Try AWARE in your browser

A working slice of the AWARE policy engine. See how it makes allow / deny / redact decisions on AI agent tool calls — with annotated scenarios and a freeform input. No backend, no signup.

Static demo · runs in your browser Open source · Apache 2.0 Install the real package →
Live demo

Walkthrough scenarios

Three real patterns from production. Click to load each one into the input box.

Input — tool call

Paste JSON or describe a scenario in plain text
Or pick a scenario above

Output — decision

Allow · Deny · Redact · with full decision DAG
Decision will appear here.
Install

Install the real package

This browser demo uses a faithful JS port of the policy engine. The npm package is the real one — full rule set, audit DAG, and integration with your agent runtime.

# Install
npm install @goodciso/aware

# Or with pnpm / yarn
pnpm add @goodciso/aware
yarn add @goodciso/aware
# Use it in your agent runtime
import { aware } from '@goodciso/aware';

const decision = await aware.evaluate({
  tool: 'send_email',
  parameters: { to: 'partner@example.com', body: emailBody },
  identity: { role: 'agent', user_id: agentId, trust_level: 'medium' }
});

if (decision.decision === 'deny') { throw new Error(decision.reason); }
if (decision.decision === 'redact') { emailBody = decision.redacted_params.body; }
// decision.audit.tool_call_hash → SIEM-ready evidence
Office Hours → hello@goodciso.org
About this demo

What this demo actually runs

A short, honest note on what you're testing here.

  • This is a faithful JS port. The rule set is the same shape as the production package — same severity ladder, same short-circuit on high-severity matches, same audit-trail output. It is not the real npm package running in-process.
  • Five illustrative rules. Production AWARE ships more rules (FCA-specific clauses, EU AI Act Article 9 risk classification, NIST AI RMF controls, custom rule authoring). These five are enough to demonstrate the decision mechanics: PII egress, customer-data access control, tool allowlists, audit context, path sandboxing.
  • Your input stays local. Nothing leaves your browser. There is no backend for this page. Open DevTools and you can verify — window.AWARE_DEMO.evaluate(...) is available in the console.
  • The real package does more. Decision DAG persistence, signed audit hashes, pluggable identity providers, regulatory evidence packs, multi-agent coordination, and on-prem deployment. See the npm package for the full surface.