M365 Governance as Code
Microsoft 365 governance that shows its work.
Evidence, basis and uncertainty preserved from the read to the conclusion.
From evidence to a conclusion you can inspect
The Engine records evidence, evaluates published rules and preserves the limits of what was established. Inspect its contracts and rule documentation before interpreting a result.
Read the core conceptsExplore the product
- Rules26 published rules, each with its basis and what a pass does not settle
- AssuranceHow far each capability has been proved, and where the path stops today
- TrustThe read-only model, identity, and how a pass is earned
- Command lineEvery command the engine ships, quoted from the engine
- DocumentationThe manual end to end, including what each collector reads and with what permission
Run it before you point it at anything.
Everything offline, against evidence that ships with the package. No tenant, no app registration, no PowerShell.
$ pipx install m365-governance-as-code==1.0.0b9
$ m365-governance evaluate --evidence <a-fixture.json>
3 rule evaluations across 1 resource
Fail 1
Unknown 2
Pass 0
Fail · SPO-LIST-001 · documented-limit
The list holds 148000 items, above Microsoft's documented
limit of 100,000, and still inherits its permissions.
Unknown · SPO-LIST-002 · documented-limit
The scope count does not settle this list's position
relative to the 50,000 limit. This is not a pass.