TIBET Audit

> Compliance Health Scanner - Like Lynis, but for regulations.


Scan your projects for GDPR, AI Act, DORA, BIO2, NIS2, PIPA, APPI, PDPA, LGPD, JIS compliance in seconds.

$3

Digital Operational Resilience Act - EU regulation for financial entities.

``bash
$ tibet-audit scan --framework dora --org "ING Bank"

🏦 DORA COMPLIANCE MODE
Pillars: 5 | BIO2 overlap: ~60%
TIBET = Pillar 5 compliance (Information Sharing)

╔════════════════════════════════════════════════════════════╗
║ Overall Grade: B 🟢 ║
║ Score: 14/17 checks passed (82.4%) ║
╚════════════════════════════════════════════════════════════╝

PILLAR 1: ICT Risk Management (6/6 = 100%) ✅
PILLAR 5: Information Sharing (1/1 = 100%) ✅ TIBET detected!
`

Key insight: TIBET provides automatic Pillar 5 compliance!

`
══════════════════════════════════════════════════════════════════════════════
████████╗██╗██████╗ ███████╗████████╗ █████╗ ██╗ ██╗██████╗ ██╗████████╗
╚══██╔══╝██║██╔══██╗██╔════╝╚══██╔══╝ ██╔══██╗██║ ██║██╔══██╗██║╚══██╔══╝
██║ ██║██████╔╝█████╗ ██║ ███████║██║ ██║██║ ██║██║ ██║
██║ ██║██╔══██╗██╔══╝ ██║ ██╔══██║██║ ██║██║ ██║██║ ██║
██║ ██║██████╔╝███████╗ ██║ ██║ ██║╚██████╔╝██████╔╝██║ ██║
╚═╝ ╚═╝╚═════╝ ╚══════╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝
══════════════════════════════════════════════════════════════════════════════
"SSL secures the connection. TIBET secures the timeline."
══════════════════════════════════════════════════════════════════════════════
`

Installation

`bash
npm install -g tibet-audit
`

Or run directly with npx:

`bash
npx tibet-audit scan
`

Quick Start

`bash


Scan current directory

tibet-audit scan

Scan specific path

tibet-audit scan ./my-project

Scan specific categories

tibet-audit scan --categories gdpr,ai_act

Sovereign mode (no cloud APIs)

tibet-audit scan --sovereign

Fix issues automatically (Diaper Protocol)

tibet-audit fix --auto

Preview fixes without applying

tibet-audit fix --wet-wipe
`

Programmatic Usage

`typescript
import { scan, getFixableIssues, applyFixes } from 'tibet-audit';

// Basic scan
const result = await scan('./my-project');
console.log(Score: ${result.score}/100 (Grade: ${result.grade}));

// Scan specific categories
const result = await scan('.', { categories: ['gdpr', 'ai_act'] });

// Sovereign mode (no cloud APIs)
const result = await scan('.', { sovereignMode: true });

// Fix issues
const fixable = getFixableIssues(result.results);
await applyFixes(fixable);
`

Supported Regulations

| Category | Region | Checks |
|----------|--------|--------|
| GDPR | EU | Privacy policy, DPO, consent, DPIA, breach notification |
| AI Act | EU | Risk classification, documentation, human oversight |
| PIPA | South Korea | Explicit consent, CPO, 24h breach notification |
| APPI | Japan | Privacy manager, cross-border transfers |
| PDPA | Singapore | Consent, DPO, 3-day breach notification |
| LGPD | Brazil | Legal basis, Encarregado, ARCO rights |
| JIS | Universal | Bilateral consent, TIBET provenance, intent verification |
| BIO2 | Netherlands | Dutch government security baseline (17 automated checks) |
| NIS2 | EU | Network security directive (via BIO2 + ISO 27001) |

🇳🇱 BIO2 Framework - Dutch Government Baseline

71 dagen tot NIS2 deadline (18 april 2026)

BIO2 = Baseline Informatiebeveiliging Overheid 2, de Nederlandse overheidsstandaard voor informatiebeveiliging. tibet-audit ondersteunt nu 17 geautomatiseerde BIO2 checks met Grade A-F scoring.

`bash


BIO2 scan met organisatienaam


tibet-audit scan --framework bio2 --org "Gemeente Amsterdam"
`

Output voorbeeld:
`
╔══════════════════════════════════════════════════════════════╗
║ BIO2 Compliance Report ║
║ Gemeente Amsterdam ║
╠══════════════════════════════════════════════════════════════╣
║ Overall Grade: A ✅ ║
║ Score: 17/17 checks passed (100.0%) ║
╚══════════════════════════════════════════════════════════════╝
`

$3

> "BIO2 + ISO 27001 certificering = NIS2 zorgplicht invulling"
> — CIP/MinBZK guidance

| BIO2 Chapter | Domain | Automated Checks |
|--------------|--------|------------------|
| 5 | Organisatorisch | 5 checks |
| 6 | Personeel | Planned |
| 7 | Fysiek | Planned |
| 8 | Technologisch | 12 checks |

CLI Options

$3

`
tibet-audit scan [path] [options]

Options:
--categories, -c Categories to check (gdpr,ai_act,pipa,appi,pdpa,lgpd,jis)
--framework, -f Framework: bio2, nis2, gdpr, ai_act, dora
--org Organization name for compliance report
--output, -o Output format: terminal, json
--quiet, -q Minimal output
--cry Verbose mode - all the details
--sovereign No cloud APIs, fully local
`

$3

`
tibet-audit fix [path] [options]

Options:
--auto, -a Diaper Protocol: fix everything, no questions
--wet-wipe, -w Preview what would be fixed (dry-run)
--sovereign No cloud APIs, fully local
`

The Diaper Protocol

One command, hands free, compliance done.

`bash
tibet-audit fix --auto
`

Like a diaper change - press the button, hands free, mess cleaned up.

Sovereign Mode

Run all checks locally without any cloud API calls:

`bash
tibet-audit scan --sovereign
tibet-audit fix --sovereign --auto
`

Your data never leaves your machine.

Scoring

- A (90-100): Excellent compliance
- B (80-89): Good compliance
- C (70-79): Adequate compliance
- D (60-69): Needs improvement
- F (<60): Critical gaps

Also Available

- Python: pip install tibet-audit
- npm: npm install tibet-audit` (this package)

License

MIT License - Jasper van de Meent & HumoticaOS

---

Part of the TIBET Ecosystem - Transparent Immutable Bilateral Event Trails

"SSL secures the connection. TIBET secures the timeline."