Our vision for government
Transform government with AI automation.Improve efficiency, save public money, reduce technology risk.
Governed AI agents for the operations of government.
Improve efficiency
A step change in efficiency, productivity and accountability. Agents carry each service end to end in real time, officers decide what carries legal or financial weight, and every action is recorded and provable as it happens.
Save public money
Automate the operations of government so the cost of running it falls, service by service. Savings arrive during the programme, not after it, as each legacy platform retires and its licence, integration and upgrade costs go with it.
Reduce technology risk
Sovereign data, owned by government and always accessible to it, in its own region and boundary. Cyber security and AI risk managed as one discipline on one set of rails, with one perimeter, one set of controls and one evidence trail.
Grants, cases, regulation, procurement and the rest of the twenty-one services of government run as governed AI agents on one set of rails, with modern interfaces for the officers who run government and the citizens who use it. The governance rails are standard. The services are built to measure for your portfolio, in any country.
Public-sector organisations we have worked with
- Transport NSW
- Snowy Monaro Regional Council
- Port Macquarie Hastings Council
- NSW Reconstruction Authority
- Kempsey Shire Council
- Byron Shire Council
Delivered as Arrochar Consulting engagements in ICT strategy, data, architecture and smart-place work. The software products are newer than this record, and we say so on the hard questions. Read the case studies →
Reduce all your legacy platforms to one compendium of government agents. Optimise and lower CAPEX and OPEX technology spend over time.MeshGov runs on the AI-safe Arrochar Labs rails.
- GovernAIG Sentinel
- PlanOrbit Roadmaps
- BuildNanolitte
- OperateMeshbone
- GroundDataballast
- DecideExecdive
- GuardagentVIKING™
Government buys the same system many times over. Every portfolio procures its own stack: a grants system here, a case system there, a records platform, an asset register, a procurement suite. Each one is a separate licence, a separate integration, a separate data model and a separate vendor roadmap. The cost of running government rises while the service to citizens does not.
The work underneath is largely the same everywhere. Take a request, apply the rules, decide, record the decision, pay or act, and prove it later. That is true of a grant, a case, a permit, a tender and an entitlement, and it is true in every jurisdiction.
MeshGov treats those as one set of governed AI agents on one set of rails. Agents do the processing, officers approve the decisions that carry statutory or financial weight, and the evidence trail is produced as the work happens rather than reconstructed for an audit.
The 21 services a government runs
Each service is a governed AI service in its own right. Run one, or run the portfolio. The catalogue is the reusable machinery of government, in three families; what it delivers (health, education, transport) is the configuration.
Checked against the Australian Government Architecture, the AGA Business Reference Model, the Queensland Government Enterprise Architecture and the UK Local Government Business Model, so it covers what federal, state and local government each run.
Serving people and business
The service paths every portfolio uses to reach a citizen or a business.
MeshGov Serve
Customer service and requests
The front door. Every request, across every channel, identified with consent, classified, resolved where it can be, routed where it must be, and visible to the person until it is closed.
MeshGov Grant
Grants management
Programme design, eligibility, assessment, award, payment and acquittal, with the reasoning behind every funding decision recorded as it is made. Includes grants between governments.
MeshGov Pay
Payments and entitlements
Money going out to people: eligibility, calculation, payment and review of entitlements, benefits, rebates and concessions, with the determination and its reasons recorded for every recipient.
MeshGov Collect
Revenue, rates and debt
Money coming in. Taxes, levies and fees at federal level; duties, payroll tax and fines at state level; rates, charges and infringements at local level. Assessment, billing, receipting, payment plans, ageing and recovery.
MeshGov Permit
Licensing and permits
Application, assessment, conditions, issue, renewal and revocation for licences and permits, with the rules applied the same way to every applicant.
MeshGov Register
Registers and identity
The statutory registers a government keeps and the verification of who is dealing with it. Integrates with the jurisdiction's digital identity scheme rather than replacing it.
MeshGov Regulate
Regulation management
Harm-centred regulation for any regime: a harm register with outcome indicators, signals from every source, matters assessed on a proportionality ladder, decisions by delegates with reasons and review rights, risk-control problems, investigations and statutory reporting. Running today.
MeshGov Assess
Planning and development assessment
Land use planning, development applications, building approvals and certification, heritage and environmental triggers, and compliance with what was approved.
MeshGov Resolve
Case management
Citizen and business cases handled end to end: intake, triage, assessment, determination and review, widened to own internal review and appeals of decisions made under any other service.
MeshGov Respond
Emergency and incident management
Preparedness, warnings, incident coordination, damage assessment and recovery. Every tier runs it. Recovery assistance draws on grants and payments.
Governing and deciding
The machinery of policy, law, accountability and public voice.
MeshGov Policy
Policy management
Draft, consult on, cost and version policy with the evidence base attached, so every position is traceable to what informed it and to who cleared it.
MeshGov Administer
Administering legislation
Legislative instruments turned into executable rules, applied consistently to every decision, with the provision behind each outcome on the record. At local level, the same for local laws.
MeshGov Deliver
Program management
Plan, cost and track delivery against outcomes, budget and milestones, widened upward to the corporate and strategic plan and outward to performance reporting and the annual report, so plan, programs and report are one record.
MeshGov Brief
Correspondence, ministerial and council support
Briefs, questions on notice and correspondence for ministers and parliament; agendas, papers, minutes and resolutions for cabinet and councils; and the decisions, delegations and interests registers every other service enforces against.
MeshGov Engage
Communications, engagement and consultation
Public information, media, campaigns, web content within brand, public notices, community engagement and formal consultation intake, and the public AI transparency statements generated from the AI register.
MeshGov Assure
Governance, risk, audit and legal
The internal accountability machinery: risk register and appetite, compliance obligations register, internal audit and workpapers, business continuity, conflicts and gifts registers, legal matters and litigation.
Running the organisation
The corporate machinery every tier runs and most often buys as a separate suite each.
MeshGov Budget
Budgeting and finance
Budget build and appropriations, general ledger, accounts payable and receivable, fixed asset accounting, financial statements and treasury.
MeshGov People
People and workforce
Recruitment on merit, onboarding, payroll, leave, performance, work health and safety, learning and separation.
MeshGov Procure
Procuring for government
Sourcing, tender assessment, award, supplier and contract management, with probity controls and the audit trail produced automatically.
MeshGov Maintain
Managing government assets
The register, condition, maintenance, valuation, renewal and disposal across property, fleet, plant and infrastructure, widened to works and facilities so roads and depots, buildings and fleet are one service.
MeshGov Record
Managing and sharing information
Records, classification, retention and disposal, freedom of information, and controlled sharing between agencies and jurisdictions, with every access provable after the fact.
Regulation that starts from harm, not from the form
MeshGov Regulate is the first MeshGov service running as software. Most regulatory systems are case systems: a licence, an inspection, a notice. Regulate is built for the regulator's real question, whether the harms are coming down, and it holds the machinery of proportionate, lawful decision-making underneath.
A harm register with outcome indicators
Every scheme, product, matter and problem traces to a harm with a baseline, a current value and a target. The overview asks whether the harms are falling. Activity counts come last.
Signals from every source
Complaints, telemetry, inspections, self-reports, referrals, data matches, media and protected disclosures are triaged by an agent against the harm register and the entity's history, then scored and routed.
A proportionality ladder, enforced
Six rungs from inform to remove. Every product sits on a rung and cites the provision that authorises it. The delegations instrument is data, so an officer without delegation for a rung cannot take it.
The gate
Agents lay out the options and recommend one. A named delegate decides, and the record captures the role, the instrument of delegation, the provision, the reasons, the conflict check and the review rights.
Risk-control problems
A harm-scan agent finds concentrations of harm that no single case reveals and nominates them with a measure. The executive adopts, and each problem is tracked from definition to closure.
Evidence that cannot be quietly changed
Every event is hash-linked to the one before it. Edit any historical record and verification breaks from that point, which is what an auditor, an ombudsman or a court needs.
The lifecycle, in seven steps
- 1Scan for harms
- 2Diagnose
- 3Prioritise
- 4Select interventions
- 5Design products
- 6Implement proportionately
- 7Evaluate against harms
Built to the regulatory craft: pick important problems and fix them, measure harm reduced rather than activity done, and use the least restrictive intervention likely to work.
Nine roles with stated decision rights, inside and outside the regulator: policy, executive, delegate, inspector, investigator, auditor, industry, independent oversight and the public.
The regime is configuration. Harms, legislation, delegations, schemes, products and roles are loaded as data, so the same system serves transport, food, building, environment or water regulators in any jurisdiction.
The running system sits behind a staff sign-in on a seeded demonstration regulator. Ask us and we will run it in front of you, against your own regime if you bring one, or walk through it in the demo now.
Software people can actually use, on both sides of the counter
Government software has a reputation: forms that time out, screens built around the data model rather than the person, and a training course to explain a system that should have explained itself. MeshGov is built the other way round, for the officers who run government and the citizens who deal with it.
One workspace, not eleven systems
An officer works across every service in one interface, with the same navigation, the same search and the same sign-on. No swivelling between a case system and a payment system, and no re-keying the same details into both.
Work arrives prepared, not assembled
The pack is built before the officer opens it: the history, the evidence, the provision that applies and the options, each cited back to its source. The officer spends their time on judgement rather than on assembly.
A public service people can finish
Citizen-facing services are short, mobile-first and written in plain language, with progress saved as people go and status visible without ringing anyone. Most are done in one sitting, on a phone.
Ask once, not every time
Nothing is requested that government already holds and is entitled to use. Details carry across services with consent recorded, so a citizen is not asked for the same document by three different areas.
Accessibility designed in, not bolted on
Interfaces are designed against WCAG 2.2 AA, built to work with a keyboard and a screen reader, and written at a reading level the whole population can use. Conformance is assessed and evidenced for your deployment rather than asserted once and left.
One design system across every service
A service switched on next quarter looks and behaves like the ones already in use, so officers do not relearn the software and improvements land everywhere at once instead of service by service.
How MeshGov helps your portfolio
One compendium, every portfolio
Grants, cases, policy, programs, regulation, information, assets and procurement run as agents on the same rails, on one identity model and one audit trail, instead of a shelf of unconnected systems that each need integrating.
Automate the process, keep the decision accountable
Agents do the intake, the assessment and the paperwork. Officers approve the decisions that carry statutory or financial weight, and every approval is recorded with the evidence that supported it.
Efficiencies that compound with every service
Each new service reuses the identity, evidence trail, integrations and design system already paid for. The eleventh service costs a fraction of the first, which is the opposite of how a stack of separate suites behaves. The saving is in what government spends running itself, not in what it spends on citizens.
Less sprawl, less corporate risk
A stack of unconnected systems is a risk register in its own right: duplicated citizen records, integrations nobody owns, vendors holding the keys, and audit findings that stay open because no single system can answer them. Consolidating onto one governed compendium of agents removes the sprawl those risks live in.
Efficient and effective, not one at the cost of the other
Cost comes out because the processing is automated, not because service levels drop. Assessment times fall, decisions become consistent because the same rules are applied to everyone, and officers are freed for the matters that actually need a person.
Adopt one service at a time
Start with the service under the most pressure, run it alongside what you have, then add the next. No portfolio has to migrate everything at once to get value from the first service.
Built for any jurisdiction
The rules, instruments, thresholds and languages are configuration, not code. National, state, provincial and local government run the same agents against their own legislation.
Sovereign by deployment
MeshGov runs in the region you govern in, on your cloud tenancy, with no offshore processing including for model inference, and customer data is never used to train external models.
Agents on Meshbone
MeshGov is not a new stack. It is the government service layer of the Arrochar Labs suite, which is why a portfolio gets governance, evidence and cost visibility on day one rather than as a later project.
Meshbone
Every MeshGov service is a governed AI service on the Meshbone control plane: what runs, who owns it, what it costs and whether it still meets policy, from first request to retirement.
Nanolitte
The services themselves are agentic microservices built on Nanolitte, on your data model and your process logic, so the agents bend to the portfolio rather than the other way round.
AIG Sentinel
Each service is assessed against the frameworks that apply to you, with approval gates and an audit-ready evidence trail for the regulator, the auditor-general and the parliament.
Databallast
Agents decide against governed data: a business glossary, lineage and certified data products, so an answer can be traced back to the record it came from.
agentVIKING™
Every agent in every service runs under the same rogue-agent controls: directive, preventive, detective and corrective. An agent that acts beyond its delegation, outside its charter or on an instruction it found in a document is stopped, seen and put right.
Standard rails, made to measure for your portfolio
The governance rails are ready-made and identical for every government, so their assurance is reused rather than rebuilt, while each service is still assessed on its own. The services that run on them start from the catalogue and are built to fit your legislation and the way your portfolio actually works. Every build runs on the rails, in four layers.
Rails first
AIG Sentinel and Meshbone go in unchanged. They are the same for every government, which is why the security architecture below is assessed once and that assessment reused, read in each regulator's language. Each service still carries its own assessment; the rails make it smaller.
Templates from the catalogue
Each of the services above starts from a template that already runs on the rails: intake, eligibility, assessment, decision, record. A portfolio switches on the ones it needs, in the order that suits it.
Made to measure for the portfolio
Your legislation, your delegations, your thresholds, your approval chain and your data model, configured and coded onto the template. This is where the hard part lives, the legislation, the exceptions and the systems you keep, so the custom share is scoped in three columns before the build and reported after it. Anything another portfolio could use goes back into the template.
Run, and hand over the controls
The service runs on the rails in your region, with monitoring, re-attestation and upgrades included. After go-live your own officers change a threshold or a form within guardrails, without raising a change request to us.
The rule
No made-to-measure build without the rails underneath it. It is the rule that keeps a custom service governed, upgradeable and provable, instead of a fork that has to be maintained by hand forever.
Procurement guidance increasingly anticipates exactly this arrangement: a buyer developing an AI tool with a seller's assistance, on the seller's software. Australia's Commonwealth AI Model Clauses, for example, cover it as a standard scenario alongside buying a product or buying a service.
Runs in your account. You own the instance.
MeshGov deploys into the tenancy your government already controls, in the region you choose. The running instance, the database, the evidence chain and the AI credentials are yours to operate, back up and audit. Nothing in a MeshGov instance calls back to Arrochar Labs.
Your cloud, your region
Delivered as a container image with infrastructure code, so the same build runs on AWS, Google Cloud, Microsoft Azure or in your own data centre. One instance per government: its own database, its own records, its own tamper-evident evidence chain. All 21 services share the rails inside that one instance.
Your identity, your delegations
Officers sign in through your directory with multi-factor authentication. Roles map to your delegations instrument, so the gate checks that the person deciding holds the delegation, and every attempt, allowed or refused, is on the record.
Your model route, in region
Claude runs under your own agreement with Anthropic, or through Amazon Bedrock or Google Cloud Vertex AI in your region, pinned so prompts and case data never leave it. Every agent has a deterministic path and runs fully without a model, so a model outage never stops a lawful decision.
Your data, your exit
Outbound traffic is read-only to public government feeds and to the model route you chose. Records, agent runs and the evidence chain export in open formats. At exit the data is returned and deleted on a certified schedule.
What Arrochar Labs keeps, and what it provides
The software stays ours under licence, delivered as the container image and infrastructure code you can rebuild from, with source escrow where you require it. We provide the deployment automation, the assurance evidence for your security assessment, the operating runbooks, the monthly release train and support under a service agreement. The rails subscription attaches to every instance; the services on it are built to measure for your legislation.
Built to align with the Protective Security Policy Framework and the Information Security Manual, the Essential Eight, the Hosting Certification Framework and the notifiable data breach scheme, with IRAP-assessed regions and services only. The assurance pack supports your authority to operate; your assessor decides. Equivalent frameworks apply in the United Kingdom, New Zealand and the United States.
Built to the standard government data demands
MeshGov handles the records government holds on its citizens: entitlements, cases, enforcement, procurement and correspondence. It is built to the highest security standard we hold any product to, and the controls are architectural rather than configured on afterwards.
Zero trust, tenant isolated
Every request is authenticated and authorised on its own merits. Each government tenant is isolated at the data, compute and key layer, with phishing-resistant multi-factor authentication on all administrative access.
Encrypted, with keys you hold
Data is encrypted in transit and at rest, with customer-managed keys so Arrochar Labs, as operator, cannot read a tenant's records.
Aligned to the baselines you are audited against
Built to align with the ACSC Essential Eight, ISO/IEC 27001, SOC 2, the NIST Cybersecurity Framework, the OWASP LLM Top 10 and ISO/IEC 42001, with an IRAP-ready architecture for Australian agencies.
Tamper-evident by default
Every agent action, approval, override and data access is written to an evidence trail that cannot be altered after the fact, which is what turns an automated decision into a defensible one.
What government buyers ask about MeshGov
- What is MeshGov?
- MeshGov is a compendium of governed AI agents for the operations of government, built by Arrochar Labs on the Meshbone control plane. It runs the twenty-one services a government needs to run itself, from grants, cases, licensing and regulation to procurement, finance, people and records, as AI agents on one set of rails. Transform government with AI automation. Improve efficiency, save public money, reduce technology risk.
- How does MeshGov keep people in charge of decisions?
- By the MeshGov rule: no decision with legal effect on a person, a business or public money is taken by an agent alone. Agents prepare the evidence, options and a recommendation; a named officer holding the right delegation decides, and the record shows who, what, why, which data, which policy and which human.
- What are the twenty-one MeshGov services?
- Three families. Serving people and business: Customer service and requests; Grants management; Payments and entitlements; Revenue, rates and debt; Licensing and permits; Registers and identity; Regulation management; Planning and development assessment; Case management; Emergency and incident management. Governing and deciding: Policy management; Administering legislation; Program management; Correspondence, ministerial and council support; Communications, engagement and consultation; Governance, risk, audit and legal. Running the organisation: Budgeting and finance; People and workforce; Procuring for government; Managing government assets; Managing and sharing information.
- Is government data sovereign on MeshGov?
- Yes. Data is hosted in the government's own region and boundary, on sovereign cloud, in-region cloud or customer-hosted infrastructure, encrypted in transit and at rest with customer-managed keys where required. Customer data is never used to train models, and models run inside the customer's boundary.
- How does MeshGov save public money?
- By automating the operations of government service by service, so each legacy platform retires as its workload lands, and its licence, integration and upgrade costs go with it. Savings arrive during the programme, not after it.
- Which security and AI governance frameworks does MeshGov align with?
- Built to align with the ACSC Essential Eight, ISO/IEC 27001, SOC 2, the NIST Cybersecurity Framework, the OWASP LLM Top 10 and ISO/IEC 42001, with an IRAP-ready architecture for Australian agencies, and mapped to the government regimes of the United States, Europe and the UK, Singapore and Southeast Asia. Arrochar Labs says aligned where it is aligned and certified only where a certificate exists.
- Is any MeshGov service running today?
- Yes. MeshGov Regulate, the regulation management service, runs as software: a harm register with outcome indicators, signals from every source triaged by agents, a six-rung proportionality ladder enforced through delegations, decisions taken by named delegates with reasons and review rights, risk-control problems, and a hash-linked evidence trail.
- How is MeshGov delivered and priced?
- Standard rails, made to measure. The governance rails (AIG Sentinel and Meshbone) are identical for every government and sold as a rails subscription. Each service starts from a catalogue template on a per-service subscription and is built to measure for the portfolio's legislation, delegations and data as a fixed-scope build. No made-to-measure build runs without the rails underneath it.
- Can MeshGov run in our own cloud account so we own it?
- Yes. MeshGov deploys as a container image with infrastructure code into the tenancy you control, on AWS, Google Cloud, Microsoft Azure or your own data centre, in your region. You own the instance, the database, the evidence chain and the model credentials, and nothing in the instance calls back to Arrochar Labs. The software stays under licence, with source escrow where you require it.
Guarded by agentVIKING™
Every agent, ours or yours, under the same four classes of control
Directive, preventive, detective and corrective. Written in AIG Sentinel, enforced at the gateway in front of the model, carried in every Nanolitte template, evidenced on one chain.
MeshGov: runs it at the highest stakes. All twenty-one government services run through the same engine, the same delegations and the same chain, which is where most of the refusals on this page were proven.
See the controlsDirective
What the agent is allowed to do, as data.
Preventive
What stops it before it acts.
Detective
How we know when it goes wrong.
Corrective
How it is stopped, reversed and fixed.
How it fits together
A compendium of AI agents. An architecture that makes them accountable.
Each part of ASP™ does one job, in order, and hands the next part something it can check. That is the difference between building AI agents and running them so an auditor, a regulator or a minister can see what happened.
Before the first build, Orbit Roadmaps finds where AI creates value and profiles the risk.
After it, Execdive turns what the chain recorded into plain-language insight for executives.
Policy, enforcement, templates, data, controls, evidence. Then services.
This describes the architecture, not what every deployment runs today: 5 of the 27 agentVIKING™ controls are still in development.
- AIG Sentineldefines policy
- Meshboneenforces policy at run time
- Nanolittecarries the controls into reusable service templates
- Databallastcontrols what data the agent may access
- agentVIKING™is the control set across every agentAcross every step
- Evidence chainrecords what happened
- MeshGovuses the whole thing for government services
One architecture, every product
A full AI-agentic experience
Every Arrochar Labs product is built the same way: agentic, event-driven, and governed with human-in-the-loop controls, so AI does the work while your people stay in control.
Agentic
AI agents do the work, end to end. Every product runs on autonomous agents that take action across your processes, not just a chat box, but software that actually gets the job done.
Event-driven
It reacts in real time. Products respond to what's actually happening (new data, a policy breach, an incoming request, a change in your estate) instead of waiting on a batch run or a person to press go.
Human-in-the-loop
Your people stay in control. Approval gates, oversight and a tamper-evident audit trail keep every agent accountable, so automation never runs unchecked.
Start with one service
Tell us which service is under the most pressure in your portfolio, and we will show you what it looks like running on MeshGov.