Skip to content

New: read-only GitHub integration is now live

Governed agents for government work

Connect your agency's tools. Keep a person at the gate.

GovEngine drafts agents that read from your systems and act in Slack, Outlook, SharePoint and more. Outward actions pass the policies and approval gates you configure, and approval freezes the version that runs.

Request a demo
Agent graphActive v3v4 · draft

1 of 4: Overview

GovEngine connectors and the approval gateRead-only sources including GitHub, SAM.gov and Regulations.gov flow into the engine. Outward actions in Slack, Gmail, Teams, Outlook, Google Drive, SharePoint and HTTP pass through the configured approval gate.
Active v3v4 · draft
  • Slack
  • Gmail
  • Teams
  • Outlook
  • Drive
  • SharePoint
  • HTTP
  • GitHub
  • Web search
  • USAspending
  • Regulations.gov
  • USAJOBS
  • SAM.gov
  • PubMed
  • FOIA
  • a11y scan

See how the gate works ↓

  1. Describe: a person asks for a weekly SAM.gov digest posted to Slack.
  2. Inspect: the gate lists every place this agent sends data.
  3. Test: outward actions are simulated, not sent.
  4. Approve: a person approves, and v3 is frozen.
  5. Run: the approved version posts the briefing.
  6. Edit it later and you get v4 as a draft. v3 keeps running until you approve.

An illustrative workflow. Human approval holds the line.

Underneath every agent: models, sign-in and cloud cost

  • OpenAIvia MCPOne
  • Anthropicvia MCPOne
  • Google sign-inoidc
  • Microsoft Entra IDoidc
  • SAML / OIDCfederation
  • PIV / CACsmart card
  • AWSread-only collector
  • Azureread-only collector
  • GCPread-only collector
  • OCIread-only collector

Three ready mission packs

One engine. Three missions you can start with.

Each pack is a set of approved agents on the same gate. Start with one, keep the controls for all of them.

What changed in the FY26 travel policy?
Per diem now follows the revised rates [1] and approvals move to the travel lead [2].
An answer without sourcesWithheld
Illustrative example

Secure Government AI Assistant

Cited answers. Private conversations. Retention.

  • Ask your connected knowledge
  • Follow the answer back to its source
  • No citation? The answer is withheld.
Illustrative example

Document Mission Automation

Extract documents. Review. Approve records writes.

  • Extract
  • Review
  • Approve and file
Export JSON · CSV
Illustrative example

Continuous Digital Compliance

Scan for barriers. Track findings. Export evidence.

  • Scan
  • Understand
  • Prove

Automated scans detect a subset of accessibility issues. Manual review is still required to determine conformance.

Governed platform

You set the direction. You keep the controls.#

Every mission pack runs on the same governed platform. See the graph, test the work and approve exactly what runs.

Human approval holds the lineWork moves from Describe through Inspect and Test, then stops at a closed gate. A person approves, the gate opens and the version is frozen as v3. The work then runs and is measured. A new draft, v4, waits back at the start.ComplianceDocumentsAI assistantDescribeInspectTestApproveRunMeasurev3 · approvedv4 · draft

Approval freezes the version. Changes create a new draft.

  • Governed outward actionsEmails, posts, uploads and HTTP calls pass through policy checks and approval gates before anything leaves.
  • Per-tenant isolationEvery tenant table is isolated at the database. With no tenant set, nothing can be read or written.
  • Immutable run evidenceEvery run pins an approved version and leaves append-only steps, decisions and audit events.

Evidence

Every run leaves a trail you can hand to an auditor.

  • A gate on every outward action

    Emails, posts, uploads and requests stop at policy checks and a human approval before anything leaves.

  • Approved versions are frozen

    Approval pins an exact graph version. Any change becomes a new draft that needs approval again.

  • See the whole graph first

    Nodes, paths and every outward action are visible before you approve a single run.

  • Dry runs with side effects off

    Test with real inputs. Outward actions are simulated, never sent.

  • Append-only run evidence

    Steps, decisions and audit events are recorded for every run and can be exported.

  • Honest about limits

    Automated scans detect a subset of accessibility issues. Manual review is still required to determine conformance.

run_8f21 · audit eventsappend-only
  1. 09:14:02run.startgraph v3 · approved
  2. 09:14:03readregulations.search · 14 results
  3. 09:14:05modeldraft summary · via MCPOne · redacted
  4. 09:14:06policyslack.post-message · destination static
  5. 09:14:06gatewaiting for approval
  6. 09:21:40approvej.rivera@agency.gov
  7. 09:21:41sendslack.post-message · #ops-briefing
  8. 09:21:41run.endevidence sealed · 7 events
Illustrative run. Every step, decision and approval is recorded.

Connectors

Plug in your tools. Every one knows its place.

26 connections and sources, sorted by what they can do. Reads come in. Outward actions pass the controls you configure.

Showing every connection and source.

  • Slackslack.post-messageWaits at the gate. The channel is set by you, never by the model.
  • Gmailgmail.sendWaits at the gate. A model may write the message, only you choose the address.
  • Microsoft Teamsteams.post-messageWaits at the gate. Posts only as the approved version drafted it.
  • Outlookoutlook.sendWaits at the gate. Every recipient is acknowledged before approval.
  • Google Drivegdrive.upload · list · readReads come in freely. Uploads wait at the gate.
  • SharePointsharepoint.upload · list · readFiling to records is a write. A person approves the exact upload first.
  • HTTPhttp.request · http.getGeneric requests are flagged for review. Destinations stay static.
  • GitHubRepositories · files · issues · pull requestsRead-only GitHub App. Read selected repositories, files, issues and pull requests. Repository writes are not supported.
  • Web searchweb-searchBrings public results in for the agent to use.
  • USAspendingusaspendingFederal spending data, read only.
  • Regulations.govregulationsDockets and comments, read only.
  • USAJOBSusajobsJob postings, read only.
  • SAM.govsamgovOpportunities and entity records, read only.
  • PubMedpubmedResearch abstracts, read only.
  • FOIAfoiaRequest tracking data, read only.
  • Accessibility scannera11ySection 508 and WCAG scans of verified sites.
  • OpenAIvia MCPOneModel calls go through the governed MCPOne gateway, with redaction on by default.
  • Anthropicvia MCPOneModel calls go through the governed MCPOne gateway, with redaction on by default.
  • Google sign-inoidcBuilt-in sign-in with Google.
  • Microsoft Entra IDoidcBuilt-in sign-in with Microsoft.
  • SAML / OIDCfederationPer-tenant federation with your identity provider.
  • PIV / CACsmart cardSmart-card sign-in, set per tenant.
  • AWSread-only collectorCost and inventory, read only. Uses a read-only role configured for your cloud account.
  • Azureread-only collectorCost and inventory, read only.
  • GCPread-only collectorCost and inventory, read only.
  • OCIread-only collectorCost and inventory, read only.

Availability depends on tenant activation and configured connections.

Request a demo

Bring one real task. We will build the graph with you.

  • A working session with your team, not a slide deck
  • See your task as a graph, tested with side effects off
  • Leave knowing exactly what would wait at the gate

Fields marked * are required.