Installation

Requirements

No AI SDK is required. Real providers (Regolo / Ollama) are optional adapter packages you add later,
explicitly. Nothing in require reaches a model.

Install

composer require padosoft/laravel-iam-ai

The service provider Padosoft\Iam\Ai\IamAiServiceProvider is registered automatically through Laravel
package auto-discovery (declared under extra.laravel.providers in composer.json). No manual
registration is needed.

Publish the configuration

php artisan vendor:publish --tag=laravel-iam-ai-config

This writes config/iam-ai.php. See Configuration for every key. The shipped
defaults are deliberately sovereign and off:

'enabled'       => false,      // master switch
'provider'      => 'disabled', // DisabledProvider — no network calls
'redaction'     => true,       // mandatory PRE-prompt redaction
'store_prompts' => false,      // prompts are never persisted
'store_outputs' => false,      // sanitized output in audit only if you opt in

What gets registered

The service provider binds the governance services and resolves the transport from config:

The default binding resolves to DisabledProvider. When you install a sovereign adapter and set
iam-ai.provider, that adapter rebinds Padosoft\Iam\Ai\Contracts\AiProvider from its own service
provider — the governance layer above the transport is unchanged.

Verify

A quick deterministic smoke test that needs no provider:

use Padosoft\Iam\Ai\Modules\AccessExplainer;

$advisory = app(AccessExplainer::class)->explain(
    ['allowed' => false, 'decision_id' => 'dec_demo', 'explanation' => ['no matching grant']],
    'Why was this denied?'
);

// "Accesso NEGATO (decision dec_demo). no matching grant"
echo $advisory->text;
var_dump($advisory->aiUsed); // false

Next

• Quickstart — the four-step path to your first audited explanation.
• Core concepts — the mental model behind the module.
• Enabling a sovereign provider — when you’re ready to turn the AI on.