Skip to content

v0.1.0

Choose a tag to compare

View all tags
@joemanis joemanis released this 15 Aug 00:12
· 47 commits to main since this release
v0.1.0
c19db92

ai-offboard v0.1.0 — initial release

Read-only AI access audit + offboarding report for Microsoft 365 tenants.
The compliance artifact you hand your insurer.

What's included

  • Read-only Entra (Graph) connector — scans users, app assignments, and
    service-principal permission grants. Never writes to the tenant.
  • AI-app catalog with DLP-risk tiers (high / medium / low) + substring
    matcher. Adding a tool is a one-PR contribution.
  • Risk rules — stale/orphaned access, MFA gaps, unused high-tier seats,
    and broad high-privilege grants.
  • Dry-run revocation planner — produces the exact steps; executes nothing.
  • Compliance-ready audit report — renders Markdown, HTML, and JSON.
  • Local web UI (offboard web) — dashboard with app inventory,
    per-finding remediation, and report downloads.
  • One-command setup (offboard setup) — interactive Entra configuration.
  • Demo mode (--mock) — full product walkthrough with zero Azure setup.

Install

pip install -e ".[web]"   # from source; PyPI publication coming
offboard web              # launch the local UI → click "Run demo scan"
offboard audit --tenant demo --mock


### Try the demo now
No Azure needed: run `offboard web`, then "Run demo scan" to see a live report.

### License
Apache-2.0

Note: because PyPI publication is still on the list (#7), the install command in the notes says "from source" — I'll keep that accurate until we ship it to PyPI.

Go ahead and publish it, then tell me when it's live and we'll roll into #3 (enable Issues + Discussions + issue templates).
Assets 2
Loading