Embeddable AI governance framework — human-readable trust contracts, runtime policy enforcement, and auditability SDK
God Clause exposes 14 tools with significant definition gaps. Most tools lack proper input schemas, parameters are documented in descriptions but not in structured JSON Schema format. Tool names are reasonable (health, ready, evaluate, enforce, audit, metrics, validate, lint, summarize, diff, evaluate_cli, audit_verify, audit_export) but descriptions are inconsistent in depth. The evaluate and enforce tools have detailed parameter descriptions, but many others (health, ready, contracts, metrics) have minimal or missing schema definitions. No tool annotations (readOnlyHint, destructiveHint, idempotentHint) are present. Error handling guidance is absent, tools do not explain recovery paths or categorize errors. Output schemas are not documented, forcing LLMs to infer response structure. The audit tool's filtering parameters are well-described, but most tools lack the depth needed for confident LLM selection and invocation.
Query audit log entries with optional filtering
Export audit log to CSV or JSON format
Verify hash chain integrity of an audit JSONL file
List all loaded trust contracts with metadata
Compare two contract versions side by side
Enforce a policy decision, throwing PolicyViolationError if action is denied
Evaluate a policy context against loaded trust contracts and return governance decision
Evaluate a context against a contract (one-shot CLI command)
No input schemas visible for 6 tools (health, ready, contracts, metrics, and others). Cannot verify parameter types or constraints.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint) present. LLMs cannot determine which tools are safe to retry or have side effects. enforce is marked WRITE but lacks destructiveHint annotation.
Output schemas not documented for any tool. LLMs must infer response structure. audit returns filtered entries but structure is not specified. evaluate and enforce return governance decisions but response format is undocumented.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 51 | <=2025-11-25 | v2 |
Health check endpoint returning server status and timestamp
Check a trust contract for best practices and style issues
Get server metrics including decision counts, block counts, and evaluation durations
Readiness check endpoint returning contract load status and count
Print a plain-language summary of a trust contract
Validate a trust contract against the schema
No error handling guidance. Tools do not explain recovery paths, error categories, or actionable next steps. A PolicyViolationError from enforce provides no guidance on how to proceed.
File path parameters (validate, lint, summarize, diff, audit_verify, audit_export) lack validation constraints. No description of allowed paths, path traversal prevention, or format requirements. LLMs may pass arbitrary paths.