driftlab.stub

---

id: driftlab name: DriftLab repo_path: ~/Documents/sw30labs/repos/driftlab remote_url: https://github.com/sw30labs/driftlab.git primary_language: Python framework: LangGraph + FastAPI category: oscal-compliance stacks: [oscal, compliance, agentic, langgraph] ingested: 2026-07-09 last_commit_date: 2026-07-15

DriftLab

Purpose

Continuous, machine-readable compliance observer for running agentic systems. Watches a live agent's actual decision traces (tool calls, routing, escalations, refusals) and continuously diffs observed behavior against a certified OSCAL baseline. On deviation it runs a sandboxed micro-experiment to prove the drift with reproduced evidence, emitting a compliance score, a deterministic anomaly ledger, and OSCAL 1.1.2 assessment artifacts for SOC 2 / EU AI Act / ISO 42001 workflows.

Architecture

Local-first, deterministic compliance path; the LLM is optional and advisory-only (may write prose, never a severity or verdict). Pipeline: Trace Ingestor → Normalizer → canonical DecisionEvent stream; an OSCAL catalog+profile is compiled into an executable BaselinePolicy; a Behavioral Diff Engine (8 control checks DL-1..8) and Anomaly Engine (severity → waivers → score) feed the ledger. v2.1 adds DL-8 Resource Budget (SC-6/CA-7): a driftlab.sensor module (stdlib process meter, cumulative multi-currency budget ledger, BudgetExceeded circuit breaker) that apps adopt with ~2 lines; resource telemetry is written to its own lossy-permitted JSONL plane — never into decision traces (two-planes rule) — and the diff engine audits ledger-vs-certified-ceilings. Hard enforcement is delegated to the platform (cgroup v2 / OMLX gateway quotas); the proof engine dogfoods the sensor on itself. A LangGraph Hypothesis Generator → Micro-Experiment Loop (design→execute→evaluate→reflect, sandboxed replay, optional DeepAgents advisory pass) produces OSCAL assessment-plan + assessment-results (CA-7). FastAPI estate + per-agent dashboards; staleness-weighted cron/launchd monitor cycles.

Dependencies

langgraph, pydantic + pydantic-settings, networkx, sqlalchemy, fastapi, uvicorn, jinja2, typer, rich, pyyaml. Optional [llm] and [test] extras. 51 offline tests post-v2 restructure (unit, integration, determinism, sandbox-safety, sensor + DL-8), no LLM required.

CI/CD

Apache-2.0 since the v2.0.0 public release (RELEASE 2, supersedes v0.1); current v2.1.0. Docs grew ADR-001 (resource budgets), ROADMAP, RUNBOOK, CERTIFICATION-GUIDE. No CI workflows in-repo. uv sync; driftlab demo / driftlab dashboard (port 8321); pytest.

Entities and topics

• oscal-digital-twin-playground — shares the intended-vs-actual OSCAL drift idea, at design/config time rather than runtime
• oscal-agent-guardrails — design-time OSCAL policy vs DriftLab's runtime observation
• oscal-skills-guardrails — OSCAL-as-policy for admission; DriftLab is the runtime counterpart
• Tags: [oscal, compliance, langgraph, python, zero-trust, digital-twin, fastapi]