Government Networks Demand
Government-Grade AI Controls.

#!/usr/bin/env python3
"""Government AI tool access monitor with CUI tagging and FISMA reporting."""

import csv
import json
import sys
from datetime import datetime
from collections import defaultdict
from enum import Enum

class DataSensitivity(Enum):
    PUBLIC          = "PUBLIC"
    CUI_BASIC       = "CUI_BASIC"
    CUI_SPECIFIED    = "CUI_SPECIFIED"
    CLASSIFIED       = "CLASSIFIED"

class FISMAImpact(Enum):
    LOW      = "LOW"
    MODERATE = "MODERATE"
    HIGH     = "HIGH"

class GovAIToolMonitor:
    """Monitor AI tool access on government networks with CUI awareness."""

    NETWORK_ZONE_SENSITIVITY = {
        "NIPRNET":  DataSensitivity.CUI_BASIC,
        "SIPRNET":  DataSensitivity.CLASSIFIED,
        "JWICS":    DataSensitivity.CLASSIFIED,
        "AGENCY_LAN": DataSensitivity.CUI_BASIC,
        "PUBLIC_DMZ": DataSensitivity.PUBLIC,
    }

    CUI_HIGH_RISK_CATEGORIES = [
        "Text Generation", "Code Generation",
        "Data Analytics", "AI Agents",
        "Voice & Speech", "Healthcare AI",
    ]

    def __init__(self, blocklist_csv: str, fedramp_authorized: str):
        self.ai_domains = {}
        with open(blocklist_csv) as f:
            for row in csv.DictReader(f):
                self.ai_domains[row["domain"].lower()] = {
                    "category": row.get("primary_category", "Unknown"),
                    "tool_name": row.get("tool_name", ""),
                }
        # Load FedRAMP-authorized domains
        self.authorized = set()
        with open(fedramp_authorized) as f:
            for line in f:
                self.authorized.add(line.strip().lower())

    def classify_event(self, domain: str, network_zone: str,
                       user: str, method: str, bytes_sent: int) -> dict:
        """Classify an AI tool access event for FISMA reporting."""
        info = self.ai_domains.get(domain.lower(), {})
        zone_sensitivity = self.NETWORK_ZONE_SENSITIVITY.get(
            network_zone, DataSensitivity.CUI_BASIC
        )
        is_authorized = domain.lower() in self.authorized
        is_cui_risk = info.get("category") in self.CUI_HIGH_RISK_CATEGORIES
        is_data_upload = method == "POST" and bytes_sent > 512

        # Determine FISMA impact level
        if zone_sensitivity == DataSensitivity.CLASSIFIED:
            fisma_impact = FISMAImpact.HIGH
        elif is_cui_risk and is_data_upload:
            fisma_impact = FISMAImpact.HIGH
        elif is_cui_risk or is_data_upload:
            fisma_impact = FISMAImpact.MODERATE
        else:
            fisma_impact = FISMAImpact.LOW

        return {
            "timestamp": datetime.utcnow().isoformat() + "Z",
            "event_type": "GOV_AI_TOOL_ACCESS",
            "domain": domain,
            "tool_name": info.get("tool_name", "Unknown"),
            "category": info.get("category", "Unknown"),
            "network_zone": network_zone,
            "data_sensitivity": zone_sensitivity.value,
            "fedramp_authorized": is_authorized,
            "authorization_status": "AUTHORIZED" if is_authorized else "UNAUTHORIZED",
            "cui_exposure_risk": is_cui_risk and not is_authorized,
            "fisma_impact": fisma_impact.value,
            "user": user,
            "method": method,
            "bytes_sent": bytes_sent,
            "data_upload_detected": is_data_upload,
            "poam_required": not is_authorized,
            "nist_controls": ["SA-9", "AC-20", "SI-4"],
        }

    def generate_fisma_report(self, events: list) -> dict:
        """Generate FISMA-aligned compliance summary."""
        unauthorized = [e for e in events if not e["fedramp_authorized"]]
        cui_risks = [e for e in events if e["cui_exposure_risk"]]
        return {
            "total_ai_access_events": len(events),
            "unauthorized_tool_events": len(unauthorized),
            "unique_unauthorized_tools": len(set(
                e["domain"] for e in unauthorized
            )),
            "cui_exposure_events": len(cui_risks),
            "poam_items_generated": len(set(
                e["domain"] for e in unauthorized
            )),
            "high_impact_events": sum(
                1 for e in events if e["fisma_impact"] == "HIGH"
            ),
        }

# Usage
monitor = GovAIToolMonitor("ai_tools_blocklist.csv", "fedramp_authorized_domains.txt")
event = monitor.classify_event(
    domain="chat.openai.com",
    network_zone="AGENCY_LAN",
    user="[email protected]",
    method="POST",
    bytes_sent=8192,
)
print(json.dumps(event, indent=2))

# gov_ai_control_mapping.yaml
# Maps AI tool categories to NIST 800-53 Rev 5 controls and government policy

government_ai_controls:

  global_policy:
    default_action: "BLOCK"
    authorization_required: "FedRAMP ATO or agency-specific ATO"
    governing_directives:
      - "EO 14110 - Safe, Secure, and Trustworthy AI"
      - "OMB M-24-10 - Advancing AI Governance"
      - "FISMA - Federal Information Security Modernization Act"
      - "NIST AI RMF 1.0"

  categories:

    text_generation:
      display_name: "Text & Language AI"
      government_risk: "CRITICAL"
      cui_risk: true
      fedramp_minimum: "Moderate"
      nist_800_53_controls:
        - "AC-2   # Account Management — track who uses AI tools"
        - "AC-20  # Use of External Systems — prohibit without ATO"
        - "AU-2   # Audit Events — log all AI tool access"
        - "AU-6   # Audit Review — review AI access logs weekly"
        - "SA-4   # Acquisition Process — include AI in procurement"
        - "SA-9   # External System Services — require FedRAMP"
        - "SC-7   # Boundary Protection — block at perimeter"
        - "SI-4   # System Monitoring — detect AI tool traffic"
      policy_notes:
        - "Block all unapproved text generation tools"
        - "Approved tools require CUI handling training"
        - "POST requests to approved tools logged for audit"
      network_zones:
        NIPRNET: "BLOCK unless FedRAMP Moderate+"
        AGENCY_LAN: "BLOCK unless agency ATO"
        PUBLIC_DMZ: "ALLOW with logging"

    code_generation:
      display_name: "Code & Development AI"
      government_risk: "HIGH"
      cui_risk: true
      fedramp_minimum: "Moderate"
      nist_800_53_controls:
        - "AC-20  # Use of External Systems"
        - "CM-7   # Least Functionality — disable unnecessary AI tools"
        - "SA-8   # Security & Privacy Engineering — review AI-generated code"
        - "SA-10  # Developer Configuration Mgmt"
        - "SA-11  # Developer Testing — validate AI code output"
        - "SC-7   # Boundary Protection"
        - "SI-10  # Information Input Validation"
      policy_notes:
        - "Never paste classified or CUI source code into AI tools"
        - "AI-generated code requires security review before deployment"
        - "Supply chain risk: AI code tools may introduce vulnerabilities"

    data_analytics:
      display_name: "Data Analytics AI"
      government_risk: "CRITICAL"
      cui_risk: true
      fedramp_minimum: "High"
      nist_800_53_controls:
        - "AC-4   # Information Flow Enforcement — prevent data exfil"
        - "AC-20  # Use of External Systems"
        - "MP-5   # Media Transport — data leaving the boundary"
        - "SA-9   # External System Services"
        - "SC-7   # Boundary Protection"
        - "SC-28  # Protection of Information at Rest"
      policy_notes:
        - "No government datasets uploaded to external AI analytics"
        - "Synthetic or anonymized data only for approved tools"
        - "FedRAMP High required for any PII/CUI analytics"

    ai_agents:
      display_name: "Autonomous AI Agents"
      government_risk: "CRITICAL"
      cui_risk: true
      fedramp_minimum: "High"
      nist_800_53_controls:
        - "AC-6   # Least Privilege — agents must not have admin access"
        - "AU-12  # Audit Record Generation — log all agent actions"
        - "CA-7   # Continuous Monitoring — monitor agent behavior"
        - "SA-9   # External System Services"
        - "SC-7   # Boundary Protection"
        - "SI-4   # System Monitoring"
      policy_notes:
        - "Autonomous AI agents prohibited without CAIO approval"
        - "Human-in-the-loop required for all government decisions"
        - "OMB M-24-10 rights-impacting AI safeguards apply"

    voice_speech:
      display_name: "Voice & Speech AI"
      government_risk: "HIGH"
      cui_risk: true
      fedramp_minimum: "Moderate"
      nist_800_53_controls:
        - "AC-20  # Use of External Systems"
        - "SC-8   # Transmission Confidentiality — encrypt voice data"
        - "SC-7   # Boundary Protection"
        - "SI-4   # System Monitoring"
      policy_notes:
        - "No dictation of CUI content to external speech tools"
        - "Voice data may contain biometric identifiers (PII)"
        - "Conference call transcription requires approved tools only"