klieo-ops

Operational layer above klieo-core. Ships the primitives that turn a typed agent into a regulator-ready production deployment: supervisor (lifecycle + kill-switch), governor (capacity + rate-limit), gates (policy-as-code at the pre-effect boundary), escalation, worklog, and handoff.

Phase A (v0.2) ships supervisor + governor + gates plus cross-cutting (Redactor, Clock, TenantResolver, OpsRuntime builder, governed-egress helper, evidence verifier subset). Phase B (v0.3) adds escalation, worklog, four-eyes, handoff — gated on lighthouse-partner feedback.

Out of scope

• Agent decision quality / bias / accuracy (EU AI Act Art 10, 15 — user-owned)
• Approver IdP integration
• WORM physical storage
• Trusted-time anchor (system clock default; RFC 3161 adapter is opt-in)
• Cedar / OPA policy authoring
• UI for any review flow
• GDPR Art 17 crypto-shred (EpisodicMemory adapter concern)
• BaFin MaRisk AT 9 (outsourcing — organisational)
• PCI-DSS

See the mdBook chapter for the full design rationale: docs/book/src/ops/intro.md.

License

MIT