How ajeetraina/labspace-ai-governance works
This repository is a hands-on Docker AI Governance lab, not a general-purpose governance service. Its principal workflow guides a developer from setup and policy authoring through sandbox enforcement, then into MCP governance and monitoring. The README documents the policy flow and the lab’s major demos; the sampled Go backend implements event collection and dashboard endpoints. Other lab sections and integrations are represented from the README and file tree, so their internal wiring is not inferred.
Main entry points: 02-the-policy-model.md Policy model · main.go Event collector · 06-mcp-hands-on.md MCP hands-on · 00-setup.md Setup
Components 21
Lab walkthrough
- Setup
labspace/00-setup.md - Policy model
labspace/02-the-policy-model.md
Policy control
- Manual authoring
labspace/assets/setup-policies.sh - API authoring
labspace/11-governance-api.md - Governance API
- Org policies
Sandbox demos
- Network enforcement
labspace/03-network-demo.md - Filesystem enforcement
labspace/04-filesystem-demo.md - Docker sandbox
MCP and observability
- MCP hands-on
labspace/06-mcp-hands-on.md - MCP Gateway config
labspace/assets/mcp-gateway-compose.yaml - Observability lab
labspace/08-observability.md - Policy monitoring
labspace/09-monitoring-policies.md - Audit logging
labspace/10-audit-logging.md - Event collector
labspace/kits/observability/backend/main.go - Live dashboard
labspace/kits/observability/backend/static/index.html - Audit samples
project/audit/sample-events.jsonl
Hands-on extensions
- Product catalog
labspace/07-product-catalog.md - Agent example
project/horror-story-agent/README.md - Sandbox kits
labspace/kits/01-intro.md
Other components
- Developer
Connections 18
- Developer → Setup: starts with
README.md - Setup → Policy model: continues to
README.md - Policy model → Manual authoring: offers UI setup
README.md - Policy model → API authoring: offers API setup
README.md - API authoring → Governance API: drives over HTTP
README.md - Manual authoring → Org policies: writes policies
README.md - Governance API → Org policies: writes policies
README.md - Org policies → Docker sandbox: flows to
README.md - Network enforcement → Docker sandbox: tests network rules
README.md - Filesystem enforcement → Docker sandbox: tests mount rules
README.md - MCP hands-on → MCP Gateway config: configures access
README.md - MCP hands-on → Docker sandbox: registers servers
README.md - Observability lab → Event collector: inspects events
README.md - Policy monitoring → Event collector: watches decisions
README.md - Audit logging → Audit samples: traces events
README.md - Event collector → Live dashboard: serves dashboard
- Product catalog → Docker sandbox: runs contained agent
README.md - Developer → Sandbox kits: explores kits
README.md