation span as OpenTelemetry span events, and flag citation-integrity issues (cited-but-not-retrieved = hallucinated-citation risk).

Scan a directory of Kubernetes YAML manifests for deprecated / removed apiVersion usage. Pure offline transform — no cluster access. 27 catalog entries, multi-doc YAML aware, CI-friendly. Library + CLI.

Generate spec-conformant MCP Tool Cards from an MCP server's tools/list — bootstraps a per-tool safety/disclosure profile (side-effect class, reversibility, PII/secret exposure) for review.

Curated conformance corpus for prompt-provenance-spec v0.1 — categorized JSON fixtures (valid / dirty / shape) with declarative manifest. Drop-in regression target for any prompt-provenance consumer: validators, stampers, lineage analyzers.

Kubernetes operator enforcing declarative monthly USD budgets for LLM spend — evaluates an observed-cost ConfigMap against a limit and reports Warning/OverBudget posture with events. CRD + controller-runtime + Helm.

Aggregate cost-annotated OpenTelemetry GenAI spans into daily, per-(provider, model) rollups. Emits JSON, Markdown, or a Kubernetes ConfigMap manifest that llm-cost-budget-operator consumes — closes the GenAI FinOps pipeline. Library + CLI.

Capture an MCP server's tools/list to JSON by spawning it as a stdio subprocess. Zero runtime deps; the bridge between a live MCP server and mcp-registry-risk-scanner / mcp-tool-card-generator / mcp-tools-diff.

Curated conformance corpus for mcp-tool-card-spec v0.1 — categorized JSON fixtures (valid / dirty / shape) with declarative manifest. 5th corpus in the test-vectors set across the 4 Kinetic Gain Suite specs + OTel GenAI.

Kubernetes operator that runs recurring governance/compliance audits as CronJobs from a declarative ScheduledAudit resource. CRD + controller-runtime + Helm.

Productized stdio MCP mock server — reads a tools/list JSON and serves it with per-tool stubs (response/error/latency) and three schema-validation modes (off/lenient/strict). Test MCP CLIENTS without a real backend.

Fleet-analyze a directory of MCP Tool Cards. Counts by side-effect class, PII/secrets exposure, reversibility, human-approval-required; surfaces approval gaps (destructive tools missing human_approval_required: true). Library + CLI.

Kubernetes operator that publishes Kinetic Gain governance documents (AEO, Agent Cards, Tool Cards, disclosures) to /.well-known/ paths as ConfigMaps. CRD + controller-runtime reconciler + Helm chart.

Diff two evidence-bundle manifest.json files — classify changes (item added/removed/hash-changed, signature removed or signer changed, purpose changed, expires shortened, relationships added/removed) and surface a breaking flag. The evidence-bundle counterpart to agent-card-diff and mcp-tool-card-diff.

Generate a prompt-provenance-spec v0.1 document from raw prompt text. Computes sha256, fills required fields, threads parent → lineage. Library + CLI.

Diff two MCP tools/list snapshots — added / removed / modified tools, with breaking-change detection (removed tools, added required fields, removed properties, type changes). Markdown changelog + JSON output + --strict CI gate.

TS library + CLI that assembles a spec-conforming manifest.json for an evidence bundle directory. Scans content/, computes sha256 + size per file, threads bundle / relationships / provenance / signature blocks through. Companion stamper to evidence-bundle-spec.

Curated conformance corpus for evidence-bundle-spec v0.1 — categorized JSON manifest fixtures (valid / dirty / shape) with declarative manifest. Closes the evidence-bundle 4-piece kit (spec + builder + diff + test-vectors).

Statistical analyzer for an MCP tools/list snapshot — tool count, schema depth, property totals, type distribution, missing descriptions, schema-less / empty-schema flags, required-field ratios. Library + CLI.

Build a lineage graph over a directory of prompt-provenance documents. Detects cycles, duplicate keys, missing parents, deprecated-without-replacement, approved-with-no-evaluations, stale drafts, orphaned prompts. Library + CLI + Graphviz DOT export.

React + TypeScript studio for multi-touch attribution analysis, experiment interpretation, and executive growth decisioning.

React + TypeScript hub for audit queues, policy exceptions, SLA-aware approvals, and remediation workflow visibility

React + TypeScript control plane for lifecycle pressure, intervention timing, segment visibility, and operator-facing customer journey execution.

React + TypeScript executive dashboard for unified revenue, platform, content, cost, security, and growth visibility

React + TypeScript control-plane for access posture, policy exceptions, remediation tracking, and executive identity governance visibility.

React + TypeScript workbench for joiner-mover-leaver workflows, certification pressure, orphaned-account cleanup, and identity lifecycle visibility.

Go policy engine for latency budget enforcement, dependency drag review, tail-latency breaches, and operator-facing service-path response planning

React + TypeScript oversight hub for model criticality, release gating, evaluation drift, and executive AI risk visibility

React + TypeScript workspace for forecast quality, commit risk, scenario planning, and executive revenue visibility.

React + TypeScript control room for privileged exposure, stale credential drift, exception governance, and security remediation visibility.

React + TypeScript studio for workflow routing, approvals, retries, and operator-facing orchestration visibility

Prompt Provenance v0.1 draft. JSON document format for versioned, lineaged, reviewable LLM prompt records: content hash, parent chain, derivation type, eval results, approval state. Part of the Kinetic Gain Protocol Suite.

MCP Tool Cards v0.1 draft. Per-tool disclosure documents for Model Context Protocol servers: input/output schema, side-effect classification, tested-LLM matrix, latency, cost, audit surface. Layers on MCP without modifying it. Part of the Kinetic Gain Protocol Suite.

AI Tutor Cards v0.1 draft. Disclosure spec for AI agents in an educational role: audience (age, grade, subjects), pedagogy (Socratic / homework_policy / assessment_policy), safety & privacy (FERPA / COPPA / mandated-reporter). Sixth spec in the Kinetic Gain Protocol Suite.

Open JSON spec for student-side AI disclosure attached to submitted work. The student-side counterpart to AI Tutor Cards. Part of the Kinetic Gain Protocol Suite.

Open JSON spec for machine-readable district / school / course AI Acceptable Use Policies. The third leg of the EdTech trio (with AI Tutor Cards and Student AI Disclosure). Part of the Kinetic Gain Protocol Suite.

Open JSON spec for vendor disclosure of AI systems used in healthcare. HIPAA / FDA / SaMD posture, bias audits, EHR integration. The HealthTech vertical extension to the Kinetic Gain Protocol Suite. v0.1 draft.

Open JSON spec for vendor-published AI incident disclosure — the CVE-equivalent for AI agent failures. Cross-references every other affected Kinetic Gain Suite document. v0.1 draft.

Validate JSON files against the ten Kinetic Gain Protocol Suite specs in your CI.

TypeScript platform for experiment lift analysis, rollout decisioning, KPI interpretation, and growth-oriented experimentation workflows.

MCP server exposing SLO math + reliability config recipes. Compute burn rate, size rate limiters, pick breaker thresholds, get drop-in Python and Rust configs back. Part of the Platform Reliability Stack.

MCP server exposing the Kinetic Gain Decision Intelligence portfolio (procurement-decision-api + policy-as-code-engine + incident-correlation-rs + data-contract-registry) as Claude-callable tools. Sibling to mcp-reliability-toolkit.

FastAPI service that drafts AI Procurement Decision Cards (Kinetic Gain Protocol Suite spec #11) from a buyer rubric and vendor Suite documents. First cross-ecosystem bridge: Suite x Decision Intelligence.

Always-on validator service for AEO + Kinetic Gain Protocol Suite docs. Fetch, validate, hash, track drift across re-checks. Layer 4 of the AEO Reference Stack.

Declarative policy-as-code evaluator. JSON/YAML rules over Python contexts. Turns AI Procurement Decision Cards into runtime-enforceable PolicyBundles.

Schema registry for data contracts. Semver versioning, compatibility checks (backward/forward/full), ownership, freshness SLAs. Bridges to procurement-decision-api.

HTTP graph-query service over AEO Protocol crawls. Layer 5 of the AEO Reference Stack. axum + petgraph, atomic ingest, neighbours / shortest-path / find-by-claim.

Walks the Kinetic Gain Protocol Suite graph from an AI Incident Card and emits a structured remediation plan. Rust + petgraph; small surface, composes with the rest of the portfolio.

Sign + verify Kinetic Gain Protocol Suite docs using ed25519 over canonical JSON hashes. The missing 'this AEO actually came from the vendor' layer.

Server-side feature flag evaluation for async Rust. Targeting rules, sticky percentage rollouts, hot reload, zero RNG. Composes with reliability-toolkit-rs.

Async request mirroring with sampling, divergence detection, and structured response diffs. The SRE primitive for safe migrations. Part of the Platform Reliability Stack.

Streaming CSV validator against a data-contract-registry contract. Async, line-by-line, structured violation report. The fourth cross-ecosystem hook in the Kinetic Gain portfolio.

SLO + error-budget tracker for Python services. FastAPI middleware, Prometheus exporter, multi-window burn-rate alerts. Part of the Platform Reliability Stack.

Async reliability primitives for Tokio Rust services: rate limiter, circuit breaker, exponential-backoff retry, bulkhead. Part of the Platform Reliability Stack.

Subscribes to audit-stream-py SSE and re-exposes every governance event as a Prometheus counter. The consumer half of the Kinetic Gain audit-stream spine.

Python + FastAPI intelligence engine for executive briefing scoring, narrative generation, risk ranking, and action sequencing.

SQL warehouse for search console, crawl, index coverage, freshness drift, and URL-level observability diagnostics.

React + TypeScript flagship that maps customer, lifecycle, revenue, experimentation, and trust signals into one graph-first decision surface.

Python + FastAPI orchestration backend for dependency-aware signal routing, escalation sequencing, and cross-functional response planning.

Generate a Markdown README from an MCP tools/list snapshot. Optional enrichment from server.json + per-tool Tool Cards surfaces safety class, PII/secrets exposure, reversibility, human-approval, performance, per-call cost. Pure offline transform.

React + TypeScript strategy surface for downside, base-case, and upside planning across revenue, growth, AI, operations, and governance pressure.

Sniff which protocol a JSON document represents — agent-cards-spec, mcp-tool-card-spec, prompt-provenance-spec, evidence-bundle-spec, OTel GenAI OTLP envelope, or MCP tools/list. Routing primitive in front of any governance pipeline.

C# ASP.NET Core service for tenant-boundary policy evaluation, cross-tenant risk scoring, and isolation-focused platform response planning.

Fleet-level conformance scanner over a directory of Kinetic Gain Suite JSON docs. Sniffs the protocol of every file, counts by spec, validates required top-level blocks, reports unknowns and malformed files. Library + CLI.

SEO Governance Platform helps enterprise teams validate page metadata, canonical strategy, structured data, redirects, robots directives, and content publishing rules before content goes live.

TypeScript API for incident severity analysis, escalation routing, responder visibility, and operational incident-command workflows.

TypeScript customer success portfolio project demonstrating SaaS health scoring, churn-risk analysis, renewal prioritization, and playbook routing across product, support, and revenue signals.

Cloud Cost Intelligence Dashboard ingests and analyzes modeled cloud cost data across services, teams, environments, and accounts, then surfaces anomalies, overspend, idle resources, and optimization opportunities.

Static security scanner for MCP server.json registry manifests — flags supply-chain, transport, credential, and data-egress risks before you install a server.

TypeScript platform for editorial workflow intelligence, publishing readiness scoring, bottleneck visibility, and content operations governance.

Evidence Bundle v0.1 draft. Portable format for shipping evidence packets between systems (RAG citations, audit excerpts, compliance disclosures, incident-response artifacts). manifest.json + content/ + hashes + relationships + provenance + signature. Part of the Kinetic Gain Protocol Suite.

GitHub Action that reads OTel GenAI cost-annotated spans from a workflow artifact, aggregates spend by (date, provider, model), posts a Markdown summary as a PR comment, optionally fails the run when total spend > USD budget. Composes with otel-genai-rollup and llm-cost-budget-operator.

Operator surface for Microsoft Intune app protection, BYOD scope, policy gaps, and enforcement posture.

Webhook Ingestion Pipeline

Operator control plane for Power BI refresh reliability, gateway pressure, semantic-model drift, and stale report delivery risk.

Elixir incident routing backend for SLA-aware handoff scoring, owner assignment, and cross-functional escalation planning.

dbt + DuckDB warehouse for search console, crawl, index coverage, freshness drift, and URL-level observability diagnostics.

Kafka exactly-once payments backend with Outbox Pattern, Debezium CDC, and idempotency tracking.

Kotlin backend for release gate evaluation, dependency readiness scoring, freeze-window checks, and rollback-aware launch coordination

Terraform infrastructure blueprint for multi-environment networking, compute, observability, and policy-aware platform foundation design.

Ruby service for retention policy enforcement, legal hold protection, and records lifecycle management. WEBrick-based, designed for enterprise compliance workflows.

Scala policy simulation backend for governance scenarios, launch gates, risk thresholds, and operator-facing decision forecasting.

Java starter template for IBM App Connect custom connectors with descriptor, factory, packaging, and readiness guidance.

Bidirectional protocol-metadata translator between Google A2A (Agent-to-Agent) and the Model Context Protocol (MCP). MCP server.json + tools/list ↔ A2A AgentCard. Pure transform; closes the lane #4 gap.

Diff two A2A AgentCard documents — classify changes (autonomy escalation, memory escalation, tool/model removal, incident-response URI removal, etc.), surface a breaking flag. The agent-cards counterpart to mcp-tools-diff. Library + CLI.

Java Spring Boot backend for immutable compliance event history, timeline retrieval, exception pressure scoring, and audit-friendly governance workflows

Convert a Kinetic Gain Agent Card into runtime-specific agent configs — OpenAI Assistants, Anthropic system-prompt bundle, Vercel AI SDK, and a markdown briefing.

Fleet-analyze a directory of A2A AgentCard documents. Counts by autonomy_level / memory_persistence, flags autonomous-without-IRU, destructive-on-non-autonomous, persistent-memory-without-refusal-taxonomy. Library + CLI.

TypeScript platform for identity governance, privileged access review, audit visibility, and remediation-aware IAM workflows.

Convert MCP tool definitions (tools/list) into OpenAI, Anthropic, Google Gemini, and Vercel AI SDK tool/function schemas — wire one MCP server into any agent runtime.

Governance and observability layer for enterprise RAG systems. Chunk quality scoring, source freshness audits, retrieval drift detection, hallucination signals, and PII leakage scanning across every collection.

Conformance check between an A2A AgentCard's declared tools and an MCP server's tools/list. Reports missing (declared but not exposed), undeclared (exposed but not in card), matched; counts by side-effect class. Library + CLI.

React + TypeScript workspace for pricing approvals, margin guardrails, and operator-facing commercial deal execution.

Normalize raw LLM provider responses (OpenAI / Anthropic / AWS Bedrock / Google Gemini) into a canonical usage record — the adapter front-end for GenAI cost and tracing pipelines.

Single-binary security-headers auditor. Grades a domain (or a list of them) against an opinionated HSTS/CSP/COOP/COEP/Permissions-Policy rubric and emits either a terminal scorecard or JSON. CLI + HTTP-service modes. Third Go binary in the Kinetic Gain Protocol Suite.

BFS crawler for AEO Protocol v0.1 declaration graphs. Seed an origin, follow primary_source URIs, emit JSON Lines records of every fetch. Built on aeo-sdk-go. Concurrent, depth-limited, budget-capped, stdlib-only HTTP.

Command-line tool for the AEO Protocol v0.1. Validate, fetch, inspect, and extract claims from AEO declaration documents. Built on aeo-sdk-rust. clap + ureq + colored. Cargo-installable.

LegalTech state bar lifecycle tracker: ABA + state bar + state supreme court + federal court standing orders that govern licensed-attorney AI use. 9 jurisdictions seeded (ABA, CA, NY-COSAC, FL, DC, PA, TX, IL, SDNY incl. Mata v. Avianca). Covers attorneys' OWN AI use ethics.

AEO Protocol v0.1 draft. A well-known JSON document at /.well-known/aeo.json that lets entities declare authoritative claims, citation preferences, and audit hooks for answer engines. Spec + JSON Schema + Person/Organization/Product examples.

LegalTech audit-stream Operator: per-matter privileged decision-record events hash-chained for ABA Model Rule 1.1c8 + 1.6 + 3.3 + 5.3 + state-bar opinions + attorney-client privilege + work-product doctrine. Every event carries privilege_tier — LegalTech-unique design innovation.

Node.js reference implementation of the matter-decision-record-audit-stream spec (LegalTech 6-pack #1). Proves the spec's three orthogonal invariants are MUTUALLY achievable end-to-end (privilege-tier consistency + engagement-letter binding + citation-validation-before-production-ready). Second ref impl in the Suite. AGPL-3.0.

Open JSON spec for the buyer-side artifact in AI procurement. Records the outcome of a procurement review of vendor declarations. Eleventh spec in the Kinetic Gain Protocol Suite.

Rust CLI for validating AEO manifests, entity-link quality, schema hygiene, and answer-surface readiness.

EnergyTech jurisdiction-spanning lifecycle tracker: state PUC AI rules + FERC orders + NERC standards + DOE/TSA/EPA + ISO/RTO BPMs. 10 jurisdictions seeded across state PUC (CA/NY/TX/MA/IL/WA) + federal/standards/ISO (FERC Order 2222, NERC CIP-013-3, TSA SD-2021-02C, CAISO BPM).

EnergyTech audit-stream Operator: per-grid-operations AI-decision events hash-chained for NERC CIP + FERC + TSA Security Directives + state PUC + DOE EO 14028 evidence. Every event carries bes_cyber_system_categorization + ot_it_boundary. First Suite verifier with regulatory wall-clock invariant (CIP-008 1-hour reporting window).

LLM router with provider-aware routing, fallback chains, and circuit breakers. TypeScript + Express. Production-ready model routing layer for multi-provider AI workloads.

Agent Cards v0.1 draft. Declarative JSON document disclosing an AI agent's capability surface, refusal behavior, evaluations, and deployment posture. Like HuggingFace model cards, but for agents. Part of the Kinetic Gain Protocol Suite.

Swift SDK for the AEO Protocol v0.1. Parse, build, validate, and fetch AEO declaration documents. Foundation-only, async/await fetchWellKnown via URLSession. Completes the AEO SDK family at five languages.

AGPL-3.0 reference impl of EnergyTech audit-stream + 2-axis BES/OT-IT vault. Runs Continental Grid Operator × VendorE GridSense 6.x trajectory end-to-end. Anchors the FIRST Suite numeric regulatory wall-clock invariant (CIP-008 1-hour) in working code.

DefenseTech evidence-bundle: CMMC 2.0 L2/L3 readiness scaffolding under DFARS 252.204-7012/7019/7020/7021 + NIST SP 800-171 r2 + NIST SP 800-172 + SPRS scoring. 18 control families × 48 evidence kinds.

Azure Function that gates Azure OpenAI calls through deny-trumps-allow PolicyBundles derived from AI Procurement Decision Cards, emitting tool_invocation_* to audit-stream-py. The Azure-native sibling of mcp-permission-broker. Bicep IaC included.

DefenseTech Decision Card vault contract: FIRST Suite vault contract with 3 orthogonal typed policy axes (CUI categorization × export-control status × foreign-person restriction). resolvePolicy() intersects all 3 axes at runtime. Cross-binding centerpiece of the DefenseTech 6-pack.

DefenseTech Incident Card profile: publishable AI-incident record for DIB contractors covering DFARS 72-hour cyber incidents, CUI spillage, ITAR/EAR export-control violations, foreign-person access breaches, CMMC POA&M failures, NISPOM insider threats. 22 event types — largest Incident Card profile in the Suite.

TypeScript registry for AEO manifests, claim surfaces, publisher readiness, and citation-safe discovery posture.

DefenseTech bias-coverage: population-level AI bias scaffolding across DIB workforce decisions — VEVRAA + Section 503 + Title VII OFCCP + EO 11246 + ADEA + EPA + EO 12968 + 32 CFR 147 + NISPOM insider threat + SBA SB/SDB/VOSB sub-contractor flow-down. 15 dimensions × 8 metric kinds.

Rust SDK for the AEO Protocol v0.1. Parse, build, validate, and fetch AEO declaration documents. serde + serde_json, optional ureq client. Clippy and rustfmt clean. Loads canonical examples from aeo-protocol-spec.

Progressive rollout, shadow mode, and auto-rollback for AI agents. Sticky-percent routing with promote/rollback gates driven by real metrics. Platform engineering reliability for the agent era.

DefenseTech state-tracker: lifecycle snapshot of 10 federal authorities regulating DIB AI / cybersecurity / export-control / CUI — DoD CIO, Cyber AB, DIBCAC, DDTC, BIS, NIST, GSA, DCMA, DCSA, NARA-ISOO. 8 distinct enforcement modes, most diverse state-tracker in the Suite.

DefenseTech audit-stream Operator: per-defense-AI-decision events hash-chained for DFARS 252.204-7012 + CMMC 2.0 + NIST 800-171/172 + ITAR + EAR + DoDI 5230.24 + NISPOM + False Claims Act. First Suite vertical with 3-axis taxonomy (CUI tier + export control + foreign-person restriction).

AGPL-3.0 reference impl of DefenseTech audit-stream + 3-axis vault contract. Runs Stratos Aerospace × VendorD GuardianAI 3.x trajectory end-to-end. Proves the design works: vault enforces 3-axis intersection, audit-stream satisfies CUI distribution-statement + ITAR us-person + DFARS 72-hour wall-clock invariants.

Governance-as-code engine for AI platforms. Define policies in YAML, map to compliance standards (SOC 2, EU AI Act, ISO 27001, PCI-DSS, GDPR, HIPAA, NIST), evaluate decisions, run dry-runs to estimate blast radius, produce audit-ready ledgers. Third piece of the AI Platform Engineering trilogy.

AGPL-3.0 reference impl of HR Tech audit-stream. Only Suite audit-stream with TWO truly orthogonal candidate-protection invariants: human-hiring-decision (EEOC + Title VII) + NYC LL 144 candidate-notice with 14-day backward window. Runs MomentumHR × HireAssess v2.x end-to-end.

AGPL-3.0 reference impl of FinTech audit-stream. 2 orthogonal invariants: FCRA §604 permissible-purpose on every credit-bureau pull + human-credit-officer on adverse recommendations (Reg B + FCRA §615 + CFPB Circular 2023-03). Runs Meridian × CreditMind v4.x trajectory end-to-end.

Go SDK for the AEO Protocol v0.1. Parse, build, validate, and fetch AEO declaration documents. Zero non-stdlib dependencies. Strict json.DisallowUnknownFields parsing. Context-aware HTTP client.

AGPL-3.0 reference impl of GovTech audit-stream. THE FIRST Suite audit-stream with 3 orthogonal invariants: human-agency-officer + Federal AI Use Case Inventory entry + classification-clearance per E.O. 13526. Runs PRFSA × VendorG GovDecide v3.x trajectory end-to-end against mock federal vault + inventory.

Operator surface for building access events, credential control gaps, controller drift, revocation pressure, and audit posture.

Neo4j and Cypher project for relationship-driven audit analysis, exception tracing, owner mapping, and governance graph exploration.

FinOps governance layer for enterprise AI spend. Token-level cost attribution, multi-provider price comparison, budget burn-down, anomaly detection, monthly forecasting with confidence intervals, and department chargeback rollups.

Operations console for AI agent fleets — runs, traces, cost budgets, regression detection, SLA scoring, and incident routing. The Datadog-shaped layer between agent platforms and the SRE/SecOps tooling enterprises already trust.

Agent and LLM evaluation harness — golden datasets, multi-scorer execution, regression detection across model versions, cost-quality leaderboards, and CI gates for model promotion.

HR Tech audit-stream Operator: per-hiring / promotion / performance / termination AI tool access events hash-chained for EEOC + ADA + Title VII + ADEA + GINA + OFCCP + NYC LL 144 + IL AI Video Interview Act + MD HB 1202 evidence. Workday/UKG/Greenhouse-bridged. Two invariants: human-hiring-decision + NYC LL 144 candidate-notice.

TypeScript drift detector for WordPress content models, headless contracts, and frontend schema breakage before publish.

Operator surface for robot fleet failures, override packets, redeploy posture, and mission-safe review routing.

Hash-chained, append-only record schema + reference verifier for an AI/ML medical device's FDA SaMD classification lifecycle — pre-submission through 510(k)/De Novo/PMA, PCCP per FDA Dec 2024 final, post-market modifications, 21 CFR §820 QMS evidence refs. Healthcare-readiness scaffolding, not certification.

Typed gRPC shadow traffic client. Mirrors requests from a stable primary to an under-test candidate; diffs responses asynchronously; returns the primary to your caller. Sampling, timeouts, pluggable sinks. bufconn-tested.

Rust robotics operator surface for sensor drift, calibration freshness, blind-zone pressure, and override-safe fleet posture.

FinTech audit-stream Operator: per-consumer-credit / deposit / payment / fraud / AML / robo-advisor / Section-1071-small-business AI tool events hash-chained for CFPB + OCC + FRB + FDIC + ECOA + FCRA + GLBA + BSA-AML evidence. Two invariants: human-credit-officer + FCRA permissible-purpose. Excludes mortgage + insurance.

Operator surface for tenant maintenance queues, vendor escalation, SLA posture, and service-safe property operations.

GovTech audit-stream Operator: per-federal/state/local AI decision-record events hash-chained for OMB M-24-10 + OMB M-24-18 + AI Bill of Rights + Section 508 + Privacy Act + FOIA + NIST AI RMF + EO 14110/14179 evidence. Three invariants: human-agency-officer + Federal AI Use Case Inventory + classification-clearance.

SPIFFE-style workload identity broker for AI agents. Short-lived JWT-SVIDs, audience binding, zero long-lived API keys. Zero-trust identity layer for agent fleets.

Type-safe policy DSL in Haskell. Algebraic data type Policy = Allow | Deny | When; predicates compose via And/Or/Not; pure total evaluator; Aeson JSON codec; Hspec + QuickCheck tests. Functional purity flex for the agent-governance theme.

React + TypeScript command center for experiment portfolios, segment lift, rollout decisions, and executive experimentation visibility.

Java Kafka attribution engine for real-time multi-touch channel credit, weighted conversion revenue, and replay-safe analytics reporting.

InsurTech audit-stream Operator: per-application / claim / pricing AI tool access events hash-chained for NAIC AI Model Bulletin + state DOI examination + NY DFS Circular Letter 7 + CO SB 21-169 + FCRA evidence. ACORD-bridged. human_adjudicator_required invariant. JSON Schema + Node verifier.

AGPL-3.0 reference impl of insurance-decision-record-audit-stream. Coastguard Insurance × VendorI ClaimsTriage v3.x. 2 invariants: scoped human-adjudicator + NAIC Model Bulletin on AI 90-day bias-monitoring window. Tenth vertical reference impl in the Kinetic Gain Suite (current coverage: 10 of 11 verticals; RetailTech ref impl pending).

Single-binary UTM event ingest + attribution service. Consent-gated persistence with the same granted/denied/unknown vocabulary as klaviyo-flow-consent-audit; hash-chained audit-stream events on every ingest and drop; REST aggregation by source/medium/campaign/surface + funnel rollup. Second Go binary in the Suite.

Python memory engine for snapshot packets, context aging, retrieval scoring, and operator context recovery

Julia backend for latency distribution fitting, SLA breach probability forecasting, and percentile band analysis. Ingests service log exports, fits LogNormal/Weibull via MLE, computes P50–P99.9 with confidence intervals, and projects 24h SLA breach probability using Markov chains. HTTP.jl REST surface.

Unified ops console for AI Platform Engineering. Aggregates MCP server posture, governance decisions, and agent fleet observability into one operator surface.

React + TypeScript studio for model release gates, policy-sensitive approvals, evaluation drift, and AI governance review workflows.

Runtime permission broker for MCP tool invocations. Composes AI Procurement Decision Cards into PolicyBundles, applies deny-trumps-allow rules at request time, emits tamper-evident audit-stream events. The runtime enforcement point of the Kinetic Gain Protocol Suite.

PII and secret redaction gateway for LLM API calls. 25+ detection patterns across 6 categories, reversible token-mapped redaction, layered tenant policy with hardpinned safety rails, full audit trail.

React + TypeScript control plane for prompt operations, evaluations, model routing, guardrail incidents, and AI workflow governance

Browser extension (MV3) + Greasemonkey userscript that score what AI governance documents any vendor publishes at /.well-known/ — the 11 Kinetic Gain Protocol Suite specs, 0-100. One shared probe core, two distribution surfaces.

Model lifecycle catalog for AI agents: versions, lineage, stage promotion, and approval gates. Audit-friendly governance for which version is in prod, who approved it, and what came before.

Flutter mobile app for executive briefings, signal summaries, risk updates, and portable strategy review workflows.

AGPL-3.0 reference impl of mortgage-decision-record-audit-stream. Pacific Coast Mortgage × VendorR LoanDecision v5.2 trajectory. 2 invariants: UNIVERSAL human-underwriter on adverse-action-capable kinds + ECOA Reg B 30-day adverse-action notice per 12 CFR §1002.9. Kinetic Gain Suite.

Observability, security audit, and governance layer for Model Context Protocol (MCP) servers. Validates registrations, scans tool surfaces for prompt injection and PII, detects schema drift, and produces posture scores with policy outcome matrices. Enterprise platform-engineering doctrine, not a research demo.

OpenTelemetry demo for fraud-scoring baggage propagation across payment services and trace-to-alert correlation.

Kotlin JVM backend for dependency drag review, error-budget policy, freeze-window decisions, and rollback-aware reliability coordination.

Production-grade rate limiting, circuit breaking, and retry shaping for LLM APIs. Token bucket + breaker + jittered backoff with HTTP 429 / Retry-After awareness.

OpenTelemetry SpanProcessor that translates GenAI spans into business-metric spans (cost_usd, tokens_total, latency_ms, tenant). Drop-in for any Go service running OTel. Per-model pricing table; overridable.

PropTech audit-stream Operator surface. Per-mortgage-application AI-tool-access events hash-chained for ECOA Reg B + RESPA + HMDA + GLBA Safeguards + CFPB UDAAP + Fair Housing recordkeeping. MISMO/URLA-bridged. human_underwriter_required invariant. JSON Schema + Node verifier.

HR Tech Operator: per-jurisdiction lifecycle ledger of US state + local employment-AI laws. First Suite tracker supporting sub-state jurisdictions (US-XX-CITY pattern). Seed: NYC LL 144, IL 820 ILCS 42 + HB 3773, MD HB 1202, CA AB 331, CO SB 24-205.

Turn a data contract into enforceable, cross-dialect DDL (CHECK/NOT NULL/UNIQUE/PK/FK) for Postgres, MySQL, Snowflake, BigQuery — plus a contract-vs-schema violation checker. Cross-ecosystem hook #5 of the Kinetic Gain portfolio.

Hash-chained per-state lifecycle record + reference verifier for EdTech AI products navigating 50 state student-data-privacy + state-AI-policy regimes (IL SOPPA, CA AB 1584+AB 2876, TX HB 18, NY ED Law 2-d, VA ChAIPA, CO SB 196, etc.). EdTech-readiness scaffolding, not certification.

OpenTelemetry-style SaaS metering for tenant feature activity, billable usage aggregation, and product analytics reporting.

PropTech Operator: per-state lifecycle ledger of US state real-estate / mortgage / appraisal / tenant-screening AI-disclosure laws. 10-state lifecycle + state-machine + schema-enforced effective/sunset/supersedes invariants. Seed: CA SB 942, CO SB 24-205, IL HB 3773, NY S 1169, TX HB 1709.

Postgres extension that emits audit-stream-py-compatible governance events on watched table CRUD via pg_notify, plus a Python LISTEN bridge daemon. The database-tier governance producer for the Kinetic Gain Protocol Suite.

GovTech Operator: per-jurisdiction ledger of US federal EOs + OMB memos + state government AI laws + local AI ordinances. Distinct from regulator-side trackers — covers government's OWN AI use rules. Seed: OMB M-24-10, EO 14110 (rescinded), CT Public Act 23-16, NYC AI Action Plan.

AGPL-3.0 reference impl of student-data-access-audit-stream. Lincoln USD × VendorT MathBuddy v3.x trajectory. 2 invariants: FERPA basis enumeration (34 CFR Part 99) + COPPA verifiable parental consent must-precede-event for under-13 (16 CFR §312.4). Kinetic Gain Protocol Suite.

Detect unauthorized LLM usage across enterprise networks. Endpoint catalog, traffic pattern analysis, payload sensitivity scanning, department-level shadow-AI exposure rollups, and CISO-ready incident reporting.

FinTech Operator: per-state lifecycle ledger of US state banking-regulator regs + state-AG enforcement + state statutes + NMLS-coordinated reqs. First Suite tracker supporting multi-regulation per state (statute + implementing regulation as parallel lifecycle streams). Seed: NY Part 500, CA CCFPL+DFPI 10 CCR, CO SB 24-205, IL HB 3773, TX HB 1709.

Swift Vapor billing engine for subscription lifecycle, proration, dunning, and replay-safe webhook idempotency.

Edge policy gateway: pure-Rust geo + rate-limit + A/B routing engine, compiled to WASI (wasm32-wasip1, ~128KB). Runs in Wasmtime, Fastly Compute, Cloudflare Workers via WASM components. Deterministic, fuzzable, portable.

Pulumi AWS baseline for PCI-DSS controls, network segmentation, KMS rotation, WAF, and immutable audit logging.

InsurTech Operator: per-state lifecycle ledger of US state DOI AI bulletins / circular letters / regulations / statutes. 9-state lifecycle + 6-vehicle taxonomy + state machine. Seed: CT, NY DFS CL 7, CO SB 21-169, CA Bulletin 2022-5, WA TAA 2024-04.

Tamper-evident, MySQL-backed governance audit log for WordPress. SHA-256 hash chain (audit-stream-py compatible), one-click verify, optional forwarding to the Kinetic Gain audit-stream spine. GPL-2.0.

Zero-dependency vanilla JS probe for the eleven Kinetic Gain Protocol Suite documents at any domain's /.well-known/ paths. Browser + Node 18+ + Deno + Bun. The shared core of the Vendor AI Disclosure Inspector.

In-memory directed graph DB in Zig for AI agent context graphs. Typed nodes (agent, tool, fact, result, citation), labeled edges, BFS traversal, JSON serialization. Pure Zig stdlib, zero deps.

Hash-chained event schema + reference verifier for AI tool reads of student records. Bridges CEDS + Ed-Fi semantics to the Kinetic Gain audit-stream. Enforces tokenization, FERPA §99.32 logging consistency, COPPA school-as-agent invariants, Decision Card refs. EdTech-readiness scaffolding, not certification.

Rust backend for support queue escalation, SLA pressure scoring, owner routing, and incident handoff prioritization.

GCP IAM policy drift lab for binding changes, org-policy posture, and public-access risk review.

Next.js control plane for tenant access governance, GraphQL APIs, role-aware workflows, and production-style delivery assets.

Multi-signer attestation broker using BLS12-381 aggregate signatures. N signatures collapse into one 96-byte aggregate verifiable in two pairings. Reference impl with textbook BLS; production should use blst.

Auto-detect + route + verify any Kinetic Gain Protocol Suite artifact (Decision Card / Incident Card / Evidence Bundle / audit-stream event / state-tracker event) to the right vertical-specific logic across all 6 vertical 6-packs. Makes the parallel-structure thesis provably code-true. CLI + npm + GitHub Action.

Cross-vertical comparison tool. Generates AEO-friendly Markdown + JSON tables of SAME canonical shapes vs DIFFERENT per-vertical design contributions across 6 vertical 6-packs (36 sibling spec repos). Plus per-artifact compare CLI. Companion to kg-suite-vertical-router.

Single-file static HTML operator dashboard for the Kinetic Gain Protocol Suite. Posture across 6 vertical 6-packs = 36 sibling spec repos × 5 cross-cutting invariants. No framework, no build step. GitHub Pages-deployable. Companion to kg-suite-vertical-router + kg-suite-vertical-comparator.

Operator surface for biotech pharmacovigilance signals, case-routing gaps, aggregate reporting evidence, and committee-safe review posture.

Aggregate Kinetic Gain disclosure JSON documents (Agent Cards, Tool Cards, AEO docs, Incident Cards, ...) into a /.well-known/index.json with integrity findings (duplicate ids, missing versions, broken cross-references).

Landing site for the AI Procurement Decision Card spec (Kinetic Gain Protocol Suite #11). Static HTML, deploys to decisions.kineticgain.com.

Curated conformance corpus for agent-cards-spec v0.1 — categorized JSON fixtures (valid / dirty / shape) with declarative manifest. Final piece of the test-vectors corpus pattern across all 4 Kinetic Gain Suite specs.

Go control plane for government comment ingestion, adapter drift, and evidence lineage across regulated docket workflows.

Curated OTel GenAI conformance corpus — categorized OTLP/JSON fixtures (valid / dirty / shape) with declarative manifest. Drop-in regression target for any GenAI consumer: validators, exporters, rollups, dashboards.

Employee communications control plane for audience evidence, approval posture, localization readiness, and send-safe delivery sequencing.

Landing site for the Clinical AI Disclosure spec (HealthTech vertical extension to the Kinetic Gain Protocol Suite). Deploys to clinical.kineticgain.com via Hostinger FTP.

Landing page for the AI Tutor Card spec (EdTech extension to the Kinetic Gain Protocol Suite). Deploys to tutor.kineticgain.com via Hostinger FTP.

Single-file static validator for Kinetic Gain Protocol Suite JSON. Paste any Suite document, get a procurement-grade validation report in the browser. Deploys to validator.kineticgain.com.

Landing site for the AI Incident Card spec. Live at incidents.kineticgain.com.

Landing site for the Agent Cards spec. Live at agents.kineticgain.com.

Curated directory of vendors publishing Kinetic Gain Protocol Suite documents at well-known URLs. Live at directory.kineticgain.com. Submit via PR.

RetailTech audit-stream Operator: per-shopper dynamic-pricing / recommendation / loyalty-tier / fraud / refund / ad-personalization / BOPIS / biometric AI tool access events hash-chained for FTC + EU Omnibus + NY ATBP + CA SB-892 + CCPA + BIPA + PCI DSS evidence.

Quickstart hub for the Kinetic Gain Protocol Suite. Per-role guides + canonical /.well-known/ path map. Live at docs.kineticgain.com.

RetailTech state-by-state lifecycle tracker for state AG enforcement, state privacy regulator rules (CA CPPA, CO DOJ), state biometric statutes (IL BIPA, NYC, WA, TX CUBI), and pricing-transparency / dark-patterns laws applicable to consumer-facing retail AI.

React + TypeScript flagship for translating revenue, growth, risk, AI, and operational signals into premium executive briefings.

Landing site for the Prompt Provenance spec. Live at prompts.kineticgain.com.

Landing site for the Classroom AI AUP spec. Live at aup.kineticgain.com.

Executive-intelligence surface for claim-versus-proof review, board diligence, and vendor narrative scoring.

Landing site for the MCP Tool Card spec. Live at toolcards.kineticgain.com.

Operator surface for CyberArk PAM safe certifications, anomaly detection, and ServiceNow access-review ticket sync. Browser-only, no telemetry. AGPL-3.0.

Landing site for the Student AI Disclosure spec. Live at student.kineticgain.com.

Skyflow vault bridge for Klaviyo profile exports. Reads an AI Procurement Decision Card v0.2 and tokenizes authorized PII before it leaves the operator's machine; reveal gated by caller role.

Operator surface for HRIS-to-IdP joiner/mover/leaver pipelines, SCIM sync health, orphan-account detection, and entitlement-grant recertification. Browser-only, no telemetry. AGPL-3.0.

Runs any KG Suite artifact through all 11 verticals' fingerprint heuristics in one pass. Output is per-vertical applicability posture matrix (applicable / partial / not-applicable) for buyer-side procurement reviewers evaluating multi-vertical SaaS vendors. 4-signal fingerprint per vertical. MIT.

Merges N KG Suite Incident Cards from any verticals into a deduplicated cross-vertical incident timeline + regulator-referral matrix + severity distribution + hotspot detection. Buyer-side procurement reviewers consolidating multi-vertical SaaS vendor disclosures.

Operator surface for multi-tenant B2B SaaS isolation posture — blast-radius classification, RLS/dedicated-schema/shared-prefix mapping, cross-tenant data-access audit, lateral-movement risk. Browser-only, no telemetry. AGPL-3.0.

Operator surface for adverse-event queue, signal-detection clusters, regulator-reporting deadlines (FDA MedWatch 15-day / EU MDR vigilance / PMDA), and causality-assessment workflow. Browser-only, no telemetry. AGPL-3.0.

GitHub Action wrapping agent-card-fleet-summary. Walks a dir of AgentCards, surfaces governance gaps (autonomous-without-IRU, destructive-on-non-autonomous, etc.), posts Markdown PR comment, fails on high findings. Sibling of llm-cost-rollup-action.

Buyer-facing static HTML viewer for AI Procurement Decision Cards. Pure-functional renderer (Node SSG + browser). Replaces 'read raw JSON' for procurement reviewers — AI system + data vault targets + retention envelope + 3-axis posture (DefenseTech badge) + cross-binding refs + signature status.

Microsoft Graph Permission Scope Auditor — operator surface for OAuth scope governance, over-permissioned apps, Conditional Access coverage gaps, scope-creep detection. Static HTML, browser-only, no backend. Buyer-facing operator surface (scopes.kineticgain.com).

Generalized N-axis policy intersection resolver for KG Suite vault contracts. Extracted from DefenseTech's 3-axis resolvePolicy() so any vertical or buyer-composed multi-vertical contract can declare N axes and resolve to most-restrictive at runtime. MIT, zero deps.

Renders a Markdown README from an A2A AgentCard JSON via agent-card-readme-generator. Posts as PR comment AND/OR writes to a target file path for auto-synced docs. First in the readme-generator Action quintet.

Node.js reference implementation of the fhir-resource-access-audit spec: HAPI FHIR R4 → HIPAA Safe-Harbor vault contract → hash-chained Suite audit-stream → self-verifies against the spec's own JSON Schema. Proves the spec is implementable end-to-end. AGPL-3.0.

Compare two AI Procurement Pulse snapshots, flag regressions beyond threshold, render GitHub issue body + vendor-outreach email template citing the specific field diff. Productizes the quarterly Pulse regression signal. Drop in as GH Action in the Pulse engine repo.

Extended KG Suite conformance runner for PR-gate-time multi-artifact-bundle integrity verification. Three checks: multi-vertical applicability + cross_binding_refs syntactic resolution + provenance-chain (all artifacts reference same root Decision Card URL — fanout = chain broken).

SCAFFOLD-ONLY productized host for the cui-data-vault-contract-profile schema. 5-endpoint API (health/contract/resolve/tokenize/detokenize) + Dockerfile + k8s manifest + OpenAPI 3.0. NOT PRODUCTION — operator deployment checklist enumerates KMS adapter + TLS + audit-stream emission + hardening gaps. AGPL-3.0.

Node.js + Express REST API for B2B SaaS lead scoring, campaign visibility, and revenue workflow automation

PR gate for A2A AgentCard breaking changes — diffs HEAD vs base.sha via agent-card-diff, posts PR comment, fails on breaking. First in the per-protocol diff Action quintet.

Build + validate a minimal A2A AgentCard per agent-cards-spec v0.1 from a StampOptions struct. Enforces id/version regex, enum constraints, and the spec's autonomy→IRU allOf clause. Sibling of prompt-provenance-stamp.

React + TypeScript studio for staged feature releases, guardrail-aware rollout control, audience targeting, and rollback-ready operations.

Scans a directory of JSON docs and identifies which Kinetic Gain Suite protocol each belongs to. Pairs with the per-protocol diff Action quintet for mixed-content governance repos.

Generate a human-readable Markdown README from an A2A AgentCard JSON. Documents identity, capabilities, models, tools (with side-effect-class badges), refusal taxonomy, evaluations, deployment, safety posture. Sibling of mcp-server-readme-generator for the A2A side.

GitHub Action wrapping kg-suite-spec-version-tracker. Walks mixed-protocol dir, flags fleet-wide spec-version drift across A2A/MCP/prompts/evidence/OTel. PR comment + fail-on-drift. Cross-protocol governance gate.

Executive-intelligence surface for pipeline integrity, attribution trust, reporting posture, and board-ready revenue-system scoring.

GitHub Action wrapping kg-suite-conformance-runner. Walks mixed-protocol dir, validates required-top-level blocks per spec, flags malformed-json / unknown-protocol / missing-required-block. Cross-protocol structural validator.

GitHub Action wrapping kg-suite-fleet-overview. Posts a unified one-page composition overview as a PR comment. Optionally fails on missing-core-protocol or unrouted-doc threshold. Completes the cross-protocol Suite governance Action quartet.

GitHub Action wrapping mcp-tool-card-fleet-summary. Walks a dir of MCP Tool Cards, flags destructive-without-human-approval, high-PII-without-rate-limit, writes-secrets-without-audit. PR comment + fail-on-high. Sibling of agent-card-fleet-summary-action.

GitHub Action wrapping prompt-provenance-fleet-summary. Walks a dir of prompt-provenance docs, flags approved-without-evaluations / no-reviewers / failing-evals / deprecated-still-referenced. PR comment + fail-on-high. Third in the fleet-summary Action family.

GitHub Action that fails the build when any Kinetic Gain Suite spec doc's canonical sha256 drifted from a committed baseline without a version bump. Silent-edit detector. Third cross-protocol Action with kg-suite-spec-version-tracker + kg-suite-conformance-runner.

Renders a Markdown README from an evidence-bundle manifest JSON. Posts as PR comment AND/OR writes to a target file path. Fourth in the readme-generator Action quartet.

VWO-flavored growth-ops control plane for experiment targeting evidence, holdout integrity, release readiness, and measurement-safe rollout sequencing.

GitHub Action wrapping evidence-bundle-fleet-summary. Flags bundle-expired, unsigned-regulated-bundle, cross-bundle-hash-collision, oversized-bundle. PR comment + fail-on-high. Completes the per-protocol fleet-summary action quartet.

GitHub Action wrapping otel-genai-fleet-summary. Walks OTLP traces dir, flags missing-model / unauthorized-model / high-error-rate. PR comment + fail-on-high. Completes the fleet-summary Action quintet across all 5 governance surfaces.

React + TypeScript flagship control room that unifies revenue, growth, AI operations, workflow execution, and governance visibility.

Renders a Markdown README from a prompt-provenance JSON document. Posts as PR comment AND/OR writes to a target file path. Third in the readme-generator Action quintet.

PR gate for OTel GenAI rollup cost/token jumps — diffs HEAD vs base.sha via otel-genai-diff with configurable threshold, posts PR comment with cost-delta. Fifth and final in the per-protocol diff Action quintet (quintet complete).

Renders a Markdown README from an MCP Tool Card JSON. Posts as PR comment AND/OR writes to a target file path. Second in the readme-generator Action quintet.

PR gate for prompt-provenance breaking changes — diffs HEAD vs base.sha via prompt-provenance-diff, posts PR comment, fails on hash/approval/lineage regressions. Third in the per-protocol diff Action quintet.

One Action, all 5 Kinetic Gain Suite protocols. Auto-routes changed JSON docs via kg-protocol-detect to the right diff (agent-card / mcp-tool-card / prompt-provenance / evidence-bundle / otel-genai), posts one consolidated PR comment.

PR gate for evidence-bundle manifest breaking changes — diffs HEAD vs base.sha via evidence-bundle-diff, posts PR comment, fails on item-hash/item-removal/signature changes. Fourth in the per-protocol diff Action quintet.

PR gate for MCP Tool Card breaking changes — diffs HEAD vs base.sha via mcp-tool-card-diff, posts PR comment, fails on breaking. Second in the per-protocol diff Action quintet.

GitHub Action that probes your /.well-known/ for all 11 Kinetic Gain Suite documents and reports a 0-100 self-score. Optional PR comment, SVG badge, and pulse receipt. Closes the loop opened by pulse.kineticgain.com Issue #2.

Operator control plane for Tableau permission governance, group sync drift, certification trust, and stale external sharing.

React + Vite operator console for the Skyyflow → Klaviyo bridge pipeline. Dashboard, live webhook simulator with 3-stage animated pipeline, field mapper, sync log stream.

React + TypeScript studio for packaging tests, elasticity readouts, rollout guardrails, and executive pricing decision support.

Composition capstone for the Kinetic Gain Suite. Walks a mixed-protocol dir, emits a single unified one-page overview (composition by protocol, missing cores, per-doc tables, low-confidence routings, unrouted files). Fifth cross-protocol primitive.

Fleet-analyze a directory of evidence-bundle manifests. Flags expired bundles, unsigned regulated bundles, cross-bundle hash collisions, oversized bundles, missing provenance. Completes fleet-summary trio.

Fleet-analyze a directory of MCP Tool Cards. Flags destructive-without-human-approval, high-PII-without-rate-limit, writes-secrets-without-audit. Completes fleet-summary quartet alongside agent-card, prompt-provenance, evidence-bundle.

Generate a human-readable Markdown README from a single MCP Tool Card JSON. Renders identity, safety badges, input schema, tested-with table, performance, cost, audit. Per-doc analog to mcp-server-readme-generator. Closes the per-doc readme-gen pattern across all 4 governance protocols.

Fleet-summary for OTel GenAI OTLP span exports. Flags missing model/provider attrs, unauthorized model usage (whitelist), high error rates, token outliers, missing cost annotations. Closes the fleet-summary quintet alongside agent-card / mcp-tool-card / prompt-provenance / evidence-bundle.

Walk a mixed-protocol directory of Kinetic Gain Suite JSONs and surface spec-version drift per protocol. Composes kg-protocol-detect routing with version-distribution accounting.

Canonicalize any Kinetic Gain Suite spec doc (AgentCard / Tool Card / prompt provenance / evidence bundle) — sort keys deterministically, normalize whitespace, emit canonical JSON + stable sha256 for diff/audit chains.

Diff two otel-genai-rollup outputs (per OTel GenAI semconv). Flag model added/removed, cost or token jumps > 10%, span volume shifts, currency changes. CI gate for GenAI FinOps. Makes the diff family a quintet.

Diff two prompt-provenance JSON documents (per prompt-provenance-spec v0.1). Classifies 24 change reasons across 7 dimensions; flags breaking (prompt-hash-changed, approval-state-regressed, etc.). Sibling of agent-card-diff / mcp-tool-card-diff / evidence-bundle-diff.

Build + validate a minimal MCP Tool Card per mcp-tool-card-spec v0.1 from a StampOptions struct. Enforces id/version regex, enum constraints, and the destructive→human_approval_required allOf clause. Completes the stamp quartet.

Fleet-analyze a directory of prompt-provenance docs. Counts by approval state; flags approved-without-evaluations / no-reviewers / failing-evals, deprecated-still-passing, single-reviewer, missing out-of-scope. Sibling of agent-card-fleet-summary.

Generate a human-readable Markdown README from an evidence-bundle manifest.json (per evidence-bundle-spec v0.1). Items table + hash + sizes, relationships, provenance, signature. Completes the readme-gen quartet.

Vendor-neutral SecOps operator surface for detection coverage, telemetry gaps, automation drift, and incident posture.

Generate a human-readable Markdown README from a prompt-provenance JSON document (per prompt-provenance-spec v0.1). Renders identity, approval state, lineage chain, authorship, intent (in/out scope, supported models), and evaluations table. Third in the readme-gen trio with agent-card-readme-generator and mcp-server-readme-generator.

Operator surface for Entra guest access governance, access reviews, sponsor ownership, inactive guest cleanup, and cross-tenant trust drift.

PHP API for entitlement requests, approval routing, access review visibility, and audit-friendly identity governance workflows.

AI Procurement Pulse — a quarterly research publication measuring vendor AI governance disclosure. Issue #0 (methodology) live at pulse.kineticgain.com; Issue #1 with real crawl data ships Q3 2026.

Rust Axum control plane for dependency drift, release lag, stale lockfiles, CVE pressure, and owner-lane review.

Rust exporter for CyberArk connector health, pool status, auth failures, latency, and Prometheus/OpenTelemetry observability pipelines.

Studio-grade, local-first notepad PWA. CodeMirror rich editor with inline screenshot paste, Markdown/checklist/canvas modes, slash commands, streaming AI, glossary engine, pricing scaffold. 281 tests, accessibility-audited. Live at sveska.studio

Python SDK for the AEO Protocol v0.1. Parse, build, validate, and fetch AEO declaration documents. Pydantic v2 + httpx. Loads canonical examples from aeo-protocol-spec.

Track how entity embeddings drift across encoder model versions. SQLite store + Strawberry GraphQL API. Cosine drift events computed automatically on every record. Reference impl for RAG/eval pipelines re-encoding their corpus.

Bash-native incident turnover operator surface for owner gaps, SLA drift, and evidence-complete handoffs.

Operator surface for donor appeal cadence, fatigue pressure, and stewardship-safe outreach posture.

React + TypeScript control room for third-party risk reviews, policy exceptions, remediation sequencing, and renewal-pressure visibility.

Ops-heavy automation for secret rotation windows, owner prompts, and stale-secret detection across enterprise credential stores. Practical SRE tooling for credential hygiene.

Bash-native platform release operator surface for launch blockers, rollback posture, and freeze windows.

Creator operator surface for partnership changes, obligation blockers, and launch-safe collaboration.

Growth operator surface for campaign taxonomy, audience blockers, and launch-safe conventions.

GCP Service Exception Posture turns GCP signals into board-ready risk, savings, and investment decisions.

CyberArk Safe Ownership Gap Mapper turns CyberArk signals into board-ready risk, savings, and investment decisions.

Camunda Process ROI Brief turns Camunda signals into board-ready risk, savings, and investment decisions.

Klaviyo Deliverability Risk Router turns Klaviyo signals into board-ready risk, savings, and investment decisions.

Snowflake Sharing Contract Auditor turns Snowflake signals into board-ready risk, savings, and investment decisions.

Genesys Queue Leakage Index turns Genesys signals into board-ready risk, savings, and investment decisions.

Okta App Sprawl Retirement Board turns Okta signals into board-ready risk, savings, and investment decisions.

Power BI Executive Trust Monitor turns Power BI signals into board-ready risk, savings, and investment decisions.

Tableau Certified Source Ledger turns Tableau signals into board-ready risk, savings, and investment decisions.

VWO Guardrail Decision Ledger turns VWO signals into board-ready risk, savings, and investment decisions.

C# ASP.NET Core workflow backend for approval routing, SLA-aware escalation, policy exception review, and audit-history visibility.

Board-readable GCP BigQuery slot commitment advisor for reservation fit, idle-slot waste, on-demand exposure, and FinOps purchase sequencing.

IBM watsonx Model Risk Register turns IBM watsonx signals into board-ready risk, savings, and investment decisions.

Experiment trust board for VWO decisions, Tableau lineage, and Power BI executive metric confidence.

Metric impact reconciler that ties VWO lift to Tableau-certified sources and Power BI board KPIs.

Holdout lift auditor for validating VWO treatment integrity against Tableau and Power BI readouts.

LegalTech operator surface for clause extraction, obligation graphs, review blockers, and renewal-safe execution.

Executive readout pack that turns VWO experiments into Tableau and Power BI decision evidence.

Manufacturing operator surface for downtime incidents, root-cause blockers, and restart-safe escalation.

Experiment cost-leak ledger for VWO test waste, dashboard drift, and executive analytics follow-through.

Lifecycle access reconciler for UKG workforce events, Okta entitlement drift, and termination-risk cleanup.