klieo-ops

Operational layer above klieo-core. Ships the primitives that turn a typed agent into a regulator-ready production deployment: supervisor (lifecycle + kill-switch), governor (capacity + rate-limit), gates (policy-as-code at the pre-effect boundary), escalation, worklog, four-eyes approval, and handoff.

v0.2 shipped supervisor + governor + gates plus cross-cutting (Redactor, Clock, TenantResolver, OpsRuntime builder, governed-egress helper, evidence verifier subset). v0.3 (Phase B) adds escalation, worklog, four-eyes, and handoff.

Out of scope

• Agent decision quality / bias / accuracy (EU AI Act Art 10, 15 — user-owned)
• Approver IdP integration
• WORM physical storage
• Trusted-time anchor (system clock default; RFC 3161 adapter is opt-in)
• Cedar / OPA policy authoring
• UI for any review flow (the framework ships reference channel adapters; operators build their own approval portal)
• GDPR Art 17 crypto-shred (EpisodicMemory adapter concern)
• BaFin MaRisk AT 9 (outsourcing — organisational, not framework)
• PCI-DSS
• Hardware-backed signing (HSM / KMS) for handoff envelopes and chain signatures — SignerProvider-shaped follow-up
• Source-identity trust registry for handoff envelope verification — receivers wire their own trusted-key resolution today
• Multi-deployment Merkle prefix proof transfer

See the mdBook chapter for the full design rationale: docs/book/src/ops/intro.md.

License

MIT