GH-600 Governance & Guardrails Lab

Runnable guardrails for autonomous agents, by Certy. Maps to GH-600 domain 6.0 - Governance, Guardrails & Compliance.

Deterministic and local: no LLM call, no API key. Runs in CI.

Run it

npm install
npm test
npm run typecheck

What is here

• src/guardrails/ - input filter, output redactor, policy engine, approval gate, audit logger.
• src/policies/ - allowed tools, restricted files, PII redaction, approval rules.
• src/examples/ - safe, blocked, and approval-required sample tasks.
• docs/ - governance model, guardrail types, approval gates, audit logging, a compliance checklist.

How to use as a lab

Click Use this template, make it public, clone it, and work through labs/. Each guardrail maps to a real risk: injection, over-broad tool use, restricted-file access, secret leakage, and unreviewed high-impact change.

Links

• Free GH-600 course and mock exam: https://certy.pro
• Course content: https://github.com/CertyPro/certy-gh600-course-content

Licence

MIT.