Turn AI governance claims into evidence you can rerun.

APERION Compass turns a governance framework into a local, executable assessment. Answer a plain-language questionnaire, point Compass at evidence you already export, and produce a scored report that checks the files with real cryptography instead of trusting a checkbox.

Get Compass on GitHub

See Smartflow

Part of the APERION Trust Fabric

Trust Fabric

Smartflow

Maestro

LOCAL ASSESSMENT LOOP

Assess. Verify. Score. Report.

ASSESS

Capture the current posture against the bundled EU AI Act and Singapore IMDA agentic governance controls.

VERIFY

Check audit-chain integrity, agent credentials, human-oversight records, action-risk coverage, and logging completeness from files already in your environment.

SCORE

Let objective evidence override a self-attested answer when the two conflict.

REPORT

Generate a self-contained HTML dashboard plus Markdown and JSON. Use CI exit codes to gate a minimum posture or fail on evidence-integrity problems.

LOCAL PROOF SURFACE

Evidence that can survive review.

APERION Compass terminal demo running a local governance assessment and producing a scored evidence report.

Compass verifies the evidence chain, scores the current posture, and produces a report locally.

ASSESSMENT RESULT

Posture scored · report ready

EVIDENCE CHECKS

What Compass checks before it scores.

Tamper-evident audit-chain verification

Offline Ed25519 agent-credential verification against a public key or JWKS

Approval coverage for irreversible tool calls

Override rate, approval latency, and outlier-reviewer signals

Required-field and logging-completeness statistics

Signed, offline-verifiable attestation bundles

Compass assesses. It does not enforce.

A passing Compass report says the answers and exported evidence looked good at a point in time. It cannot stop an unsafe action. It cannot prove that an export was complete or unfiltered. It is a preparation aid, not legal advice or a conformity assessment. Continuous control belongs in the runtime path.

Assessment and enforcement belong in different places.

COMPASS

Point-in-time assessment

Verifies exported credentials. Verifies an exported audit chain. Scores exported approvals. Runs locally from files.

SMARTFLOW

Continuous runtime enforcement

Issues and validates scoped credentials in the live path. Produces the tamper-evident evidence stream. Holds or blocks high-risk actions before execution. Runs inline in the customer-controlled environment.