confidence-escalation 0.1.0__tar.gz

confidence_escalation-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,72 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.9", "3.10", "3.11", "3.12"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install ".[dev]"
+
+      - name: Run tests
+        run: |
+          python -m pytest tests/ -v --tb=short
+
+      - name: Run tests with coverage
+        if: matrix.python-version == '3.11'
+        run: |
+          pip install pytest-cov
+          python -m pytest tests/ --cov=src/confidence_escalation --cov-report=xml
+
+      - name: Upload coverage to Codecov
+        if: matrix.python-version == '3.11'
+        uses: codecov/codecov-action@v4
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          fail_ci_if_error: false
+
+  publish:
+    needs: test
+    runs-on: ubuntu-latest
+    if: startsWith(github.ref, 'refs/tags/v')
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build tools
+        run: pip install build hatchling
+
+      - name: Build package
+        run: python -m build
+
+      - name: Publish to PyPI
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+        run: |
+          pip install twine
+          twine upload dist/*

confidence_escalation-0.1.0/.gitignore

@@ -0,0 +1,78 @@
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+*.manifest
+*.spec
+pip-log.txt
+pip-delete-this-directory.txt
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+*.mo
+*.pot
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+instance/
+.webassets-cache
+.scrapy
+docs/_build/
+.pybuilder/
+target/
+.ipynb_checkpoints
+profile_default/
+ipython_config.py
+.pdm.toml
+.pdm-python
+.pdm-build/
+__pypackages__/
+celerybeat-schedule
+celerybeat.pid
+*.sage.py
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+.spyderproject.db
+.spyproject
+.ropeproject
+/site
+.mypy_cache/
+.dmypy.json
+dmypy.json
+.pyre/
+.pytype/
+cython_debug/

confidence_escalation-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ashutosh Rana
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

confidence_escalation-0.1.0/PKG-INFO

@@ -0,0 +1,290 @@
+Metadata-Version: 2.4
+Name: confidence-escalation
+Version: 0.1.0
+Summary: Framework-agnostic confidence-gated escalation middleware for LLM agents: multi-signal scoring (logprob, verbalized, tool risk), threshold policies, and escalation handlers for LangChain, CrewAI, AutoGen, and Google ADK.
+Project-URL: Homepage, https://github.com/ashutoshrana/confidence-escalation
+Project-URL: Documentation, https://github.com/ashutoshrana/confidence-escalation#readme
+Project-URL: Repository, https://github.com/ashutoshrana/confidence-escalation
+Project-URL: Issues, https://github.com/ashutoshrana/confidence-escalation/issues
+Author-email: Ashutosh Rana <17191144+ashutoshrana@users.noreply.github.com>
+License: MIT
+License-File: LICENSE
+Keywords: agent-middleware,ai-governance,ai-safety,autogen,confidence-scoring,crewai,enterprise-ai,escalation,eu-ai-act,google-adk,human-in-loop,langchain,llm-agents,logprob,multi-signal,owasp-agentic-ai,regulated-industries,threshold-policy
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security
+Requires-Python: >=3.9
+Provides-Extra: adk
+Requires-Dist: google-adk>=0.3.0; extra == 'adk'
+Provides-Extra: all
+Requires-Dist: crewai>=0.1.0; extra == 'all'
+Requires-Dist: google-adk>=0.3.0; extra == 'all'
+Requires-Dist: langchain-core>=0.1.0; extra == 'all'
+Requires-Dist: pyautogen>=0.2.0; extra == 'all'
+Provides-Extra: autogen
+Requires-Dist: pyautogen>=0.2.0; extra == 'autogen'
+Provides-Extra: crewai
+Requires-Dist: crewai>=0.1.0; extra == 'crewai'
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.21; extra == 'dev'
+Requires-Dist: pytest-cov>=4.0; extra == 'dev'
+Requires-Dist: pytest>=7.0; extra == 'dev'
+Provides-Extra: langchain
+Requires-Dist: langchain-core>=0.1.0; extra == 'langchain'
+Description-Content-Type: text/markdown
+
+# confidence-escalation
+
+**Framework-agnostic confidence-gated escalation middleware for LLM agents.**
+
+[![PyPI version](https://badge.fury.io/py/confidence-escalation.svg)](https://badge.fury.io/py/confidence-escalation)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+Multi-signal confidence scoring (logprob + verbalized + ASR + tool risk) with threshold-based escalation policies and pluggable handlers. Works with **LangChain**, **LangGraph**, **CrewAI**, **AutoGen**, **Google ADK**, and any Python agent framework.
+
+Addresses **OWASP Agentic AI Top 10 ASI-09**: Human-Agent Trust Exploitation — prevents agents from taking high-stakes actions when confidence is insufficient.
+
+---
+
+## The Problem
+
+LLM agents fail silently. When an agent is uncertain, it still returns a response — often confidently-worded — with no mechanism to:
+- Detect that confidence is low before executing a high-risk tool call
+- Route uncertain responses to a human reviewer
+- Escalate to a stronger model when needed
+- Produce a compliance audit trail of every escalation event
+
+`confidence-escalation` solves all four.
+
+---
+
+## Features
+
+- **Multi-signal scoring** — combine logprobs, verbalized confidence, and tool-call risk into a single composite score
+- **Threshold policies** — single-threshold, dual-threshold (normal + critical), composite multi-policy chains
+- **Pluggable handlers** — human-in-loop, model upgrade, tool restriction, compliance logging
+- **Framework adapters** — LangChain callbacks, CrewAI step_callback, AutoGen reply function wrapper, Google ADK event interceptor
+- **EU AI Act Article 12 audit logging** — structured JSON compliance log on every escalation
+- **Zero required dependencies** — core library runs with no dependencies; framework integrations are optional extras
+
+---
+
+## Quick Start
+
+### Installation
+
+```bash
+pip install confidence-escalation
+# With LangChain:
+pip install "confidence-escalation[langchain]"
+# With all frameworks:
+pip install "confidence-escalation[all]"
+```
+
+### Basic Scoring
+
+```python
+from confidence_escalation import MultiSignalConfidenceScorer
+
+scorer = MultiSignalConfidenceScorer(
+    weights={"logprob": 0.5, "verbalized": 0.3, "tool_risk": -0.2}
+)
+
+score = scorer.score(
+    logprobs=[-0.1, -0.3, -0.2],
+    verbalized_response="I am 70% confident about this answer.",
+    tool_call_risk=0.15,
+)
+
+print(f"Confidence: {score.value:.3f}")   # e.g. 0.712
+print(f"Reliable: {score.is_reliable()}")  # True (above 0.6 default)
+```
+
+### Threshold Policy + Human-in-Loop
+
+```python
+from confidence_escalation import (
+    ThresholdPolicy,
+    EscalationAction,
+    HumanInLoopHandler,
+    ComplianceLoggingHandler,
+    ConfidenceEscalationMiddleware,
+)
+
+def notify_human(ctx, result):
+    print(f"Routing to human review: session={ctx['session_id']}, confidence={result.confidence_score:.3f}")
+
+policy = ThresholdPolicy(
+    threshold=0.65,
+    action=EscalationAction.HUMAN_IN_LOOP,
+    critical_threshold=0.3,
+    critical_action=EscalationAction.ABORT,
+)
+
+middleware = ConfidenceEscalationMiddleware(
+    policy=policy,
+    handlers=[
+        HumanInLoopHandler(callback=notify_human),
+        ComplianceLoggingHandler(),
+    ],
+)
+
+result = middleware.call(
+    agent_step=lambda: my_llm.invoke(messages),
+    context={"session_id": "abc123", "model": "claude-sonnet-4-6"},
+    logprobs=[-0.4, -0.5],
+)
+
+if result["escalation"]["triggered"]:
+    print("Escalated — stopping agent execution.")
+```
+
+### Model Upgrade Handler
+
+```python
+from confidence_escalation import ModelUpgradeHandler, ThresholdPolicy, EscalationAction
+
+handler = ModelUpgradeHandler(
+    upgrade_map={
+        "claude-haiku-4-5": "claude-sonnet-4-6",
+        "claude-sonnet-4-6": "claude-opus-4-7",
+    }
+)
+
+policy = ThresholdPolicy(threshold=0.7, action=EscalationAction.MODEL_UPGRADE)
+result = policy.evaluate(score, context={"model": "claude-haiku-4-5"})
+
+if result.triggered:
+    upgrade_info = handler.handle(result, context={"model": "claude-haiku-4-5"})
+    print(f"Retry with: {upgrade_info['upgraded_model']}")
+```
+
+### Tool Restriction
+
+```python
+from confidence_escalation import ToolRestrictionHandler, ThresholdPolicy, EscalationAction
+
+handler = ToolRestrictionHandler(
+    high_risk_tools=["delete_record", "send_email", "execute_sql"],
+    allow_read_only=True,
+)
+
+policy = ThresholdPolicy(threshold=0.65, action=EscalationAction.TOOL_RESTRICTION)
+result = policy.evaluate(score, context={"available_tools": ["get_customer", "delete_record"]})
+
+if result.triggered:
+    restriction = handler.handle(result, context={"available_tools": agent_tools})
+    safe_tools = restriction["allowed_tools"]
+    # Re-invoke agent with only safe_tools
+```
+
+### LangChain Integration
+
+```python
+from confidence_escalation.adapters.langchain import LangChainEscalationAdapter
+from confidence_escalation.handlers import HumanInLoopHandler
+
+adapter = LangChainEscalationAdapter(
+    threshold=0.65,
+    handlers=[HumanInLoopHandler(raise_on_trigger=True)],
+)
+
+# Attach as LangChain callback
+chain = LLMChain(llm=llm, callbacks=[adapter.as_callback()])
+
+# Or call directly from a LangGraph node
+def research_node(state):
+    response = llm.invoke(state["messages"])
+    try:
+        adapter.on_llm_end(response.content, logprobs=response.response_metadata.get("logprobs"))
+    except HumanInLoopHandler.HumanReviewRequired:
+        return {"status": "escalated"}
+    return {"response": response.content}
+```
+
+### CrewAI Integration
+
+```python
+from crewai import Agent
+from confidence_escalation.adapters.crewai import CrewAIEscalationAdapter
+
+adapter = CrewAIEscalationAdapter(threshold=0.65)
+
+agent = Agent(
+    role="Research Specialist",
+    goal="Analyze market trends",
+    backstory="...",
+    step_callback=adapter.step_callback,
+)
+```
+
+### Google ADK Integration
+
+```python
+from google.adk.agents import BaseAgent
+from confidence_escalation.adapters.google_adk import ADKEscalationAdapter
+
+class GovernedAgent(BaseAgent):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        self._escalation = ADKEscalationAdapter(threshold=0.65)
+
+    async def _run_async_impl(self, ctx):
+        async for event in self._llm_agent._run_async_impl(ctx):
+            if event.is_final_response():
+                result = self._escalation.evaluate_event(event, ctx)
+                if result["triggered"]:
+                    yield self._escalation.build_escalation_event(result)
+                    return
+            yield event
+```
+
+---
+
+## Composite Policy Chains
+
+```python
+from confidence_escalation import ThresholdPolicy, EscalationAction
+from confidence_escalation.policy import CompositePolicy
+
+policy = CompositePolicy(policies=[
+    ThresholdPolicy(threshold=0.25, action=EscalationAction.ABORT),
+    ThresholdPolicy(threshold=0.55, action=EscalationAction.HUMAN_IN_LOOP),
+    ThresholdPolicy(threshold=0.75, action=EscalationAction.COMPLIANCE_LOG),
+])
+
+result = policy.evaluate(score, context={"session_id": "abc"})
+# First matching threshold wins
+```
+
+---
+
+## OWASP Agentic AI Coverage
+
+| OWASP ASI ID | Risk | Coverage |
+|-------------|------|----------|
+| ASI-09 | Human-Agent Trust Exploitation | Confidence gating before high-stakes actions |
+| ASI-02 | Tool Misuse | Tool restriction handler removes high-risk tools at low confidence |
+| ASI-03 | Identity/Privilege Abuse | ComplianceLoggingHandler creates immutable audit trail |
+
+---
+
+## Related Packages
+
+- [voice-ai-governance](https://github.com/ashutoshrana/voice-ai-governance) — HIPAA/FERPA/EU AI Act compliance for voice AI pipelines
+- [regulated-ai-governance](https://github.com/ashutoshrana/regulated-ai-governance) — Runtime tool authorization and capability scoping
+- [enterprise-rag-patterns](https://github.com/ashutoshrana/enterprise-rag-patterns) — FERPA/HIPAA/GDPR-compliant RAG patterns
+
+---
+
+## License
+
+MIT License. See [LICENSE](LICENSE).

confidence_escalation-0.1.0/README.md

@@ -0,0 +1,248 @@
+# confidence-escalation
+
+**Framework-agnostic confidence-gated escalation middleware for LLM agents.**
+
+[![PyPI version](https://badge.fury.io/py/confidence-escalation.svg)](https://badge.fury.io/py/confidence-escalation)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+Multi-signal confidence scoring (logprob + verbalized + ASR + tool risk) with threshold-based escalation policies and pluggable handlers. Works with **LangChain**, **LangGraph**, **CrewAI**, **AutoGen**, **Google ADK**, and any Python agent framework.
+
+Addresses **OWASP Agentic AI Top 10 ASI-09**: Human-Agent Trust Exploitation — prevents agents from taking high-stakes actions when confidence is insufficient.
+
+---
+
+## The Problem
+
+LLM agents fail silently. When an agent is uncertain, it still returns a response — often confidently-worded — with no mechanism to:
+- Detect that confidence is low before executing a high-risk tool call
+- Route uncertain responses to a human reviewer
+- Escalate to a stronger model when needed
+- Produce a compliance audit trail of every escalation event
+
+`confidence-escalation` solves all four.
+
+---
+
+## Features
+
+- **Multi-signal scoring** — combine logprobs, verbalized confidence, and tool-call risk into a single composite score
+- **Threshold policies** — single-threshold, dual-threshold (normal + critical), composite multi-policy chains
+- **Pluggable handlers** — human-in-loop, model upgrade, tool restriction, compliance logging
+- **Framework adapters** — LangChain callbacks, CrewAI step_callback, AutoGen reply function wrapper, Google ADK event interceptor
+- **EU AI Act Article 12 audit logging** — structured JSON compliance log on every escalation
+- **Zero required dependencies** — core library runs with no dependencies; framework integrations are optional extras
+
+---
+
+## Quick Start
+
+### Installation
+
+```bash
+pip install confidence-escalation
+# With LangChain:
+pip install "confidence-escalation[langchain]"
+# With all frameworks:
+pip install "confidence-escalation[all]"
+```
+
+### Basic Scoring
+
+```python
+from confidence_escalation import MultiSignalConfidenceScorer
+
+scorer = MultiSignalConfidenceScorer(
+    weights={"logprob": 0.5, "verbalized": 0.3, "tool_risk": -0.2}
+)
+
+score = scorer.score(
+    logprobs=[-0.1, -0.3, -0.2],
+    verbalized_response="I am 70% confident about this answer.",
+    tool_call_risk=0.15,
+)
+
+print(f"Confidence: {score.value:.3f}")   # e.g. 0.712
+print(f"Reliable: {score.is_reliable()}")  # True (above 0.6 default)
+```
+
+### Threshold Policy + Human-in-Loop
+
+```python
+from confidence_escalation import (
+    ThresholdPolicy,
+    EscalationAction,
+    HumanInLoopHandler,
+    ComplianceLoggingHandler,
+    ConfidenceEscalationMiddleware,
+)
+
+def notify_human(ctx, result):
+    print(f"Routing to human review: session={ctx['session_id']}, confidence={result.confidence_score:.3f}")
+
+policy = ThresholdPolicy(
+    threshold=0.65,
+    action=EscalationAction.HUMAN_IN_LOOP,
+    critical_threshold=0.3,
+    critical_action=EscalationAction.ABORT,
+)
+
+middleware = ConfidenceEscalationMiddleware(
+    policy=policy,
+    handlers=[
+        HumanInLoopHandler(callback=notify_human),
+        ComplianceLoggingHandler(),
+    ],
+)
+
+result = middleware.call(
+    agent_step=lambda: my_llm.invoke(messages),
+    context={"session_id": "abc123", "model": "claude-sonnet-4-6"},
+    logprobs=[-0.4, -0.5],
+)
+
+if result["escalation"]["triggered"]:
+    print("Escalated — stopping agent execution.")
+```
+
+### Model Upgrade Handler
+
+```python
+from confidence_escalation import ModelUpgradeHandler, ThresholdPolicy, EscalationAction
+
+handler = ModelUpgradeHandler(
+    upgrade_map={
+        "claude-haiku-4-5": "claude-sonnet-4-6",
+        "claude-sonnet-4-6": "claude-opus-4-7",
+    }
+)
+
+policy = ThresholdPolicy(threshold=0.7, action=EscalationAction.MODEL_UPGRADE)
+result = policy.evaluate(score, context={"model": "claude-haiku-4-5"})
+
+if result.triggered:
+    upgrade_info = handler.handle(result, context={"model": "claude-haiku-4-5"})
+    print(f"Retry with: {upgrade_info['upgraded_model']}")
+```
+
+### Tool Restriction
+
+```python
+from confidence_escalation import ToolRestrictionHandler, ThresholdPolicy, EscalationAction
+
+handler = ToolRestrictionHandler(
+    high_risk_tools=["delete_record", "send_email", "execute_sql"],
+    allow_read_only=True,
+)
+
+policy = ThresholdPolicy(threshold=0.65, action=EscalationAction.TOOL_RESTRICTION)
+result = policy.evaluate(score, context={"available_tools": ["get_customer", "delete_record"]})
+
+if result.triggered:
+    restriction = handler.handle(result, context={"available_tools": agent_tools})
+    safe_tools = restriction["allowed_tools"]
+    # Re-invoke agent with only safe_tools
+```
+
+### LangChain Integration
+
+```python
+from confidence_escalation.adapters.langchain import LangChainEscalationAdapter
+from confidence_escalation.handlers import HumanInLoopHandler
+
+adapter = LangChainEscalationAdapter(
+    threshold=0.65,
+    handlers=[HumanInLoopHandler(raise_on_trigger=True)],
+)
+
+# Attach as LangChain callback
+chain = LLMChain(llm=llm, callbacks=[adapter.as_callback()])
+
+# Or call directly from a LangGraph node
+def research_node(state):
+    response = llm.invoke(state["messages"])
+    try:
+        adapter.on_llm_end(response.content, logprobs=response.response_metadata.get("logprobs"))
+    except HumanInLoopHandler.HumanReviewRequired:
+        return {"status": "escalated"}
+    return {"response": response.content}
+```
+
+### CrewAI Integration
+
+```python
+from crewai import Agent
+from confidence_escalation.adapters.crewai import CrewAIEscalationAdapter
+
+adapter = CrewAIEscalationAdapter(threshold=0.65)
+
+agent = Agent(
+    role="Research Specialist",
+    goal="Analyze market trends",
+    backstory="...",
+    step_callback=adapter.step_callback,
+)
+```
+
+### Google ADK Integration
+
+```python
+from google.adk.agents import BaseAgent
+from confidence_escalation.adapters.google_adk import ADKEscalationAdapter
+
+class GovernedAgent(BaseAgent):
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        self._escalation = ADKEscalationAdapter(threshold=0.65)
+
+    async def _run_async_impl(self, ctx):
+        async for event in self._llm_agent._run_async_impl(ctx):
+            if event.is_final_response():
+                result = self._escalation.evaluate_event(event, ctx)
+                if result["triggered"]:
+                    yield self._escalation.build_escalation_event(result)
+                    return
+            yield event
+```
+
+---
+
+## Composite Policy Chains
+
+```python
+from confidence_escalation import ThresholdPolicy, EscalationAction
+from confidence_escalation.policy import CompositePolicy
+
+policy = CompositePolicy(policies=[
+    ThresholdPolicy(threshold=0.25, action=EscalationAction.ABORT),
+    ThresholdPolicy(threshold=0.55, action=EscalationAction.HUMAN_IN_LOOP),
+    ThresholdPolicy(threshold=0.75, action=EscalationAction.COMPLIANCE_LOG),
+])
+
+result = policy.evaluate(score, context={"session_id": "abc"})
+# First matching threshold wins
+```
+
+---
+
+## OWASP Agentic AI Coverage
+
+| OWASP ASI ID | Risk | Coverage |
+|-------------|------|----------|
+| ASI-09 | Human-Agent Trust Exploitation | Confidence gating before high-stakes actions |
+| ASI-02 | Tool Misuse | Tool restriction handler removes high-risk tools at low confidence |
+| ASI-03 | Identity/Privilege Abuse | ComplianceLoggingHandler creates immutable audit trail |
+
+---
+
+## Related Packages
+
+- [voice-ai-governance](https://github.com/ashutoshrana/voice-ai-governance) — HIPAA/FERPA/EU AI Act compliance for voice AI pipelines
+- [regulated-ai-governance](https://github.com/ashutoshrana/regulated-ai-governance) — Runtime tool authorization and capability scoping
+- [enterprise-rag-patterns](https://github.com/ashutoshrana/enterprise-rag-patterns) — FERPA/HIPAA/GDPR-compliant RAG patterns
+
+---
+
+## License
+
+MIT License. See [LICENSE](LICENSE).