One endpoint that enforces your policy and writes the evidence
Point your application at /api/v1/route instead of the model provider. Every call is evaluated against your policy before anything leaves the perimeter, and every decision — allow, redact, reroute, hold, block — is appended to a hash-chained log you can hand to an auditor, a regulator, or a customer's security review.
Try it
Request
gh_demo_000000… — 20 requests a minute, scoped to Demo Bank, N.A.That bucket and that tenant’s monthly budget are shared by everyone on this page, and every send is written to the audit chain against Demo Bank rather than against you. A
429 here means the page is busy, not that you have run out.Decision
Nothing sent yet. Every request is evaluated against the policy before any provider is contacted, and every decision is appended to the hash-chained audit log.
Decision order
The declared use is checked against the policy first. A prohibited use is blocked before any content is inspected.
Detectors run over the prompt. What was found is logged by category and count — never the value.
Jurisdiction, EU risk tier, and the model’s GRI under the policy profile. Below the floor is not eligible.
If the requested model fails and a fallback passes, traffic is redirected rather than dropped.
Policy triggers hold the output for human review instead of releasing it.
The decision is hash-chained to the previous entry. Bodies are never stored.
Policies configured
| Policy | Org | Profile | GRI floor | Max tier | Redacts | Fallback |
|---|---|---|---|---|---|---|
| eu-high-risk EU high-risk deployment | Demo Bank Europe SA | EU AI Act high-risk | 70 | high | pan,ssn,email,phone,account,name | none |
| bank-internal Demo Bank — internal productivity | Demo Bank, N.A. | Internal productivity | 25 | limited | pan,ssn,account,mnpi | none |
| research-sandbox Model evaluation sandbox — non-production | Demo Bank, N.A. | General purpose | 20 | high | financial,identity,contact,secrets | hf-eleutherai-pythia-160m |
| bank-aml-strict Tier 1 bank — AML operations | Demo Bank, N.A. | General purpose | 60 | high | pan,ssn,email,phone,account,name,mnpi | none |
| clinical-summarisation Clinical note summarisation | Northmoor Health | Clinical decision support | 55 | high | health,identity,contact,secrets | none |
| candidate-screening Candidate screening assistance | Trellis Hiring | Hiring and employment | 60 | high | identity,contact,secrets | none |
API
curl -s https://governai.space/api/v1/route \
-H 'authorization: Bearer gh_demo_0000000000000000000000000000demo' \
-H 'content-type: application/json' \
-d '{
"policy": "research-sandbox",
"model": "hf-eleutherai-pythia-160m",
"use": "summarisation",
"prompt": "Review acct 448291 for Mr Daniel Okonjo, card 4111 1111 1111 1111"
}'Every call needs a bearer key. The one above is the public demo key: it is published on purpose, capped at 20 requests a minute, and shared by everyone reading this page — treat it as a way to see the shape of a response, not as capacity. Keys are scoped to one organisation, carry their own rate limit, and can only use policies that organisation owns — a key from another tenant gets 403. Rate-limit state comes back in x-ratelimit-limit and x-ratelimit-remaining; exceeding it returns 429, and exhausting the monthly budget returns 402. Both refusals are written to the audit chain.
The registry stays public and unauthenticated — GET /api/v1/systems?profile=credit_decisioningand GET /api/v1/audit/verify need no key. A ratings instrument nobody can read is not an instrument. Issue a key →
Full integration guide → onboarding, handling each decision, failure codes, and collecting the evidence.