How cyberstrategyinstitute/ai-safe2-framework works
AI SAFE² is a governance framework with a Python CLI and security tools for assessing agentic systems; NEXUS is its first-party runtime-enforcement implementation. A typical assessment begins with a developer invoking a scan or assessment, produces findings and evidence, and may inform human-reviewed AISM decisions and reports. The repository also includes MCP server security tools and NEXUS identity, agent/tool, and payment capabilities. Sampled source confirms scanner internals and cautious evidence ingestion; wiring among several listed subsystems is not shown, so those links are omitted.
Main entry points: scanner.py Static Scanner · safe2/cli.py SAFE² CLI · scanner/cli.py Scanner CLI · ingest.py AISM Ingestion
Components 22
Assessment Tools
- Static Scanner
scanner/scanner.py - Detection Rules
scanner/rules - Scanner CLI
scanner/cli.py
SAFE² Governance
- SAFE² CLI
safe2/cli.py - Assessment Commands
safe2/commands - Evidence Capture
safe2/evidence - Report Attestation
safe2/evidence/report_auth.py - AISM Ingestion
safe2/aism/ingest.py - Challenge Lab
safe2/challenge - Report Formats
safe2/reporting/formats.py
MCP Security
- MCP Server
skills/mcp/src/mcp_server/app.py - MCP Authentication
skills/mcp/src/mcp_server/auth.py - MCP Tools
skills/mcp/src/mcp_server/tools - MCP Source Scan
aisafe2_mcp_tools/scan - MCP Posture Score
aisafe2_mcp_tools/score - MCP Wrapper
aisafe2_mcp_tools/wrap
NEXUS Runtime
- NEXUS Gateway
NEXUS/docker/gateway/gateway.py - MCP Adapter
NEXUS/adapters/mcp/adapter.py - NEXUS SDK
NEXUS/sdk/python/nexus_sdk - Payment Authority
NEXUS/sdk/python/nexus_sdk/payments/authority.py - Compliance Score
NEXUS/compliance/scoring/nexus-score.py
Other components
- Developer
Connections 7
- Developer → Scanner CLI: invokes scan
- Developer → SAFE² CLI: invokes assessment
- Static Scanner → Detection Rules: applies rules
- Static Scanner → Scanner CLI: returns findings
- SAFE² CLI → Assessment Commands: dispatches commands
- AISM Ingestion → Challenge Lab: verifies challenge evidence
- NEXUS Gateway → MCP Adapter: optional MCP integration