From runtime decision to framework control — one rail.

Out-of-the-box coverage · live

249 frameworks, six categories, bijection-checked.

Every framework below has a per-requirement bijection map to the KYE™ runtime artefacts that enforce it. Pages regenerate from coverage-registry.json — the registry is the source of truth, the badge grid is the index.

Click any badge for the per-requirement bijection map. Coverage refreshes from the registry on every deploy — live dashboard →

Compliance frameworks

From AI governance to sector-grade authority control.

KYE Protocol™ provides a protocol-level evidence layer for regulated AI and automation. Use KYE™ Compliance Mapping Rail™ profiles to bind runtime controls and signed evidence packs to the specific obligations every framework imposes. KYE™ does not replace these frameworks — it produces the evidence they consume.

KYE™ produces evidence; certifications remain the customer’s. KYE™ does not replace legal counsel, regulatory filings, conformity assessments, or notified-body involvement.

Conformance & Certification

Trust, but verify.

KYE™ implementations can be tested against open conformance suites and verified through the public KYE™ Certification Registry. Earn badges that prove protocol alignment across entity authority, state, delegation, decisions, audit trails, and evidence packs — with annual renewal, signed records, and public-key verification.

Govern the governance layer. KYE™ Self-Audit & Attestation Profile lets implementations continuously verify their own engines, decisions, audit trails, and Evidence Packs™. Five checks: Engine Health, Decision Replay, Audit-Trail Integrity, Evidence Completeness, Policy Coverage.

Conformance maturity ladder

Five rungs, contiguous — from schema-valid to reality-coupled.

The KYE™ Conformance Maturity Levels (L1–L5) are the procurement-facing depth gradient that sits on top of the binary KYE™ Conformance Pack™. The pack answers “does the fixed fixture set pass?”; the ladder answers “how deep does enforcement reach at this deployment?” The rungs are contiguous — a deployment claims a level only when every capability of that level and every level below it is satisfied. No level-skipping.

L1 · Schema-valid

L1

Every emitted artefact validates against its locked KYE™ schema and every identifier conforms to the KYE™ ID format.

L2 · Entity + delegation captured

L2

Entity resolution and the full delegation chain are recorded in the evidence layer, not reconstructed later.

L3 · Admissibility enforced

L3

Action Admissibility™ is gated at runtime before the action runs — fail-closed when the decision point is unreachable.

L4 · Finality replayable

L4

Authority Finality™ and the Replay-Proof™ are HSM-signed and derivable from the published public keys alone — banking-grade.

L5 · Reality-coupling + contestability + revocation

L5

Full cascading revocation, delegated auditability + contestability surfaces, and reality-coupling drift wired into runtime effect.

L4 is the rung a Tier-1 bank’s GRC team asks for first: signed, sealed finality whose proof recomputes from public keys with zero trust in the runtime that produced it.

Try it live

Verify a sample evidence pack in your browser.

Below is the Evidence Pack™ Viewer that ships at widgets.html. Verify the signature offline, replay the bound decision, walk the audit chain, project to SOC 2 / ISO 27001 / EU AI Act / PSD3 / DORA. No signup, no install.

Trust & assurance

Built to be handed to your audit team on day one.

Open spec. Reference implementation. Conformance fixture pack. Cryptographic proof bundles. Nine-framework control mapping. RFC 7807 error envelope. Quantitative SLA tiers. The artefacts a Tier-1 bank’s GRC team needs are in the repo, not in a sales deck.

Endpoints

87

Routed in the reference Gateway. Every state-changing endpoint accepts an Idempotency-Key and emits a correlated audit event.

Profiles · normative

15

Core, Gateway, Federation, Credentials, Attestation, Signals, Transparency, Conformance, Treasury, Custody, Healthcare, Telemetry, Capability, Recovery, Payments — plus 3 payment overlays.

Conformance fixtures

37

Each fixture is a deterministic black-box test the auditor replays against any conformant Gateway. conformance-report.json emits machine-readable evidence.

Control mappings

266

SOC 2 · ISO 27001:2022 · PCI DSS 4.0 · PSD2/PSD3 · DORA · NIS2 · EU AI Act · NIST 800-207 · HIPAA. Each row cites the KYE™ artefact + the Gateway endpoint that produces it.

SLA tiers

Tier-1 Bank (p99 ≤ 50 ms, 1k rps), Tier-2 Mid-market, Tier-3 Reference. Quantitative claims backed by signed conformance reports.

Tests · all green

220+

KYE™ Reference Gateway™ · ePDP · PEP · TS / Python / Go SDKs · webhook vectors · schema validations · 22 OPA Rego + Cerbos policy fixtures at parity.

Mapped to SOC 2 · ISO 27001:2022 · PCI DSS 4.0 · PSD2/PSD3 · DORA · NIS2 · EU AI Act · NIST 800-207 · HIPAA

KYE™ produces evidence; certifications are the customer’s. The repo ships a complete control-mapping document. For each KYE™ artefact (entity record, delegation, scope, credential, attestation, audit event, proof bundle, signal, transparency receipt, capability grant, recovery proof, break-glass grant, compromise report, state transition) it lists which control is satisfied and the exact endpoint to extract it.

Ready to see your AI agents flagged?

Start in shadow mode. We’ll deliver your first Evidence Pack™ in 4–8 weeks.

Canonical KYE™ surfaces referenced on this page: Delegated Auditability · KYE Protocol™.