Topics / #governance

Governance projects on GitHub

Governance frameworks and toolkits for AI systems and organizations

As of , the most-starred Governance projects on GitHub are openworker (18.6K stars), OpenMetadata (15.5K stars) and EIPs (14K stars). GitHub.Locker tracks 19 Governance repositories with 101.2K stars combined. The fastest-growing on October 17 was ai-agent-handbook, with +218 stars in a day.

19Projects
101.2KStars in total
+298Stars in a day
Browse in the catalog →github.com/topics/governance ↗

Hot right now

Most stars gained in a day · Oct 17

+218

ai-agent-handbook

aliyun/ai-agent-handbook · ★ 1.8K

An open-source Alibaba Cloud whitepaper (handbook) distilling hands-on experience building enterprise-grade AI agents across their full lifecycle: architecture, building, running, governance, and tuning. It is maintained as a living open project rather than a one-off release.

+33

AISafetyHot-Hub

wuyoscar/AISafetyHot-Hub · ★ 1.5K

AI Safety HOT Hub is a daily-updated feed of curated AI safety news and research papers (attacks/jailbreaks, defenses, alignment evals, incidents, multi-agent risks, governance), with Markdown/BibTeX/JSON exports and a public MCP endpoint so an AI agent can query news, papers, events and daily briefings directly.

+16

openworker

andrewyng/openworker · ★ 18.6K

OpenWorker is an open-source AI coworker that lives on your desktop and delivers finished work instead of just chat: reviewed code with fixes, polished documents, Slack replies with real numbers, triaged inboxes.

+14

omnigent

omnigent-ai/omnigent · ★ 10.9K

Omnigent is an open-source meta-harness for AI agents: a common orchestration layer over coding agents like Claude Code, Codex, Cursor, OpenCode, Hermes, and Pi, with policy enforcement, sandboxing, and real-time collaboration from any device.

The all-time top

19 projects · by stars

  1. #1 · andrewyng/openworker

    openworker

    OpenWorker is an open-source AI coworker that lives on your desktop and delivers finished work instead of just chat: reviewed code with fixes, polished documents, Slack replies with real numbers, triaged inboxes.

    18.6K
  2. #2 · open-metadata/OpenMetadata

    OpenMetadata

    OpenMetadata is an open platform that unifies technical metadata, lineage, data quality, ownership and business glossaries into one knowledge graph so both humans and AI agents can discover, trust and reuse context about enterprise data.

    15.5K
  3. #3 · ethereum/EIPs

    EIPs

    It is the official repository of Ethereum Improvement Proposals (EIPs) — technical standards documents that specify improvements to Ethereum itself and conventions built upon it.

    14K
  1. 4

    bips

    11Kbitcoin/bips · Wikitext

    This is the official repository of Bitcoin Improvement Proposals (BIPs) — design documents and standards for changing and extending Bitcoin, from consensus rules to wallet formats. The repo serves as both the publication medium and the permanent archive for these proposals.

  2. 5

    omnigent

    10.9Komnigent-ai/omnigent · Python

    Omnigent is an open-source meta-harness for AI agents: a common orchestration layer over coding agents like Claude Code, Codex, Cursor, OpenCode, Hermes, and Pi, with policy enforcement, sandboxing, and real-time collaboration from any device.

  3. 6

    agent-governance-toolkit

    6.4Kmicrosoft/agent-governance-toolkit · Python

    A toolkit from Microsoft that governs autonomous AI agents in production: it enforces policies on tool calls, verifies agent identity, sandboxes execution, and provides SRE controls like kill switches and SLO monitoring. It covers all 10 of the OWASP Agentic Top 10 risks.

  4. 7

    dmca

    6.4Kgithub/dmca · DIGITAL Command Language

    This is GitHub's public archive of DMCA takedown notices and counter-notices it has received, posted largely as-is to document their potential effect on online speech.

  5. 8

    vouch

    5.1Kmitchellh/vouch · Nushell

    Vouch is a community trust management system where trusted maintainers explicitly vouch for or denounce contributors, and only vouched people are allowed to interact with certain parts of a project, like opening issues or pull requests.

  6. 9

    rfcs

    4.2Kastrid-runtime/rfcs · Python

    This repository holds RFCs (design proposals) that define any substantial change to the contract between Astrid's kernel and user-space, covering the host ABI, IPC protocol, capability model, manifest schema, VFS semantics, capsule interface standards, and the SDK's public API.

  7. 10

    apm

    4Kmicrosoft/apm · Python

    APM (Agent Package Manager) is an open-source dependency manager for AI coding agents' context — like package.json or Cargo.toml, but for agent configuration such as instructions, skills, prompts, and MCP servers.

  8. 11

    ai-agent-handbook

    1.8Kaliyun/ai-agent-handbook · JavaScript

    An open-source Alibaba Cloud whitepaper (handbook) distilling hands-on experience building enterprise-grade AI agents across their full lifecycle: architecture, building, running, governance, and tuning. It is maintained as a living open project rather than a one-off release.

  9. 12

    AISafetyHot-Hub

    1.5Kwuyoscar/AISafetyHot-Hub · TeX

    AI Safety HOT Hub is a daily-updated feed of curated AI safety news and research papers (attacks/jailbreaks, defenses, alignment evals, incidents, multi-agent risks, governance), with Markdown/BibTeX/JSON exports and a public MCP endpoint so an AI agent can query news, papers, events and daily briefings directly.

  10. 13

    interop

    528web-platform-tests/interop · JavaScript

    An ongoing effort by browser makers to make the web more interoperable: each year they pick key focus areas and publicly score how well browsers implement them. It is part of the web-platform-tests project.

  11. 14

    privacy-preserving-control-plane

    425gbenletoluwase/privacy-preserving-control-plane · Java

    A Java control plane that bundles four coupled mechanisms for production ML pipelines: forecast-driven autoscaling, zero-shot PII redaction at the point of processing, governed model promotion, and drift/anomaly detection.

  12. 15

    busbar

    198GetBusbar/busbar · Rust

    Busbar is a self-hosted execution control plane that sits between AI applications and the AI providers they call, letting operators verify, govern, route, and record every model request, MCP tool call, and A2A agent delegation before it reaches its destination.

  13. 16

    GDecay

    196shivanipoddariiith/GDecay · Python

    GrantDecay is a CLI tool that finds privilege that was granted but never used. It compares an entitlement export (who holds which permissions) against an access log export covering a time window, then reports unused permissions, narrowable roles, dormant principals, and ungranted use.

  14. 17

    geiger

    166Atomburstofficial/geiger · JavaScript

    Geiger is a read-only scanner for AI tooling: one command inventories every AI agent, harness, MCP server, plugin and AI extension on a machine and says in plain language what each one can touch.

  15. 18

    GrantDecay

    127rojiloro/GrantDecay · Python

    GrantDecay is a CLI that compares what each principal was granted against what it actually used over an observation window, and reports unused permissions, narrowable roles, dormant principals, and ungranted use.

  16. 19

    transition-state-zero-trust-toolkit

    114theycallmehassan1/transition-state-zero-trust-toolkit

    A set of open, vendor-neutral worksheets, checklists, test records and pilot artifacts for governing the messy middle period of a zero trust migration, built to complement NIST SP 1800-35.

Often tagged together