Catala — Law-as-Code Language
A domain-specific language for translating statutory and regulatory text into correct, auditable executable code, pairing lawyers and programmers.
Catala
Catala is a programming language designed to faithfully encode legislative and regulatory text — tax codes, benefits rules, statutes — into executable, auditable code. Developed by researchers at Inria, it uses a literate-programming style so each block of code sits next to the exact legal article it implements, letting lawyers and developers co-review the logic. It has been used to reimplement portions of the French and U.S. tax codes.
Key features
- Literate syntax pairing legal text with its executable implementation
- Default-logic semantics that mirror how statutes express rules and exceptions
- Compiles to general-purpose languages including OCaml, Python, and C
- Prioritizes correctness, traceability, and auditability of legal rules
- Backed by peer-reviewed research on computational law
Legal engineers write Catala programs that mirror statute structure, then compile them into libraries other systems call to compute benefits, taxes, or eligibility with a clear audit trail back to the law.
Curated mirror of the open-source Catala (Apache-2.0). Get it from the source.
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
The same gate an agent runs before installing (POST /api/v1/trust/catala-law-as-code/check). Click a policy:
Consume Catala — Law-as-Code Language programmatically. Authenticate with an API key or session — see Authorize an agent.
# Agents: CHECK BEFORE YOU INSTALL (no auth) — score, grade, level, capability manifest
curl https://ai-supply.store/api/v1/trust/catala-law-as-code
# Gate against your org policy (returns { pass, violations })
curl -X POST https://ai-supply.store/api/v1/trust/catala-law-as-code/check \
-H "Content-Type: application/json" \
-d '{"minGrade":"B","denyPermissions":["shell"],"denyUnknownEgress":true}'
# CLI
npx ai-supply add catala-law-as-code
# REST (install → download)
curl -X POST https://ai-supply.store/api/v1/listings/catala-law-as-code/install \
-H "Authorization: Bearer $AIM_KEY"
# MCP tool
install_listing({ "slug": "catala-law-as-code" })OpenAPI spec →Curated mirror — latest upstream source. See the repository for tagged releases.