Accord - Your Future Cloud Infra Companion

Accord is a compliance copilot for AWS Terraform that runs inside IBM Bob. It audits infrastructure code against ASEAN financial regulator rules (currently OJK Indonesia and MAS Singapore, with Taiwan, Philippines, Malaysia, Thailand, and Vietnam on the roadmap), cites every finding from a deterministic corpus, proposes minimal fixes from corpus-defined patterns, and ships a regulator-grade evidence pack a compliance team could submit during an inspection. General-purpose LLMs hallucinate regulator citations. Ask GPT-4 about OJK POJK 11/2022 Article 32 and it invents a clause number that does not exist. Static linters miss posture conflicts between resources, like S3 lifecycle policies that violate MAS TRM Section S15 log-retention requirements. Compliance teams rebuild audit evidence by hand the day before an inspection. Accord solves all three. The project is built as a Bob custom mode plus an 18-tool MCP server, organized into three layers: Layer 1 (deterministic data fetchers for the rule corpus), Layer 2 (cross-rule reasoning and posture-envelope conflict detection), Layer 3 (evidence rendering and live AWS verification). Every finding logs to a governance trail before returning. Tool access is scoped to read and mcp only. Accord cannot edit or apply infrastructure by design. The compliance auditor stays advisory; the developer keeps the keys. Demonstrated end-to-end against a real AWS environment in Singapore: 8 resources audited, 2 CRITICAL findings cited from MAS TRM Sections S13 and S15, one auto-fix applied, terraform apply gated on named-environment approval, RDS deployed, drift report rendered, infrastructure destroyed clean. Total audit time: 12 seconds. Evidence pack zip generated automatically. Built for IBM Bob Hackathon 2026.