Skip to content

driftlab.stub

Nicolas Cravino edited this page Jul 10, 2026 · 3 revisions

id: driftlab name: DriftLab repo_path: ~/Documents/sw30labs/repos/driftlab remote_url: https://github.com/sw30labs/driftlab.git primary_language: Python framework: LangGraph + FastAPI category: oscal-compliance stacks: [oscal, compliance, agentic, langgraph] ingested: 2026-07-09 last_commit_date: 2026-07-09

DriftLab

Purpose

Continuous, machine-readable compliance observer for running agentic systems. Watches a live agent's actual decision traces (tool calls, routing, escalations, refusals) and continuously diffs observed behavior against a certified OSCAL baseline. On deviation it runs a sandboxed micro-experiment to prove the drift with reproduced evidence, emitting a compliance score, a deterministic anomaly ledger, and OSCAL 1.1.2 assessment artifacts for SOC 2 / EU AI Act / ISO 42001 workflows.

Architecture

Local-first, deterministic compliance path; the LLM is optional and advisory-only (may write prose, never a severity or verdict). Pipeline: Trace Ingestor → Normalizer → canonical DecisionEvent stream; an OSCAL catalog+profile is compiled into an executable BaselinePolicy; a Behavioral Diff Engine (7 control checks DL-1..7) and Anomaly Engine (severity → waivers → score) feed the ledger. A LangGraph Hypothesis Generator → Micro-Experiment Loop (design→execute→evaluate→reflect, sandboxed replay, optional DeepAgents advisory pass) produces OSCAL assessment-plan + assessment-results (CA-7). FastAPI estate + per-agent dashboards; staleness-weighted cron/launchd monitor cycles.

Dependencies

langgraph, pydantic + pydantic-settings, networkx, sqlalchemy, fastapi, uvicorn, jinja2, typer, rich, pyyaml. Optional [llm] and [test] extras. 92 offline tests, no LLM required.

CI/CD

No CI workflows in-repo. uv sync; driftlab demo / driftlab dashboard (port 8321); pytest.

Entities and topics

  • oscal-digital-twin-playground — shares the intended-vs-actual OSCAL drift idea, at design/config time rather than runtime
  • oscal-agent-guardrails — design-time OSCAL policy vs DriftLab's runtime observation
  • oscal-skills-guardrails — OSCAL-as-policy for admission; DriftLab is the runtime counterpart
  • Tags: [oscal, compliance, langgraph, python, zero-trust, digital-twin, fastapi]

Clone this wiki locally