Sentinel – Deterministic WASM Auditor for EU AI Act Compliance
EU AI Act auditor as a GitHub Action—promise is strong, but implementation details are vague.
MCP server for Applied Operations Protocols — agent-executable compliance documentation for the Colorado AI Act
AI agents can now self-audit compliance—solves the hallucination problem for legal requirements.
AI teams deploying high-risk systems, compliance officers, GRC platforms
Ironclad (contract AI) · LexisNexis · Domo (GRC platform)
The problem: organizations deploying AI in hiring, lending, insurance, or healthcare decisions need specific documentation — risk management policies, impact assessments, consumer notifications, bias testing docs, and appeal mechanisms. Most teams either pay $50K+ for a GRC platform, hire a law firm at $500/hr, or wing it.
What I built: compliance protocols that are both human-readable (PDF) and agent-readable (structured JSON via MCP/CLI/API). Your AI assistant can check if you're a deployer, pull protocol schemas, and help you implement them.
Tools available via MCP: - colorado_ai_act_check — are you a deployer? - list_protocols — browse by vertical - get_protocol_schema — structured format for agent implementation - assess_compliance — gap analysis
Install: npx -y aop-mcp-server
The Colorado AI Act is the first state-level AI governance law with teeth ($20K/violation, AG enforcement). More states are coming.
EU AI Act auditor as a GitHub Action—promise is strong, but implementation details are vague.
Lighthouse-style certification for MCP servers with trivy supply chain scanning.
Local document search for AI agents, but RAG is crowded—needs stronger positioning.
I like that it makes schema-first pipelines the main contract: define tasks once and swap in Outlines, LangChain, a GLiNER model or a local transformer without rewriting glue code. It’s primarily an orchestration/wiring layer with nice extras (conditional execution, built-in eval, distillation), so its impact will depend on the depth of integrations, real-world examples, and performance comparisons.
CC0 data bundles with Annex IV reports for EU AI Act compliance before August 2026.
Embeds MCP tools directly into existing routes, skipping separate server boilerplate.