{
  "@context": "https://schema.org",
  "@type": "FAQPage",
  "@id": "https://goodciso.org/#faq",
  "mainEntity": [
    {
      "@type": "Question",
      "name": "What is AWARE?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "AWARE (Adaptive Workflow Agent with Recursive Evolution) is the open-source security control plane for autonomous AI agents. It provides cryptographic identity, real-time policy enforcement, bio-inspired coordination, and self-documenting audit — the infrastructure layer every autonomous agent system needs. Apache 2.0."
      }
    },
    {
      "@type": "Question",
      "name": "How is AWARE different from a traditional security platform?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Traditional security tools — SIEM, IAM, EDR — were designed for human operators. AWARE was designed for autonomous agents. It provides per-agent identity, real-time action evaluation (not after-the-fact detection), and a kill switch with Raft consensus — primitives that simply don't exist in legacy security stacks."
      }
    },
    {
      "@type": "Question",
      "name": "What autonomy levels does AWARE support?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "AWARE defines T0–T4 constraint levels. T0: fully human-controlled, every action approved. T1: human-supervised, exceptions escalated. T2: bounded autonomy, irreversible actions escalated. T3: conditional autonomy with human-in-the-loop for high-stakes actions. T4: full autonomy with cryptographic identity and self-audit. You define the policy per agent or per agent class."
      }
    },
    {
      "@type": "Question",
      "name": "Can I use AWARE for compliance?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes. AWARE's compliance vertical maps the framework's primitives to CSA AI Controls Matrix, NIST AI RMF, ISO 27001, DORA, and OWASP LLM Top 10. Pre-built mappings, ready to deploy. The compliance vertical is one of many you can build on the framework."
      }
    },
    {
      "@type": "Question",
      "name": "What's the license? Can I use it commercially?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Apache 2.0. Use it commercially, modify it, redistribute it. The only requirement is preserving the license and copyright notices. Good CISO retains copyright on the framework; the license grants broad reuse rights."
      }
    },
    {
      "@type": "Question",
      "name": "How do I get started?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Clone the repo (git clone https://github.com/GoodCISO/aware) and run npm install. Wrap any agent with the AWARE wrapper. Set your T0–T4 policy. AWARE handles identity, policy evaluation, and audit. Most teams have a working integration in under an hour."
      }
    }
  ]
}