Skip to main content
TealTiger is a runtime AI governance SDK for LLM applications and autonomous agents. It provides deterministic policy enforcement across 10 governance domains — embedded directly into application code, with no infrastructure or SaaS dependencies. Governance teams define policy. Developers consume a locked-down SDK. No LLM in the decision path. Same input + same policy = same decision, every time.
Current Version: v1.3.0 — Autonomous Agent Governance
License: Apache 2.0
SDKs: TypeScript (npm) + Python (PyPI) — full parity
Providers: 12 LLM providers + 3 platform adapters

Why TealTiger

10 Governance Domains

Security, Cost, Reliability, Memory, Registry, Evidence, Identity, Workflow, Temporal, Drift — each with enforceable controls and named reason codes.

Zero Infrastructure

SDK-only architecture. No servers, control planes, or external services. Governance runs inside your application boundary.

Deterministic Decisions

No LLM in the governance path. Typed Decision contracts with explicit actions, automation levels, and cryptographic evidence.

Separation of Duties

Governance teams author signed policy bundles. Developers integrate the SDK. Application code cannot bypass or weaken controls.

Get Started

Quickstart

Get governance running in 5 minutes — FREEZE rules, automation levels, and policy evaluation.

Your First Policy

Write, test, and deploy your first governance policy.

OWASP Policy Pack

Deploy zero-config governance covering all 10 OWASP Agentic Security risks.

Governance at Scale

Enterprise operating model — governance teams define, developers consume.

What’s New in v1.3

FeatureWhat It Does
FREEZE RulesImmutable safety controls that cannot be bypassed — the circuit breaker for governance
Non-Human Identity (NHI)Agent lifecycle management, scope enforcement, Zero Standing Privilege
TealProofCryptographic governance receipts — Merkle trees + RFC 3161 timestamping
TealFlowDeclarative YAML governance workflows with org-level inheritance
TealClassifierLocal ML inference (ONNX) for content classification — no data exfiltration
Platform AdaptersAWS Bedrock Agents, AWS AgentCore, Azure AI Agent Service
OWASP Policy PackPre-built zero-config policies for all 10 ASI risks
SOC/IR PipelineSIEM export (JSON/CEF/LEEF), OpenTelemetry spans, response hooks
Anti-TamperSigned bundles, forbidden config keys, workload identity binding

v1.3.0 Release Details

Full bundle manifest, migration guide, and performance benchmarks

10 Governance Domains

DomainControl IDRisk Coverage
SecuritySECSecret leakage, PII exposure, prompt injection, content policy violations
CostCOSTBudget overrun, cost anomaly, reasoning-token abuse
ReliabilityRELCascading failure, retry exhaustion, provider degradation
MemoryMEMData provenance gaps, injection via memory, exfiltration
RegistryREGUnapproved model/tool usage, MCP definition drift
EvidenceEVIDAudit gap, non-repudiation failure, evidence tampering
IdentityNHIExcessive privilege, scope creep, missing attestation
WorkflowFLOWPolicy bypass via team override, missing approval gates
TemporalTEMPSession hijack, off-hours execution, cooldown bypass
DriftDRIFTBehavioral deviation, model regression, tool mutation

Supported Providers (12)

OpenAI

GPT-4o, GPT-4, o1, o3

Anthropic

Claude 3.5, Claude 3

Google Gemini

Gemini 1.5 Pro/Flash

AWS Bedrock

Claude, Titan, Llama, Command

Azure OpenAI

GPT-4o, GPT-4

Cohere

Command R+, Embed

Mistral AI

Large, Medium, Small

+ 5 more

Additional providers in v1.3

Platform Adapters

  • AWS Bedrock Agents — Guardrail adapter for action group governance
  • AWS AgentCore — Lifecycle governance hooks (onCreate, onExecute, onTool, onTerminate)
  • Azure AI Agent Service — Tool-call pipeline middleware

Explore the Docs

Core Concepts

How decisions are evaluated and enforced

API Reference

TypeScript and Python SDK APIs

Cookbook

Real-world examples and patterns

Policy Library

Pre-built policies by governance domain

Deployment

Docker, Kubernetes, Helm, Terraform, serverless

Compliance & GRC

Enterprise governance, compliance mappings, audit evidence

Open Source

TealTiger is open source under the Apache 2.0 license. The SDK will always remain free and fully functional without any platform dependency.

GitHub

Star the project, explore the codebase, contribute

npm / PyPI

npm install tealtiger or pip install tealtiger