Skip to content

Policy Forge

Policy Forge: Agentic AI Governance Policy Forge (Forge) is an open-source framework for the "Agent-Native" era.

Code Video Cerebral Valley

Core trick

Machine-readable JSON/YAML policies translate into OPA rules and CI scanner checks so agent intents are validated before execution.

Tags

securitylegal

Description

Policy Forge: Agentic AI Governance Policy Forge (Forge) is an open-source framework for the "Agent-Native" era. It provides the Contextual Governance and machine-readable logic required for AI agents to operate autonomously and safely. Key Pillars for Agentic AI Machine Readability: Uses structured schemas (JSON/YAML) to eliminate "context drift" and reduce token waste for LLMs. Guardrailed Autonomy: Defines strict "Policy-as-Code" boundaries, ensuring agents stay within operational limits. Shared Truth Layer: Provides a consistent set of machine-readable constraints for multi-agent orchestration. Deterministic Logic: Replaces "black box" guessing with auditable, traceable logic trees. Security & Enforcement Forge bridges the gap between human policy and execution. It translates governance into machine-enforceable rules compatible with OPA and CI/CD scanners, allowing for automated "intent" validation.
policy-forge/forge★ 00 forksRustMITCreated Feb 10, 2026 · last push Oct 26, 2026

README excerpt

# FORGE 🦀

![FORGE](docs/Forge_logo_web.png)

Framework for OSCAL Risk & Governance Execution

[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=policy-forge_forge&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=policy-forge_forge)
[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=policy-forge_forge&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=policy-forge_forge)
[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=policy-forge_forge&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=policy-forge_forge)
[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=policy-forge_forge&metric=coverage)](https://sonarcloud.io/summary/new_code?id=policy-forge_forge)
[![Vulnerabilities](https://sonarcloud.io/api/project_badges/measure?project=policy-forge_forge&metric=vulnerabilities)](https://sonarcloud.io/summary/new_code?id=policy-forge_forge)

FORGE is a high-performance Rust CLI designed for the Agent-Native software era. It bridges the gap between human-written security policies and autonomous execution by converting Markdown governance into OSCAL (Open Security Controls Assessment Language)—the industry standard for machine-readable compliance.

## 🚀 Why FORGE?

Natural-language policy can be ambiguous to automation. FORGE converts explicit source documents into schema-validated OSCAL artifacts for later review and tooling.

Whet

Team