AI Governance Evidence, Not Guesswork
Find the gap. Close it with the mapped control. Export the evidence. 138 patterns, mapped article-by-article to APRA, EU AI Act, ISO 42001, NIST AI RMF, and GDPR.
Both free · no sign-in required · or browse 138 patterns
Where does your org actually stand?
Solve it live
Not a pattern library search. Six specific answers.
Every card below is real output from the live tool, not a description of what it does. Pick your problem — free, no sign-in.
Gap assessment
“Where am I exposed right now?”
Architecture generator
“What should this system look like?”
Governance code review
“Is this code AI-governance-safe?”
CI pipeline generator
“Is our pipeline actually governed?”
- name: EAAPL Governance Check
uses: uchit/governance-action@v1
with:
fail_on_gaps: 'true'Migration agent planner
“How do we migrate without a mess?”
Pattern advisor
“I don't know which pattern I need”
Three real patterns from the library — not a demo
Use it where you already work
Not another dashboard to remember to check. The library is queryable from your AI assistant and enforceable in your CI pipeline today.
Query patterns from your AI assistant
An MCP server on npm. No clone, no build.
{
"mcpServers": {
"aipatterns": {
"command": "npx",
"args": ["-y", "aipatterns-mcp-server"]
}
}
}Gate every PR on governance controls
Checks the actual pattern in code, not just a filename. Posts the report on the PR.
on:
pull_request:
types: [opened, synchronize]
jobs:
governance:
uses: uchit/governance-action@v1
with:
api_key: ${{ secrets.EAAPL_API_KEY }}From AI risk to implementation
EAAPL is not a reading list. It is a structured path from identifying a risk to proving you've addressed it.
Find your compliance gaps
A risk score and your top 3 gaps, each mapped to a regulation article. Free, no sign-in.
Start assessment →Close the gap
Every gap links to the exact pattern that satisfies it — and the incidents it prevents.
Browse the library →Export the evidence
Log adopted patterns, export an auditor-ready evidence package.
Set up your tracker →Generate the architecture
Diagram, components, and regulatory flags for your specific use case.
Generate architecture →Where most teams begin
Three foundational patterns
Build these before anything else. They underpin every other pattern in the library.
AI Model Register
The AI Model Register is the foundational governance artefact for any enterprise…
Where every AI programme begins — a single source of truth for all models in production.
AI Gateway
The AI Gateway pattern establishes a centralised, enterprise-grade control plane through which…
The security perimeter every enterprise AI deployment requires before anything else goes live.
Enterprise Retrieval-Augmented Generation
Retrieval-Augmented Generation (RAG) is the foundational architecture pattern that grounds Large Language…
The grounding architecture that eliminates hallucinations and enables auditable AI responses.
Real incidents, preventable patterns
Every pattern in this library exists because an enterprise got it wrong first.
Air Canada chatbot fabricated a refund policy
Tribunal ordered compensation for the hallucinated response.
Samsung engineers leaked proprietary source code via ChatGPT
No egress controls. Confidential IP left the perimeter for good.
Agentic AI executed irreversible financial transactions autonomously
No approval gate, no rollback path.
Built For
Compliance and risk teams at regulated entities
Architects and engineers are welcome to use the pattern library directly — but every workflow here starts from the compliance obligation, not the tech stack.
Compliance Officer
APRA CPS 230, CPS 234, EU AI Act, ISO 42001, NIST AI RMF, and GDPR — mapped to the exact evidence an auditor asks for.
Explore →AI Governance Lead
Model risk, policy enforcement, and regulatory compliance across multiple frameworks, tracked in one place.
Explore →Risk & Consulting Advisory
Structured discovery, gap analysis, and client-ready evidence exports backed by real incident data.
Explore →16 architecture domains
From foundational governance to agentic orchestration.
Agentic AI
10 patternsAutonomous agents, tool registries, sandboxing, and agent identity
Agentic Workflows
15 patternsReAct loops, sequential chains, parallel fan-out, routing, planning, and tool orchestration patterns
Regulatory Compliance
8 patternsAPRA CPS230/234, EU AI Act, ISO 42001, NIST AI RMF, and GDPR frameworks
Data Architecture
8 patternsTraining data governance, lineage, quality, and privacy-by-design
AI Governance
10 patternsModel lifecycle, risk classification, policy enforcement, and audit trails
Human-in-the-Loop
8 patternsApproval gateways, override patterns, confidence routing, and feedback loops
AI Integration
8 patternsService buses, circuit breakers, legacy augmentation, and batch processing
Knowledge Management
6 patternsKnowledge graphs, corpus management, vector databases, and semantic layers
Model Context Protocol
5 patternsMCP server design, gateway patterns, multi-server orchestration, auth/authz, and stateful session management
Model Management
8 patternsVersioning, rollback, canary releases, fine-tuning, and ensemble patterns
Multi-Agent Systems
6 patternsOrchestration, swarm patterns, debate agents, and handoff protocols
Observability & Monitoring
11 patternsTelemetry, drift detection, hallucination monitoring, and cost visibility
Platform Engineering
10 patternsAPI gateways, cost control, developer portals, caching, and multi-tenant platforms
Retrieval-Augmented Generation
10 patternsRetrieval architectures, vector search, grounding, and citation infrastructure
Reasoning Models
5 patternsExtended thinking gates, think-budget allocation, reasoning-then-act, cost-quality routing, and multi-step verification
AI Security
10 patternsZero-trust pipelines, input/output defence, secrets management, and access control
Compliance Mapping
Regulatory coverage
Every pattern is mapped to applicable frameworks. Demonstrate compliance readiness from day one.