DSG Governance Control Plane

🔐 DSG ONE: Control Plane for AI Operations# Source of Truth

The source of truth is the current. implementation in this repository.

All capability statements, architecture descriptions, feature status, security claims, compliance mappings, and operational behavior must be derived from verifiable evidence in the repository, including:

• Source code
• Tests and test results
• CI/CD workflows and execution results
• Runtime evidence
• Audit artifacts
• Deployment artifacts
• Production configuration
• Version-controlled documentation that reflects the current implementation

If any historical document, planning note, roadmap, draft, TODO, or archived documentation conflicts with the current implementation, the implementation takes precedence.

Deprecated documents, including historical "Do not claim yet" notes or superseded planning documents, must not be treated as the source of truth.

A capability may be documented only when it is supported by the current repository state and its corresponding evidence.

When uncertainty exists, verify against the implementation and evidence before making any claim.

💡 Don't trust AI. Verify every decision.

Monitor every action. Verify before execution. Audit and replay proof. Optimize costs and risk.

▶️ Try DSG ONE Free | 📊 View Benchmarks | Live: https://tdealer01-crypto-dsg-control-plane.vercel.app

One-Sentence Pitch: Write a policy once ("Only allow transfers under ฿50K"). DSG ONE gates every AI decision against it, proves why it decided, and exports tamper-proof evidence for audits.

🧩 Claude Code Integration (Codex Plugin)

The DSG Control Plane is available as a Codex plugin for Claude Code, enabling AI-native governance directly within the Claude ecosystem.

Install the Plugin

# Add the repository
/plugin marketplace add tdealer01-crypto/tdealer01-crypto-dsg-control-plane

# Install the plugin
/plugin install dsg-platform@tdealer01-crypto-dsg-control-plane

Available Skills

• DSG Action Gate - Gate AI actions through deterministic policy evaluation

  • Endpoint: POST /api/dsg/v1/gates/evaluate
  • Input: action, context, risk_level, policy_version
  • Output: decision (PASS/REVIEW/BLOCK) with proof hash

• DSG Compliance Evidence - Generate compliance evidence packs with audit trails

  • Endpoint: POST /api/compliance-evidence-pack
  • Input: execution_id, include_proofs, include_audit_trail
  • Output: evidence with L1-L5 compliance matrix

• DSG Formal Proof - Validate policy constraints using Z3 SMT solver

  • Endpoint: POST /api/dsg/v1/proofs/prove
  • Input: policy_constraint, execution_context, solver
  • Output: proof with confidence level

Features

✅ Deterministic action gating with formal constraints
✅ Compliance evidence collection (L1-L5 CCVS levels)
✅ Formal proof validation for policy constraints
✅ Immutable audit trails for all governance decisions
✅ Evidence-ready execution records for audit compliance

For complete plugin documentation, see .codex-plugin/README.md

Independent Verification

Do not trust this README alone.

Every major capability claim must be reproducible from this repository. The implementation is the source of truth.

How to Verify

1. Clone this repository
2. Run the verification commands below
3. Inspect the generated evidence
4. Verify the implementation matches the claims

If evidence cannot be reproduced locally, the claim is unverified.

Verification Commands

Run these commands to verify every major claim in this README:

Core Quality Checks

# TypeScript compilation
npm run typecheck

# Linting
npm run lint

# Production build
npm run build

# Unit tests (4026 passing)
npm run test

# Coverage report (89% coverage claimed)
npm run test:coverage

Deterministic & Formal Verification

# Verify deterministic module (same input → same output)
npm run verify:deterministic

# Policy verification (Z3 formal proof)
npm run verify:policy

# Local HPC verification (Z3 with Docker)
npm run verify:policy:hpc:local

# Parallel CCVS evidence pipeline (L1-L5)
npm run ccvs:hpc-parallel

Evidence & Compliance

# Generate CCVS evidence artifacts
npm run ccvs:emit