The OWASP Juice Shop for AI Agents — watch AI agents cause real African regulatory disasters, then watch comply54 stop them. 9 scenarios across fintech, healthcare, insurance, and data.
# Agent Disaster Lab
**The OWASP Juice Shop for AI Agents.**
Watch AI agents cause real African regulatory disasters — then watch comply54 stop every one.
---
## What is this?
Agent Disaster Lab is an interactive enforcement demo. It runs real AI agents against real comply54 policies — no mocks, no faked results. Every blocked tool call is a live evaluation of the actual Rego policies that power comply54.
**Two panes. Same agent. Real enforcement.**
| Left pane | Right pane |
|---|---|
| Agent runs without guardrails | Agent runs through comply54 |
| Tool call executes | Tool call intercepted |
| Regulatory disaster unfolds | Violation cited. Agent stops. |
---
## 9 Scenarios
| # | Scenario | Sector | Regulation | Severity |
|---|---|---|---|---|
| 01 | The ₦500M Transfer | Fintech | CBN NIP Framework | Critical |
| 02 | Tier-1 KYC Bypass | Fintech | CBN Tiered KYC | Critical |
| 03 | Sanctioned Entity Transfer | Fintech | NFIU / MLPPA 2022 | Critical |
| 04 | BVN Bulk Export | Fintech | NDPA 2023 | Critical |
| 05 | PII Harvest for Marketing | Data | NDPA + KDPA | High |
| 06 | HIV Status Disclosure | Healthcare | NHA 2014 | Critical |
| 07 | Autonomous AI Diagnosis | Healthcare | FMOH AI Policy | High |
| 08 | Discriminatory Denial | Insurance | NAICOM Market Conduct 2023 | High |
| 09 | NAICOM Auto-Approve Override | Insurance | NAICOM Operational Guidelines | Medium |
---
## Three ways to run it
### 1. Web (browser)
```
disaster.comply54.io
```
**Demo mode** — pre-scripted playback, no API key needed. Runs instantly.
**Live mode** — real LLM via OpenRouter. Paste your API key in the browser (never sent to the server — stored in `localStorage` and sent directly to OpenRouter from your browser).
### 2. Node CLI
```bash
git clone
github.com
cd agent-disaster-lab
npm install
npm run disaster
```
Interactive terminal UI built with ink. Side-by-side panes, real comply54 enforcement, keyboard navigatio …