AI Governance
ai-bom
The AI Bill of Materials for your GitHub org. Every agent, MCP server, and model dependency in one shareable report.
How it works
Deterministic repo scan, zero AI calls: MCP configs (.mcp.json, Cursor, VS Code, Gemini), CLAUDE.md/AGENTS.md/rules, Claude Code skills + hooks, AI CI workflows, model SDKs across six manifest formats. JSON export. Team scans the whole org via fine-grained PAT, rescans weekly, emails a drift diff.
Other tools in AI Governance
From the operator
Basenull AI Ops ships purpose-built tools for the IT executive whose org is already running AI in production. Governance, supply-chain security, agent ops, observability — the operational layer that usually arrives after the first incident.