oscal cac playgd.stub

---

id: oscal-cac-playgd name: OSCAL Compliance-as-Code Playground repo_path: ~/Documents/sw30labs/repos/oscal-cac-playgd remote_url: https://github.com/sw30labs/oscal-cac-playgd.git primary_language: Python framework: LangGraph ingested: 2026-04-11 last_commit_date: 2026-04-11 category: oscal-compliance stacks: [oscal, langgraph, compliance]

OSCAL Compliance-as-Code Playground

Purpose

CLI treating OSCAL as compliance-as-code: explain files, suggest remediation snippets, and review diffs with LLM. Uses real NIST OSCAL JSON as source of truth for control definitions and requirements.

Architecture

5 CLI commands using Typer + Rich CLI framework:

1. explain — describe OSCAL file contents with LLM
2. suggest-remediation — propose code/config fixes for failed controls
3. review-diff — PR-style diff analysis with risk assessment (increase/decrease/neutral) and recommendations
4. list-controls — enumerate controls in 800-53 catalog
5. show-control — display control details with implementation guidance

LangChain + LangGraph for LLM analysis pipelines. Loads NIST 800-53 Rev 5 catalog from usnistgov/oscal-content submodule as source of truth.

Dependencies

• langchain
• langchain-openai
• langchain-community
• langgraph
• typer
• rich
• python-dotenv

CI/CD

GitHub Actions ci.yml

Tags

python langgraph langchain oscal nist security compliance cli