GovernanceOS Releases Free Open-Source Tools to Verify Evidence Offline

TORONTO - EntSun -- GovernanceOS today released two free, open-source tools for the people who keep and examine AI governance records in regulated institutions. Both run on the user's own machine, need no account, and are free under the Apache License 2.0, including for commercial use.

goslint checks an AI or model register, as an .xlsx, .xlsm or .csv file, against the fields that regulators name. It carries 23 rule packs and 246 fields across Canada, the United States, the GCC, the European Union, the United Kingdom, Switzerland and Asia-Pacific, including OSFI Guideline E-23, EU AI Act Annex VIII registration, PRA SS1/23, the CBUAE Model Management Standards, the QCB AI Guideline Article 10 Register, NIST AI 600-1 and Colorado Regulation 10-1-1.

For each register, goslint reports missing fields, each with its basis in the instrument's own words and a citation; next review dates that have passed or cannot be read; whether each cell was typed by a person or derived by a formula; and what a spreadsheet cannot prove: no history, no signers, no hashes.

More on EntSun News

• PrimeStyleAI Unveils Agentic Fashion Commerce Ecosystem With Intelligent Sizing and Virtual Try-On
• Different Worlds. Different Genres. One Creative Point of View
• A British Voice Announces 'Editorially Speaking,' Streaming This Fall on Tubi and Roku
• Fifty Years After Arriving at 17, Jacob "Jay" Adoni Looks Back on a New York Career
• Marc Yaffee Headlines Friday November 20 at Talking Stick Resort

goslint states its limits in every report. It checks that fields are present, that review dates are current, and where values come from. Whether the values are true is for the review.

The checker also runs free in the browser at https://governanceos.si/lint. The register stays on the user's computer: the page reads the file into its own memory, can connect only to its own site under its Content Security Policy, and runs with the network off once the checker is ready. A sample register from Nebula Mutual, a fictional institution constructed for illustration, lets anyone try it without a file of their own.

gos-verify is for examiners. It checks an evidence pack from GovernanceOS: the SHA-256 hash chain, the Ed25519 signature over the whole pack, and the pack key against the one the institution sent by another route. It needs Python 3 and nothing else, so an examiner's verification does not depend on GovernanceOS being reachable.

Both tools install with one line: pip install "governanceos[lint]". The source is on GitHub and the package is on PyPI, both under the name governanceos.

Both tools and what they check: governanceos.si/open-source

About GovernanceOS: GovernanceOS is Canada-based AI governance software for regulated institutions, opening by invitation.