Question 1

How is AI Governor different from LangSmith or Portkey?

Accepted Answer

LangSmith and Portkey are observability and routing tools — they watch and route, but cannot block or require approval. AI Governor is a control plane: it enforces spend caps atomically before any LLM call, holds high-risk actions for human approval, and writes every decision into a WORM hash-chained audit log that proves what happened.

Question 2

Do I need to re-write my agents?

Accepted Answer

No. AI Governor is an OpenAI-compatible proxy. Change one line: your base_url. All model names, prompts, parameters, and tool calls remain exactly the same. The full governance pipeline activates transparently from your first call.

Question 3

What does 'fail-closed' mean?

Accepted Answer

If AI Governor itself encounters an error — network fault, database timeout, or internal exception — it denies the request by default rather than passing it through. The agent gets an error; it never silently bypasses governance.

Question 4

How does the approval workflow operate without blocking?

Accepted Answer

When a high-risk action is held, AI Governor returns HTTP 202 immediately. The caller is not blocked; they poll for the decision. The approver receives a notification with full context — agent identity, action, risk score, and cost — and approves or rejects. The decision and its timestamp are permanently sealed in the audit chain.

Question 5

Can I use AI Governor with CrewAI, AutoGen, or LangChain?

Accepted Answer

Yes. AI Governor works with any framework that makes OpenAI-compatible HTTP calls, including LangChain, CrewAI, AutoGen, LlamaIndex, Vercel AI SDK, n8n, Flowise, and any custom agent. For MCP-based agents, the MCP gateway governs every tool call through the same pipeline.

Question 6

Is the audit log really tamper-evident?

Accepted Answer

Yes. Every event is SHA-256 hash-chained to the previous record. Any modification — including deletion — breaks the chain, making tampering immediately detectable. The chain can be verified independently without authentication, and is written to append-only (WORM) storage.

Question 7

What compliance frameworks does AI Governor support?

Accepted Answer

AI Governor produces evidence packs mapped to EU AI Act 2024, NIST AI RMF, ISO 42001:2023, and OWASP LLM Top 10. The audit log, approval records, risk scores, and policy decisions are all exportable for independent auditor review — evidence artifacts, not a certification claim.