policyaware 0.2.0__tar.gz

policyaware-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install package
+        run: python -m pip install -e ".[dev]"
+
+      - name: Run tests
+        run: pytest
+
+      - name: Compile source
+        run: python -m compileall src tests examples
+

policyaware-0.2.0/.github/workflows/publish-testpypi.yml

@@ -0,0 +1,50 @@
+name: Publish Python Package To TestPyPI
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build tools
+        run: python -m pip install --upgrade build twine
+
+      - name: Build package
+        run: python -m build
+
+      - name: Check package
+        run: twine check dist/*
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish-testpypi:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: testpypi
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+

policyaware-0.2.0/.github/workflows/publish.yml

@@ -0,0 +1,49 @@
+name: Publish Python Package
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build tools
+        run: python -m pip install --upgrade build twine
+
+      - name: Build package
+        run: python -m build
+
+      - name: Check package
+        run: twine check dist/*
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+

policyaware-0.2.0/.gitignore

@@ -0,0 +1,13 @@
+.venv/
+__pycache__/
+*.pyc
+.pytest_cache/
+.ruff_cache/
+.policyaware/
+.docx_tmp/
+render_tmp/
+.tools/
+docs/rendered_user_guide/
+dist/
+build/
+*.egg-info/

policyaware-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,29 @@
+# Contributing
+
+Thanks for helping build PolicyAware AI Gateway.
+
+## Local Setup
+
+```bash
+pip install -e ".[dev]"
+pytest
+policyaware dev simulate
+```
+
+## Design Principles
+
+- Deny by default.
+- Keep policy decisions explainable.
+- Treat tools as privileged operations.
+- Keep provider integrations behind stable interfaces.
+- Prefer structured traces over plain logs.
+- Make local development possible without external model credentials.
+
+## Good First Areas
+
+- Provider adapters.
+- Additional sensitive-data detectors.
+- OpenTelemetry exporter.
+- FastAPI request-body inspection.
+- Golden dataset execution.
+- Dashboard prototype.

policyaware-0.2.0/LICENSE

@@ -0,0 +1,18 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+Copyright 2026 PolicyAware AI Gateway Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+

policyaware-0.2.0/PKG-INFO

@@ -0,0 +1,170 @@
+Metadata-Version: 2.4
+Name: policyaware
+Version: 0.2.0
+Summary: Policy-aware control plane for enterprise LLM, RAG, and AI agent applications.
+Project-URL: Homepage, https://ktirupati.github.io/policyaware/
+Project-URL: Documentation, https://ktirupati.github.io/policyaware/
+Project-URL: Repository, https://github.com/ktirupati/policyaware
+Project-URL: Issues, https://github.com/ktirupati/policyaware/issues
+Author: PolicyAware AI Gateway Contributors
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: agents,ai-gateway,audit,governance,llm,policy,rag
+Requires-Python: >=3.10
+Requires-Dist: pydantic>=2.6
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: rich>=13.7
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.4; extra == 'dev'
+Provides-Extra: providers
+Requires-Dist: boto3>=1.34; extra == 'providers'
+Description-Content-Type: text/markdown
+
+# PolicyAware AI Gateway
+
+PolicyAware AI Gateway is an open-source control plane for governed AI execution across enterprise LLM, RAG, AI agent, and MCP-style tool workflows. It enforces organizational, legal, security, cost, and routing policy before requests reach models or tools, then evaluates outputs for safety, quality, compliance, and auditability.
+
+The default posture is deny-by-default: every request must match an allow or conditional policy before execution.
+
+Documentation site: https://ktirupati.github.io/policyaware/
+
+## What It Provides
+
+- Policy enforcement for RBAC, context, tenant, region, compliance, budgets, tokens, latency, and model constraints.
+- PII, PHI, secrets, and sensitive-data detection with redaction actions.
+- Multi-provider model routing with fallbacks by policy, task type, risk, cost, availability, and quality.
+- Runtime evaluation for safety, policy compliance, grounding, citations, and leakage.
+- Risk-tier classification with explainable reason codes.
+- MCP/tool governance for connector-level and action-level permissions.
+- Full request/response trace, explainable decisions, replay-ready audit logs, and exportable JSONL records.
+- Python SDK, CLI, YAML policies, local development mode, and integration shims.
+
+## Quick Start
+
+```bash
+pip install policyaware
+```
+
+For local development from this repository:
+
+```bash
+pip install -e ".[dev]"
+policyaware policy test examples/policies/basic.yaml
+policyaware policy validate examples/policies/basic.yaml
+policyaware policy explain examples/policies/basic.yaml --prompt "Email jane@example.com"
+policyaware risk classify "Summarize this patient diagnosis" --domain healthcare
+policyaware tools check examples/policies/tool-governance.yaml --agent code_assistant --connector github --action create_pr
+policyaware eval run examples/evals/support_rag.yaml
+```
+
+For copy-pasteable end-to-end examples, see [Working Examples](docs/working-examples.md).
+
+```python
+from policyaware import Gateway, GatewayRequest
+
+gateway = Gateway.from_policy_file("examples/policies/basic.yaml")
+
+response = gateway.chat(
+    GatewayRequest(
+        tenant="acme",
+        app="claims-assistant",
+        user={"id": "u_123", "role": "claims_adjuster"},
+        context={"region": "us", "task_type": "summarization", "risk": "low"},
+        messages=[{"role": "user", "content": "Summarize claim ACME-42."}],
+    )
+)
+
+print(response.content)
+print(response.policy.decision)
+print(response.policy.reason_codes)
+print(response.trace_id)
+```
+
+## Architecture
+
+```text
+Application / Agent / RAG App
+        |
+        v
+PolicyAware SDK / Middleware
+        |
+        v
+Identity + Context Resolver
+        |
+        v
+Policy Decision Engine -> Data Protection Engine -> Model Router -> Provider/Tool
+        |
+        v
+Runtime Evaluation -> Audit Trace -> Response
+```
+
+## Repository Layout
+
+```text
+src/policyaware/
+  audit.py              Request traces and audit export records
+  cli.py                policyaware CLI
+  data_protection.py    PII/PHI/secret detection and redaction
+  evals.py              Offline and runtime evaluation primitives
+  gateway.py            Main SDK facade
+  models.py             Core typed contracts
+  policy.py             Deny-by-default policy engine
+  providers.py          Provider abstraction and local simulated provider
+  routing.py            Policy-aware model routing
+  integrations/         FastAPI, Flask, LangChain, LlamaIndex shims
+examples/
+  policies/
+  evals/
+tests/
+```
+
+## Policy Example
+
+```yaml
+id: basic_enterprise_policy
+default: deny
+
+rules:
+  - name: allow_low_risk_support
+    effect: allow
+    when:
+      user.role_in: ["support_agent", "claims_adjuster"]
+      request.risk_in: ["low", "medium"]
+      data.contains_secrets: false
+
+  - name: redact_pii_for_non_privileged_users
+    effect: transform
+    action: redact
+    when:
+      data.contains_pii: true
+      user.role_not_in: ["privacy_admin", "compliance_officer"]
+
+  - name: require_approval_for_high_risk
+    effect: require_approval
+    when:
+      request.risk: "high"
+```
+
+## Development Status
+
+This is a production-grade starter framework: the core extension points and executable behavior are present, while provider integrations, enterprise identity adapters, dashboard UI, and long-term storage can be expanded by contributors.
+
+## v0.2 MVP Capabilities
+
+- Deterministic risk classification: low, medium, high, critical.
+- Explainable policy decisions with reason codes and remediation.
+- Replayable audit trace snapshots.
+- Audit bundle generation.
+- Tool governance policies for MCP-style connectors and actions.
+- Governance-aware eval report schema.
+- Provider adapters for OpenAI-compatible APIs, Azure OpenAI, Anthropic, Bedrock, Vertex AI, Ollama, and vLLM.
+- SQLite audit storage and static trace viewer.
+- Prometheus text and OpenTelemetry-shaped JSON exporters.
+- File and webhook approval hooks.
+- Executable golden dataset policy checks.
+
+## License
+
+Apache-2.0

policyaware-0.2.0/README.md

@@ -0,0 +1,146 @@
+# PolicyAware AI Gateway
+
+PolicyAware AI Gateway is an open-source control plane for governed AI execution across enterprise LLM, RAG, AI agent, and MCP-style tool workflows. It enforces organizational, legal, security, cost, and routing policy before requests reach models or tools, then evaluates outputs for safety, quality, compliance, and auditability.
+
+The default posture is deny-by-default: every request must match an allow or conditional policy before execution.
+
+Documentation site: https://ktirupati.github.io/policyaware/
+
+## What It Provides
+
+- Policy enforcement for RBAC, context, tenant, region, compliance, budgets, tokens, latency, and model constraints.
+- PII, PHI, secrets, and sensitive-data detection with redaction actions.
+- Multi-provider model routing with fallbacks by policy, task type, risk, cost, availability, and quality.
+- Runtime evaluation for safety, policy compliance, grounding, citations, and leakage.
+- Risk-tier classification with explainable reason codes.
+- MCP/tool governance for connector-level and action-level permissions.
+- Full request/response trace, explainable decisions, replay-ready audit logs, and exportable JSONL records.
+- Python SDK, CLI, YAML policies, local development mode, and integration shims.
+
+## Quick Start
+
+```bash
+pip install policyaware
+```
+
+For local development from this repository:
+
+```bash
+pip install -e ".[dev]"
+policyaware policy test examples/policies/basic.yaml
+policyaware policy validate examples/policies/basic.yaml
+policyaware policy explain examples/policies/basic.yaml --prompt "Email jane@example.com"
+policyaware risk classify "Summarize this patient diagnosis" --domain healthcare
+policyaware tools check examples/policies/tool-governance.yaml --agent code_assistant --connector github --action create_pr
+policyaware eval run examples/evals/support_rag.yaml
+```
+
+For copy-pasteable end-to-end examples, see [Working Examples](docs/working-examples.md).
+
+```python
+from policyaware import Gateway, GatewayRequest
+
+gateway = Gateway.from_policy_file("examples/policies/basic.yaml")
+
+response = gateway.chat(
+    GatewayRequest(
+        tenant="acme",
+        app="claims-assistant",
+        user={"id": "u_123", "role": "claims_adjuster"},
+        context={"region": "us", "task_type": "summarization", "risk": "low"},
+        messages=[{"role": "user", "content": "Summarize claim ACME-42."}],
+    )
+)
+
+print(response.content)
+print(response.policy.decision)
+print(response.policy.reason_codes)
+print(response.trace_id)
+```
+
+## Architecture
+
+```text
+Application / Agent / RAG App
+        |
+        v
+PolicyAware SDK / Middleware
+        |
+        v
+Identity + Context Resolver
+        |
+        v
+Policy Decision Engine -> Data Protection Engine -> Model Router -> Provider/Tool
+        |
+        v
+Runtime Evaluation -> Audit Trace -> Response
+```
+
+## Repository Layout
+
+```text
+src/policyaware/
+  audit.py              Request traces and audit export records
+  cli.py                policyaware CLI
+  data_protection.py    PII/PHI/secret detection and redaction
+  evals.py              Offline and runtime evaluation primitives
+  gateway.py            Main SDK facade
+  models.py             Core typed contracts
+  policy.py             Deny-by-default policy engine
+  providers.py          Provider abstraction and local simulated provider
+  routing.py            Policy-aware model routing
+  integrations/         FastAPI, Flask, LangChain, LlamaIndex shims
+examples/
+  policies/
+  evals/
+tests/
+```
+
+## Policy Example
+
+```yaml
+id: basic_enterprise_policy
+default: deny
+
+rules:
+  - name: allow_low_risk_support
+    effect: allow
+    when:
+      user.role_in: ["support_agent", "claims_adjuster"]
+      request.risk_in: ["low", "medium"]
+      data.contains_secrets: false
+
+  - name: redact_pii_for_non_privileged_users
+    effect: transform
+    action: redact
+    when:
+      data.contains_pii: true
+      user.role_not_in: ["privacy_admin", "compliance_officer"]
+
+  - name: require_approval_for_high_risk
+    effect: require_approval
+    when:
+      request.risk: "high"
+```
+
+## Development Status
+
+This is a production-grade starter framework: the core extension points and executable behavior are present, while provider integrations, enterprise identity adapters, dashboard UI, and long-term storage can be expanded by contributors.
+
+## v0.2 MVP Capabilities
+
+- Deterministic risk classification: low, medium, high, critical.
+- Explainable policy decisions with reason codes and remediation.
+- Replayable audit trace snapshots.
+- Audit bundle generation.
+- Tool governance policies for MCP-style connectors and actions.
+- Governance-aware eval report schema.
+- Provider adapters for OpenAI-compatible APIs, Azure OpenAI, Anthropic, Bedrock, Vertex AI, Ollama, and vLLM.
+- SQLite audit storage and static trace viewer.
+- Prometheus text and OpenTelemetry-shaped JSON exporters.
+- File and webhook approval hooks.
+- Executable golden dataset policy checks.
+
+## License
+
+Apache-2.0

policyaware-0.2.0/SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+PolicyAware AI Gateway is security-sensitive infrastructure. Please do not open public issues for suspected vulnerabilities.
+
+## Reporting
+
+Email the maintainers or use your organization's private disclosure process until this project has a dedicated security contact.
+
+## Security Model
+
+- Requests are denied unless policy allows them.
+- Transform rules do not grant access.
+- Tool calls should be treated as privileged operations.
+- Audit traces should be protected as sensitive records.
+- Redaction reduces risk but is not a substitute for access control.
+

policyaware-0.2.0/docs/.nojekyll

@@ -0,0 +1 @@
+

policyaware-0.2.0/docs/404.html

@@ -0,0 +1,19 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>PolicyAware Documentation</title>
+  <link rel="stylesheet" href="site.css">
+</head>
+<body>
+  <main class="section">
+    <div class="shell">
+      <h1>PolicyAware Documentation</h1>
+      <p>The page you requested was not found.</p>
+      <p><a class="button" href="./">Return to documentation home</a></p>
+    </div>
+  </main>
+</body>
+</html>
+

policyaware-0.2.0/docs/architecture.md

@@ -0,0 +1,45 @@
+# Architecture
+
+PolicyAware AI Gateway is organized around explicit, replaceable engines.
+
+## Request Lifecycle
+
+1. The SDK or middleware constructs a `GatewayRequest`.
+2. `DataProtectionEngine` detects PII, PHI, secrets, and sensitive categories.
+3. `RiskClassifier` assigns low, medium, high, or critical risk.
+4. `PolicyEngine` evaluates deny, approval, allow, and transform rules with explainable reason codes.
+5. Denied and approval-gated requests stop before model execution.
+6. Allowed requests are transformed if required, then sent to `ModelRouter`.
+7. `ModelProvider` executes the request against a local or external model.
+8. `RuntimeEvaluator` scores the output for leakage, citations, policy consistency, and safety hooks.
+9. `AuditLogger` writes a replay-ready trace.
+
+## Extension Points
+
+- `PolicyEngine`: replace YAML policies with OPA, Cedar, SQL-backed policies, or custom PDPs.
+- `DataProtectionEngine`: add Microsoft Presidio, Cloud DLP, custom classifiers, or domain detectors.
+- `ModelRouter`: add health checks, quality feedback, provider quotas, and SLO-aware routing.
+- `ModelProvider`: implement OpenAI, Azure OpenAI, Bedrock, Vertex, Anthropic, vLLM, Ollama, or TGI adapters.
+- `RuntimeEvaluator`: plug in LLM-as-judge, RAGAS-style scoring, citation validation, toxicity classifiers, and golden datasets.
+- `AuditLogger`: write to OpenTelemetry, Kafka, SIEM, S3, BigQuery, Snowflake, or Postgres.
+- `ToolPolicyEngine`: govern MCP-style connectors and action permissions.
+
+## Policy Semantics
+
+PolicyAware is deny-by-default.
+
+Evaluation order:
+
+1. `deny`
+2. `require_approval`
+3. `allow` plus any matching `transform`
+4. default decision
+
+Transform rules never grant access by themselves. They only modify requests that were otherwise allowed, or requests permitted by a default-allow policy.
+
+## v0.2 Governance Additions
+
+- Risk classification is deterministic and based on data sensitivity, domain, tool use, autonomy, business impact, and action type.
+- Policy decisions include reason codes, matched policy IDs, violated policy IDs, and remediation guidance.
+- Audit traces include request/response snapshots for replay and evidence bundles.
+- Tool governance is separate from chat/model policy so agent actions can be authorized at connector and action level.