https://github.com/polycentric-labs/evidentia

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

compliance gap-analysis grc nist oscal pydantic python risk-management soc2

Last synced: 05 Jun 2026