govML ships 50+ templates, 10 profiles, and 20+ code generators — all open source. It’s the governance framework I built after discovering that every ML project I ran needed the same 30+ documents, and every team was reinventing them from scratch.
Why this matters
ML governance is the tax you pay to make AI systems auditable, reproducible, and trustworthy. Most teams either skip it (and pay later in failed audits and unreproducible results) or spend weeks building bespoke governance documents for each project. Neither approach scales. govML makes governance a 15-minute setup step instead of a multi-week overhead, by encoding best practices into templates that generate project-specific documentation from configuration.
The template set covers the full ML lifecycle: experiment design, data contracts, training specifications, evaluation rubrics, deployment checklists, monitoring specs, and decision logs. The profiles adapt the template set for different contexts — research, production, security, contract work.
Source
govML was built across 10 frontier projects and refined through 14 audit cycles. The methodology is described in govML: How I Ship Governed ML Projects. The tool: github.com/rexcoleman/govML.
What to do about it
- Try it on your next ML project.
pip install govmlor clone the repo. Pick a profile, run the generator, and you have a governed project skeleton in minutes. - Adapt, don’t adopt wholesale. The templates are starting points. Strip what you don’t need, extend what’s missing for your domain.
- Governance is a product feature, not overhead. Teams that can demonstrate reproducibility and auditability win contracts, pass compliance reviews, and build trust with stakeholders faster.
50+ templates is a lot. Rebuilding them from scratch for every project is worse.
Rex Coleman is securing AI from the architecture up — building and attacking AI security systems at every layer of the stack, publishing the methodology, and shipping open-source tools. rexcoleman.dev · GitHub · Singularity Cybersecurity
If this was useful, subscribe on Substack for weekly AI security research — findings, tools, and curated signal.