Vortalis for Government

Freedom-of-information and public-records requests

The trust layer for AI agents inside request intake, records search, redaction proposal, and disclosure-decision workflows.

Public-records access is a statutory-response domain. The FOI records-request sub-vertical pack codifies the actions an agent may take inside a records-request pipeline, gates the disclosure decision and the appeal outcome behind a named human approver, and signs every action into an audit chain an oversight body can verify offline. Vortalis does not make the disclosure determination and does not generate the FOI response; it governs the agent's actions and produces the audit evidence the agency relies on.

Regulators covered

Which frameworks the government pack maps to today.

Framework

Jurisdiction

Coverage

Notes

NY Public Officers Law Article 6 Sections 84, 87, and 89 (FOIL)

vortalis_proxy/compliance/us_state_government/new_york.py
tests/conformance/regulators/ny_state_government/

US-NY

Partial

The Freedom of Information Law: Section 84 open-government policy, Section 87 access obligation and grounds for denial, Section 89 procedural machinery (records access officer, timeframes, appeal). The disclosure decision is gated behind a named human; the disclosure determination and the personal-privacy exemption analysis (Section 89(2)) are the agency's.

TX Government Code Chapter 552 Sections 552.221 and 552.301 (PIA)

vortalis_proxy/compliance/us_state_government/texas.py
tests/conformance/regulators/tx_state_government/

US-TX

Partial

The Public Information Act: Section 552.221 prompt-production duty (the disclosure decision is gated behind a named human), Section 552.301 the procedure for requesting an Attorney General decision to withhold. The AG ruling is outside the platform; the platform records the agent's proposed exemption and the human escalation.

CA Public Records Act

vortalis_proxy/compliance/us_state_government/california.py
tests/conformance/regulators/ca_state_government/

US-CA

Partial

California Public Records Act framing with the Government Code Section 11546.7 (AB 302) automated decision system inventory where an AI system assists. The disclosure decision is the agency's; the platform gates it behind a named human and records the trail.

Adapter coverage

Upstream services Vortalis adapts for this vertical.

No Vortalis-side adapters ship for this vertical today. The calling system holds the upstream credentials (records management system, redaction tooling, requester-correspondence system) and Vortalis governs the action at the agent boundary rather than at the upstream-API boundary.

Action vocabulary

The policy template for this vertical.

Actions allowed

Each action gated by policy at the hot path.

Anticipated require_human actions

foi.disclosure_decision
appeal.outcome

Rate-limit posture

2 000 records.searched per 1-hour rolling window; 2 000 redaction.proposed per 1-hour rolling window; 500 foi.disclosure_decision per 1-hour rolling window; 500 request.denied per 1-hour rolling window; 200 appeal.outcome per 1-hour rolling window. Defensible for a single-agency records office; high-volume offices raise after agreement with the records access officer.

Template path: policies/sectors/government/foi-records-request-template.yaml

Integration brief

The implementation guide your engineers read first.

Available

docs/governance/integration-briefs/government-foi-records-request.md

Honest limits

What this sector pack does not do.

Vortalis does not make the disclosure determination; the agency does.

The policy template gates 10 actions including records.searched, redaction.proposed, and foi.disclosure_decision. It does not search the agency's systems, apply the statutory exemptions, or substitute for the records access officer's judgement. The disclosure decision, the application of a statutory exemption, and the appeal outcome are the agency's statutory responsibility, made by a named human through the require_human flow.

FOI response generation is the operator's responsibility.

Under NY FOIL, the Texas PIA, and the California Public Records Act, the records search, the redaction, the disclosure decision, and the response to the requester are the agency's statutory acts. The agent proposes a redaction set and a disclosure recommendation; the agency searches its own systems, applies the statutory exemptions, and generates the response. Vortalis governs the agent's proposals and records them; it does not produce the FOI response.

Due-process and statutory gates depend on operator process.

The require_human gate on foi.disclosure_decision and appeal.outcome is the mechanism; the substance of the statutory review (the exemption analysis, the timeframes, the Attorney General escalation under Texas PIA Section 552.301) is the agency's. A misconfigured require_human list is an operator error, not a platform guarantee.

State-level public-records law varies and evolves.

New York FOIL, the Texas Public Information Act, and the California Public Records Act each have their own procedural machinery, exemptions, and timeframes, and the AI-specific provisions that touch them are adopted on a rolling basis. The builders cite the published statute sections and mark anticipated provisions explicitly; the operator is responsible for confirming which statute applies and how it maps onto the agency's process.

The general-purpose honest limits sit at /security/limitations; this list is specific to the government pack.

Bring Vortalis to your government agents.

Read the integration brief if you would rather start with the engineering detail. Talk to us first if you would rather start with a conversation about your threat model.

Read the integration brief Talk to an engineer