Skip to content

Add MOSS - cryptographic signing for AI agent compliance - #29

Open
Lechatdiabolique wants to merge 2 commits into
GRC-Engineer:mainfrom
Lechatdiabolique:add-moss
Open

Add MOSS - cryptographic signing for AI agent compliance#29
Lechatdiabolique wants to merge 2 commits into
GRC-Engineer:mainfrom
Lechatdiabolique:add-moss

Conversation

@Lechatdiabolique

@Lechatdiabolique Lechatdiabolique commented Feb 19, 2026

Copy link
Copy Markdown

What is MOSS?

MOSS (Message-Origin Signing System) provides cryptographic signing for AI agent outputs using ML-DSA-44 post-quantum signatures.

Why it matters for GRC

As organizations deploy AI agents for sensitive operations, GRC teams need:

  • Tamper-proof audit trails: Every agent action is cryptographically signed
  • Non-repudiation: Prove which agent did what
  • Policy enforcement: Block risky actions before they execute
  • Regulatory compliance: Evidence for SOX, GDPR, SOC2, and other frameworks
  • Post-quantum security: ML-DSA-44 signatures remain secure against quantum computers

Features

  • ML-DSA-44 post-quantum signatures (NIST FIPS 204)
  • Offline verification without API calls
  • Policy engine with allow/block/hold rules
  • Dashboard for audit log review
  • Framework integrations: LangChain, LangGraph, CrewAI, AutoGen

Links

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants