Cool project — the passkey-based approval flow and per-org budget enforcement are really well thought out. Looks like a solid governance platform for enterprise AI operations.

I'm building AgentWard (https://github.com/agentward-ai/agentward), which comes at the problem from a different angle. The core difference is where enforcement happens:

GovernsAI looks like a centralized API service. The agent/SDK calls a precheck endpoint before acting, and the platform returns allow/deny/redact. Is that correct? This works great when you control the integration code and can guarantee every tool call goes through the precheck.

AgentWard is an inline proxy: It sits directly on the wire between the agent and its tools (MCP servers, HTTP gateways). The agent literally cannot make a tool call without it going through the policy engine first. There's no precheck API to forget to call, no client-side integration to get wrong. The enforcement is structural, not cooperative.

A few other differences:

1/ Zero infrastructure: pip install agentward && agentward scan gives you a permission map in seconds. No database, no Keycloak, no platform to deploy. 2/ MCP-native: Parses JSON-RPC 2.0 at the protocol level — intercepts tools/call, enumerates tools from live servers, auto-discovers configs from Claude Desktop/Cursor/Windsurf/VS Code. 3/ Static analysis + runtime: agentward scan tells you what each tool can access (data, network, credentials, chaining risks) before you even write a policy. Then agentward inspect enforces that policy at runtime. ->I think this is a HUGE value add. 4/ Skill chaining detection: Analyzes and blocks unauthorized tool-to-tool invocation chains (e.g. email content triggering a browser tool → code execution).

Honestly, I think these are complementary more than competitive — GovernsAI governs the organizational plane (who, how much, what data), AgentWard governs the execution plane (which tool calls happen, with what arguments, through what protocol). Different layers of the same governance stack.

If anyone wants to try it: "pip install agentward && agentward scan" — takes about 5 seconds and shows you exactly what every MCP server on your machine can access && also puts a safety wrapper for runtime checks.