iris-security-cli 0.2.16__tar.gz → 0.2.18__tar.gz

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/PKG-INFO

@@ -1,10 +1,12 @@
 Metadata-Version: 2.4
 Name: iris-security-cli
-Version: 0.2.16
+Version: 0.2.18
 Summary: IRIS CLI — declare, compile, preview, enforce, witness, certify, sentinel
 License: Apache-2.0
-Project-URL: Homepage, https://github.com/gimartinb/iris-sdk
-Project-URL: Repository, https://github.com/gimartinb/iris-sdk
+Project-URL: Homepage, https://iris-security.github.io/iris-sdk/
+Project-URL: Repository, https://github.com/IRIS-Security/iris-sdk
+Project-URL: Documentation, https://iris-security.github.io/iris-sdk/cli-reference.html
+Project-URL: Issues, https://github.com/IRIS-Security/iris-sdk/issues
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Security
@@ -15,8 +17,8 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: iris-security-core>=0.1.16
-Requires-Dist: iris-security-sdk>=0.2.16
+Requires-Dist: iris-security-core>=0.1.18
+Requires-Dist: iris-security-sdk>=0.2.18
 Requires-Dist: click>=8.1
 Requires-Dist: rich>=13.0
 Requires-Dist: pyyaml>=6.0
@@ -29,7 +31,7 @@ IRIS CLI — `iris scan`, `iris register`, `iris policy`, `iris compliance`.
 
 Command-line tools for AI agent governance and Colorado AI Act compliance.
 
-Part of the [IRIS SDK](https://github.com/gimartinb/iris-sdk).
+Part of the [IRIS SDK](https://github.com/IRIS-Security/iris-sdk).
 
 ## Install
 
@@ -45,3 +47,16 @@ iris register --name my-agent --owner you@company.com --team my-team --complianc
 iris scan
 iris compliance check --framework colorado-ai-act
 ```
+
+## GitHub Action
+
+Add AI governance to CI with the composite Action in this repo (offline by default):
+
+```yaml
+- uses: IRIS-Security/iris-cli@v1
+  with:
+    command: compliance scan
+    fail-on: blocker
+```
+
+Optional `--push` to IRIS Cloud when `api-key` is set. See [GitHub Action docs](https://iris-security.github.io/iris-sdk/github-action.html).

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/README.md

@@ -4,7 +4,7 @@ IRIS CLI — `iris scan`, `iris register`, `iris policy`, `iris compliance`.
 
 Command-line tools for AI agent governance and Colorado AI Act compliance.
 
-Part of the [IRIS SDK](https://github.com/gimartinb/iris-sdk).
+Part of the [IRIS SDK](https://github.com/IRIS-Security/iris-sdk).
 
 ## Install
 
@@ -20,3 +20,16 @@ iris register --name my-agent --owner you@company.com --team my-team --complianc
 iris scan
 iris compliance check --framework colorado-ai-act
 ```
+
+## GitHub Action
+
+Add AI governance to CI with the composite Action in this repo (offline by default):
+
+```yaml
+- uses: IRIS-Security/iris-cli@v1
+  with:
+    command: compliance scan
+    fail-on: blocker
+```
+
+Optional `--push` to IRIS Cloud when `api-key` is set. See [GitHub Action docs](https://iris-security.github.io/iris-sdk/github-action.html).

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/audit_log.py

@@ -55,6 +55,11 @@ def _event_policy(event: dict) -> str:
     return "—"
 
 
+def _event_r5_satisfied(event: dict) -> bool:
+    """R5 tamper-evidence applies only to HMAC-signed vault events (Evidence Vault v2)."""
+    return bool(event.get("signature"))
+
+
 def _event_hash(event: dict) -> str:
     if event.get("hash"):
         return str(event["hash"])
@@ -150,7 +155,7 @@ def _format_splunk(event: dict) -> dict:
             "iris_regulation": _event_regulation(event),
             "iris_event_id": event.get("event_id", ""),
             "iris_hash": _event_hash(event),
-            "aarm_r5": True,
+            "aarm_r5": _event_r5_satisfied(event),
             "aiuc1_control": _aiuc1_control(event),
         },
     }
@@ -195,7 +200,7 @@ def _format_elastic(event: dict) -> dict:
         "risk.score": _event_risk_score(event),
         "labels": {
             "iris_regulation": _event_regulation(event),
-            "aarm_r5": "true",
+            "aarm_r5": "true" if _event_r5_satisfied(event) else "false",
         },
     }
 
@@ -247,7 +252,7 @@ def _format_otel_envelope(events: List[dict]) -> dict:
                         _otel_attribute("service.name", "iris-cli"),
                         _otel_attribute("service.version", IRIS_VERSION),
                         _otel_attribute("iris.vendor", "IRIS Security, Inc."),
-                        _otel_attribute("aarm.conformance", "Core"),
+                        _otel_attribute("aarm.alignment", "designed-toward"),
                     ],
                 },
                 "scopeSpans": [
@@ -409,7 +414,7 @@ def _print_export_summary(
         "Formats: Splunk HEC · Datadog · Elastic ECS · OTel OTLP"
     )
     err_console.print(
-        "AARM R8 conformant · https://iris-security.io"
+        "OTel export · https://iris-security.io"
     )
 
 
@@ -524,7 +529,7 @@ def audit_log_export(
     Plug IRIS evidence directly into your existing security stack.
     No IRIS account required — reads from local Evidence Vault.
 
-    AARM R8 conformant: standard telemetry export.
+    Exports governance telemetry in standard SIEM formats (including OTel OTLP).
 
     Examples:
       iris audit-log export --format splunk --output events.json

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/certify.py

@@ -404,11 +404,13 @@ def certify_cmd(
 
     loader = DynamicBundleLoader(pinned_version=registry_version)
 
+    machine_output = output_format in ("json", "markdown", "aiuc1-export")
     if not offline and not registry_version:
         if not loader.is_cache_fresh():
-            console.print("[dim]Checking for regulatory updates...[/dim]")
+            if not machine_output:
+                console.print("[dim]Checking for regulatory updates...[/dim]")
             updated = loader.refresh_registry()
-            if updated:
+            if updated and not machine_output:
                 console.print("[green]✓ Regulatory intelligence updated[/green]")
                 console.print("[dim]  Run: iris regulatory check for change summary[/dim]")
 

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/compliance_scan_cmd.py

@@ -7,6 +7,7 @@
 from __future__ import annotations
 
 import os
+import sys
 from pathlib import Path
 
 import click
@@ -16,13 +17,29 @@ from rich.table import Table
 
 from iris.scan import detect_workload
 from iris_core.compliance.workload_eval import (
-    applicable_frameworks,
     evaluate_workload_profile,
+    framework_coverage,
     top_recommended_actions,
 )
 
 console = Console()
 
+_SEVERITY_RANK = {"blocker": 0, "required": 1, "recommended": 2}
+
+
+def _exit_on_fail_threshold(obligations: list[dict], fail_on: str) -> None:
+    if fail_on == "none":
+        return
+    threshold = _SEVERITY_RANK[fail_on]
+    blocking = [
+        obligation
+        for obligation in obligations
+        if not obligation.get("informational", False)
+        and _SEVERITY_RANK.get(obligation.get("severity", "recommended"), 9) <= threshold
+    ]
+    if blocking:
+        sys.exit(1)
+
 
 def _resolve_profile(
     *,
@@ -103,13 +120,32 @@ def _print_profile(profile: dict) -> None:
 
 
 def _print_frameworks(profile: dict) -> None:
+    coverage = framework_coverage(profile)
     table = Table(title="Applicable frameworks", show_header=True, header_style="bold")
     table.add_column("Framework")
-    table.add_column("Triggered by")
-    for fw, reasons in applicable_frameworks(profile):
-        table.add_row(fw, ", ".join(reasons))
+    table.add_column("Why this applies to you")
+    table.add_column("Depth")
+    for entry in coverage:
+        depth = (
+            f"[yellow]mapped — thin[/yellow]"
+            if entry["thin"]
+            else f"{entry['rule_count']} rules"
+        )
+        table.add_row(entry["bundle_id"], entry["why"], depth)
     console.print(table)
 
+    thin = [entry for entry in coverage if entry["thin"]]
+    if thin:
+        console.print(
+            "[dim]Thin coverage means the registry has this framework mapped but "
+            "not yet deeply evaluated here — run one of the following for a real "
+            "control-by-control check:[/dim]"
+        )
+        for entry in thin:
+            console.print(
+                f"  [dim]•[/dim] iris compliance check --framework {entry['bundle_id']}"
+            )
+
 
 def _print_actions(obligations: list[dict]) -> None:
     actions = top_recommended_actions(obligations, limit=5)
@@ -166,6 +202,13 @@ def _push_profile(profile: dict) -> None:
 @click.option("--proxy", "litellm_proxy", help="LiteLLM proxy base URL")
 @click.option("--lookback-days", default=30, show_default=True, help="Langfuse lookback window")
 @click.option("--push", is_flag=True, help="POST profile to cloud when IRIS_API_KEY is set")
+@click.option(
+    "--fail-on",
+    default="none",
+    type=click.Choice(["blocker", "required", "none"]),
+    show_default=True,
+    help="Exit 1 when obligations meet or exceed this severity (CI integration)",
+)
 @click.option("--json", "as_json", is_flag=True, help="Output raw JSON")
 def compliance_scan_cmd(
     path: str,
@@ -174,6 +217,7 @@ def compliance_scan_cmd(
     litellm_proxy: str | None,
     lookback_days: int,
     push: bool,
+    fail_on: str,
     as_json: bool,
 ) -> None:
     """Detect workload attributes and evaluate local regulatory obligations (offline)."""
@@ -196,6 +240,7 @@ def compliance_scan_cmd(
         click.echo(json.dumps({"profile": profile, "obligations": obligations}, indent=2))
         if push:
             _push_profile(profile)
+        _exit_on_fail_threshold(obligations, fail_on)
         return
 
     console.print(
@@ -214,3 +259,4 @@ def compliance_scan_cmd(
     )
     if push:
         _push_profile(profile)
+    _exit_on_fail_threshold(obligations, fail_on)

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/cost.py

@@ -18,6 +18,7 @@ from rich.table import Table
 
 from iris_core.cost.pricing import DEFAULT_PRICING, overrides_path, PricingRegistry
 from iris_core.cost.tracker import CostSummary, CostTracker, discover_agent_trackers
+from iris_core.entitlements import Entitlements, Feature
 
 console = Console()
 
@@ -298,6 +299,7 @@ def cost_report(agent: Optional[str], days: int, output_format: str, since: Opti
 @click.option("--since", default=None, help="ISO date string for period start")
 def cost_summary(days: int, since: Optional[str]) -> None:
     """CFO report — cost across all agents sorted by spend."""
+    Entitlements().require(Feature.COST_ORG_SUMMARY, context="org-wide cost summary")
     since_iso = _since_from_date(since, days)
     trackers = discover_agent_trackers()
     if not trackers:

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/drift.py

@@ -254,6 +254,7 @@ def drift_alert_config(slack_webhook: Optional[str], email: Optional[str], webho
         _require_pro_license("Email drift alerts", Feature.DRIFT_EMAIL_ALERT)
         config["email"] = email
     if webhook:
+        _require_pro_license("Webhook drift alerts", Feature.DRIFT_WEBHOOK_ALERT)
         config["webhook"] = webhook
 
     if not any([slack_webhook, email, webhook]):

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/evidence.py

@@ -981,7 +981,8 @@ def evidence_query(
     to exactly the events that need attention.
 
     This is the CLI equivalent of Evidence Vault Signal mode.
-    AARM R5 conformant — all entries are tamper-evident.
+    Local vault events are unsigned JSONL by default; Evidence Vault v2 adds
+    HMAC signing and hash chaining for tamper-evident receipts.
 
     Examples:
       iris evidence query --decision deny
@@ -1150,6 +1151,10 @@ def evidence_export(agent, output_path, output_format, governance_dir, vault_dir
         return
 
     if output_format == "oscal":
+        Entitlements().require(
+            Feature.EVIDENCE_EXPORT_AUDITOR,
+            context="evidence export --format oscal (auditor deliverable)",
+        )
         vault = _open_vault(agent, vault_dir)
         vault_data = vault.export_vault()
         oscal_payload = {

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/explain.py

@@ -30,7 +30,7 @@ Your existing tests will pass without modification.
 
 To verify: run your test suite after adding IRIS.
 If any test fails, report it as a bug at:
-github.com/gimartinb/iris-sdk/issues"""
+github.com/IRIS-Security/iris-sdk/issues"""
 
 TECHNICAL_EXPLANATION = """\
 Proxy pattern (identical attribute forwarding):

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/hitl.py

@@ -214,6 +214,35 @@ def hitl_setup(agent: str):
         rules.append(HITLConditionRule(condition=condition, reason=reason, notify_channel=channel))
     config.condition_rules = rules
 
+    console.print(
+        "\nRisk tiers — gate the clearly-irreversible, auto-allow the routine.\n"
+        "Leave any of these blank to skip; an empty list never triggers HITL.\n"
+    )
+    if click.confirm("Require HITL for specific violation severities?", default=False):
+        levels = click.prompt(
+            "Severities (comma-separated, e.g. CRITICAL,HIGH)", default="CRITICAL"
+        )
+        config.required_for_risk_levels = [
+            lvl.strip().upper() for lvl in levels.split(",") if lvl.strip()
+        ]
+    if click.confirm(
+        "Require HITL for specific actions in staging/production (e.g. write, delete)?",
+        default=False,
+    ):
+        actions = click.prompt("Actions (comma-separated)", default="write,delete")
+        config.step_up_actions = [a.strip() for a in actions.split(",") if a.strip()]
+    if click.confirm(
+        "Require HITL for specific data classifications (e.g. phi, pii)?", default=False
+    ):
+        classes = click.prompt("Data classifications (comma-separated)", default="phi,pii")
+        config.sensitive_data_classifications = [
+            c.strip() for c in classes.split(",") if c.strip()
+        ]
+    config.step_up_on_intent_drift = click.confirm(
+        "Require HITL when an action drifts outside the agent's declared intent?",
+        default=False,
+    )
+
     if click.confirm("Configure Slack webhook URL (Pro)?", default=False):
         config.slack_webhook_url = click.prompt("Slack webhook URL", default="")
     if click.confirm("Configure email recipients (Pro)?", default=False):
@@ -223,7 +252,15 @@ def hitl_setup(agent: str):
     path = _save_hitl_config(agent, config)
     console.print(f"[green]✓[/green] HITL configured for {agent}")
     console.print(f"[green]✓[/green] {len(rules)} condition rule(s) declared")
-    console.print("[green]✓[/green] HITL fires ONLY when a declared rule matches")
+    if config.required_for_risk_levels:
+        console.print(f"[green]✓[/green] Step-up on severities: {config.required_for_risk_levels}")
+    if config.step_up_actions:
+        console.print(f"[green]✓[/green] Step-up on actions: {config.step_up_actions}")
+    if config.sensitive_data_classifications:
+        console.print(f"[green]✓[/green] Step-up on data classifications: {config.sensitive_data_classifications}")
+    if config.step_up_on_intent_drift:
+        console.print("[green]✓[/green] Step-up on intent drift: enabled")
+    console.print("[green]✓[/green] HITL fires ONLY for what you declared above — everything else auto-allows")
     console.print(f"[green]✓[/green] Saved to {path}")
 
 
@@ -255,10 +292,38 @@ def hitl_rules(agent: str):
             console.print(f"  Reason: {entry['reason']}")
             console.print("  Channel: All channels")
 
+    if config.required_for_risk_levels:
+        console.print(
+            f"\nWILL trigger HITL — violation severity in "
+            f"{config.required_for_risk_levels}:"
+        )
+        console.print(
+            "● Any policy violation at these severities steps up instead of "
+            "logging silently or auto-denying"
+        )
+
+    if config.step_up_actions:
+        console.print(f"\nWILL trigger HITL — declared step-up actions in staging/production:")
+        console.print(f"● {config.step_up_actions}")
+
+    if config.sensitive_data_classifications:
+        console.print(
+            f"\nWILL trigger HITL — sensitive data classifications:"
+        )
+        console.print(f"● {config.sensitive_data_classifications}")
+
+    if config.step_up_on_intent_drift:
+        console.print(
+            "\nWILL trigger HITL — action drifts outside the agent's declared "
+            "intent (semantic distance > 0.7)"
+        )
+
     console.print("\nWILL NOT trigger HITL — everything else:")
     console.print("✗ Calls with no matching condition rule → automatic")
-    console.print("✗ Risk level alone → never triggers HITL")
-    console.print("✗ Data classification alone → never triggers HITL")
+    if not config.required_for_risk_levels:
+        console.print("✗ Risk level alone → never triggers HITL (declare required_for_risk_levels to change this)")
+    if not config.sensitive_data_classifications:
+        console.print("✗ Data classification alone → never triggers HITL (declare sensitive_data_classifications to change this)")
     console.print("\nRun: iris hitl test --agent {agent} to verify.")
 
 

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/main.py

@@ -50,10 +50,11 @@ class IrisCLI(click.Group):
 
 @click.group(cls=IrisCLI)
 @click.version_option(
-    version="0.2.16",
+    version="0.2.18",
     prog_name="iris",
-    message="%(prog)s %(version)s · AARM Core conformant (R1–R6) · "
-            "AIUC-1 Q1 2026 aligned · https://iris-security.io",
+    message="%(prog)s %(version)s · Evaluates agent actions through an in-process "
+            "Cedar engine before adapter-wrapped calls proceed; records decisions "
+            "to a local Evidence Vault.",
 )
 def cli():
     """
@@ -485,12 +486,20 @@ framework.add_command(framework_suggest, name="suggest")
 from iris_cli.assess import compliance_assess
 compliance.add_command(compliance_assess)
 
-# Wire in evidence commands
-from iris_cli.evidence import evidence
-cli.add_command(evidence)
+# Wire in evidence commands (optional — requires iris-security-core>=0.1.17 exporters)
+try:
+    from iris_cli.evidence import evidence
 
-from iris_cli.vault import vault
-cli.add_command(vault)
+    cli.add_command(evidence)
+except ModuleNotFoundError:
+    pass
+
+try:
+    from iris_cli.vault import vault
+
+    cli.add_command(vault)
+except ModuleNotFoundError:
+    pass
 
 from iris_cli.framework_test import test as framework_test_cmd_legacy
 # framework_test kept for internal imports; certify is the primary command

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/mcp_server.py

@@ -19,6 +19,7 @@ Setup:
 
 import json
 import asyncio
+import re
 from pathlib import Path
 from typing import Any
 from datetime import datetime
@@ -142,6 +143,75 @@ MCP_TOOLS = [
 
 # ── Tool handlers ─────────────────────────────────────────────────────────────
 
+_MODEL_ID_PATTERN = re.compile(r"""model\s*=\s*["']([^"']+)["']""")
+
+
+def _governance_root(workspace: Path) -> Path | None:
+    candidate = workspace / "governance"
+    return candidate if candidate.exists() else None
+
+
+def _model_governance_violations(code: str, workspace: Path) -> list[dict]:
+    from iris_core.engine.model_governance import check_model_governance
+    from iris_core.models.context import EvaluationContext
+    from iris_core.models.directives import DirectiveRegistry
+    from iris_core.models.model_registry import ModelRegistry
+    from iris_core.models.passport import AgentPassport, Environment
+
+    model_ids = _MODEL_ID_PATTERN.findall(code)
+    if not model_ids:
+        return []
+
+    gov_root = _governance_root(workspace)
+    registry = ModelRegistry.load(gov_root)
+    directives = DirectiveRegistry.load(gov_root)
+    passport = AgentPassport(
+        name="mcp-scan",
+        owner="unknown@local",
+        allowed_model_tiers=["standard", "frontier", "frontier-restricted"],
+    )
+    violations: list[dict] = []
+    for model_id in model_ids:
+        ctx = EvaluationContext(
+            agent_id="mcp-scan",
+            action="call",
+            resource="llm-api",
+            resource_type="model",
+            environment=Environment.DEV,
+            model_id=model_id,
+        )
+        for violation in check_model_governance(passport, ctx, registry, directives):
+            violations.append(
+                {
+                    "rule_id": violation.rule_id,
+                    "severity": violation.severity.value,
+                    "message": violation.message,
+                    "compliance_refs": violation.compliance_refs,
+                    "fix": violation.remediation,
+                }
+            )
+    return violations
+
+
+def handle_models_status(params: dict) -> dict:
+    """Return bundled/user model registry and active directives."""
+    from iris_core.models.directives import DirectiveRegistry
+    from iris_core.models.model_registry import ModelRegistry
+
+    workspace = Path(params.get("workspace_path", "."))
+    gov_root = _governance_root(workspace)
+    registry = ModelRegistry.load(gov_root)
+    directives = DirectiveRegistry.load(gov_root)
+    return {
+        "models": {
+            model_id: capability.to_dict()
+            for model_id, capability in registry.models.items()
+        },
+        "active_directives": [d.to_dict() for d in directives.active_directives()],
+        "docs": "docs/MODEL_GOVERNANCE.md",
+    }
+
+
 def handle_check_agent_code(params: dict) -> dict:
     """
     Analyze agent code for compliance violations.
@@ -150,6 +220,7 @@ def handle_check_agent_code(params: dict) -> dict:
     code = params.get("code", "")
     file_path = params.get("file_path", "unknown")
     framework = params.get("framework", "colorado-ai-act")
+    workspace = Path(params.get("workspace_path", "."))
 
     violations = []
     suggestions = []
@@ -242,6 +313,8 @@ def handle_check_agent_code(params: dict) -> dict:
                 "command": f"iris register --name my-agent --owner you@company.com --compliance colorado-ai-act",
             })
 
+    violations.extend(_model_governance_violations(code, workspace))
+
     return {
         "file": file_path,
         "framework": framework,
@@ -386,6 +459,18 @@ agent = IrisAgent(
             "explanation": "Declare the destination region so IRIS can enforce cross-region policy",
             "code_snippet": "@agent.guard(tool=\"storage\", action=\"write\", data_region=\"us-east-1\", destination_region=\"us-east-1\")",
         },
+        "IRIS-MODEL-001": {
+            "explanation": "Model is suspended by an active directive — switch to the approved fallback",
+            "command": "Review governance/directives/active.yaml and use the fallback_model listed there",
+        },
+        "IRIS-MODEL-004": {
+            "explanation": "Export-control restricted model requires valid user work authorization",
+            "code_snippet": "Set user_work_authorization (e.g. us-citizen) in EvaluationContext or use an unrestricted model",
+        },
+        "IRIS-MODEL-005": {
+            "explanation": "Frontier model requires HITL approval in staging/production",
+            "code_snippet": "Set hitl_approved=True after security review, or use iris HITL workflow",
+        },
     }
 
     fix = fixes.get(rule_id, {
@@ -469,6 +554,7 @@ HANDLERS = {
     "iris_suggest_policy": handle_suggest_policy,
     "iris_fix_violation": handle_fix_violation,
     "iris_scan_workspace": handle_scan_workspace,
+    "iris_models_status": handle_models_status,
 }
 
 

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/quickstart.py

@@ -167,7 +167,7 @@ def _print_welcome() -> None:
             "  · How to register and govern a new agent\n"
             "  · Your compliance score in real time\n\n"
             "No API key required for most steps.\n"
-            "github.com/gimartinb/iris-sdk",
+            "github.com/IRIS-Security/iris-sdk",
             title="Welcome to IRIS",
             style="blue",
         )
@@ -363,7 +363,7 @@ def _print_summary(findings_count: int) -> None:
             "     [cyan]from iris_anthropic import IrisAnthropic[/cyan]\n"
             "     [cyan]client = IrisAnthropic(passport=passport)[/cyan]\n\n"
             "  4. Read the full guide:\n"
-            "     github.com/gimartinb/iris-sdk/blob/main/QUICKSTART.md\n\n"
+            "     github.com/IRIS-Security/iris-sdk/blob/main/QUICKSTART.md\n\n"
             "Questions? gilbert.martin@gmail.com",
             title="Quickstart complete",
             style="green",

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/scm.py

@@ -9,6 +9,8 @@ from pathlib import Path
 import click
 from rich.console import Console
 
+from iris_core.entitlements import Entitlements, Feature
+
 console = Console()
 
 
@@ -94,6 +96,9 @@ def scan_org(
       export GITHUB_TOKEN=ghp_... && iris scm scan-org --platform github --org my-org
       iris scm scan-org --platform gitlab --group my-group --token $GITLAB_TOKEN
     """
+    Entitlements().require(Feature.SCM_ORG_SCANNER, context="org-wide SCM scan")
+    if comment:
+        Entitlements().require(Feature.SCM_PR_COMMENTS, context="SCM PR comments")
     if platform == "github":
         if not org:
             console.print("[red]--org is required for GitHub scans[/red]")
@@ -330,7 +335,7 @@ Step 1: Go to github.com/organizations/{org_name}/settings/apps
 Step 2: Click "New GitHub App"
 Step 3: Fill in:
   Name: IRIS Governance
-  Homepage URL: https://github.com/gimartinb/iris-sdk
+  Homepage URL: https://github.com/IRIS-Security/iris-sdk
   Webhook: leave unchecked for now
 Step 4: Set permissions (read-only):
   Repository permissions:

{iris_security_cli-0.2.16 → iris_security_cli-0.2.18}/iris_cli/users.py

@@ -8,12 +8,14 @@ import click
 from rich.console import Console
 from rich.table import Table
 
+from iris_core.entitlements import Entitlements, Feature
+
 console = Console()
 
 
 @click.group()
 def users():
-    """Manage which users may invoke governed agents (PRO tier RBAC)."""
+    """Manage which users may invoke governed agents (Business tier RBAC beyond solo owner)."""
     pass
 
 
@@ -31,7 +33,11 @@ def users_add(email: str, role: str, agent: str, governance_dir: Path):
     Example:
       iris users add --email alice@co.com --role developer --agent my-agent
     """
-    from iris_core.rbac.registry import add_user
+    from iris_core.rbac.registry import add_user, load_users
+
+    existing = load_users(agent, governance_dir)
+    if existing:
+        Entitlements().require(Feature.TEAM_RBAC, context="add second+ user to agent")
 
     try:
         entry = add_user(agent, email, role, governance_dir)