Skip to content

feature / agent-governance #6423

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
0xchikku wants to merge 11 commits into
base: main
Choose a base branch
from
+2,903 −52
Open

feature / agent-governance #6423

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
d2e6618
feat(governance): add policy engine and audit logging for agent flows
0xchikku May 22, 2026
4118b43
feat(governance): add policy enforcement and audit logging for agent …
0xchikku May 22, 2026
d84741e
feat(governance): extract agent tool call result type and governance …
0xchikku May 22, 2026
81d6c08
refactor(governance): rename policyEngine to policyEvaluator
0xchikku May 22, 2026
b48c94a
feat(governance): add audit logging and demo for policy enforcement
0xchikku May 23, 2026
11e9b41
feat(governance): update audit logging and policy paths for demo
0xchikku May 23, 2026
68c9ca9
design doc
0xchikku May 23, 2026
2dddfa5
chore(governance): clear audit log and update agent flow governance
0xchikku May 25, 2026
980ebce
feat(governance): refactor HITL proceed path to support redirect inst…
0xchikku May 25, 2026
b56ff20
chore(governance): update internal email domain in agent policies
0xchikku May 25, 2026
9a74ec1
chore(governance): populate audit log with demo session data
0xchikku May 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,3 +120,5 @@ apps/*/
.claude/settings.local.json
.claude/agent-memory/*

# sqlite
dev-sqlite/database.sqlite
37 changes: 37 additions & 0 deletions audit.jsonl
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
{"ts":"2026-05-25T02:41:09.951Z","step":"session_end","output":"[REJECTED BY HUMAN]","toolCallCount":1,"sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:09.927Z","step":"hitl","tool":"send_email","args":{"to":"alice@example.com","subject":"Quarterly Report Ready","body":"Hello Alice,\n\nThe quarterly report is now ready. Please let me know if you need anything further.\n\nBest regards,\n[Your Name]"},"humanDecision":"reject","ruleId":"escalate-external-email","feedback":"","sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:09.926Z","step":"session_start","input":"Reject","sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:07.834Z","step":"session_end","output":"\n\n**Policy escalation** (rule: `escalate-external-email`): Sending email to an external address requires human approval.\n\nAttempting to use tool:\n```json\n{\n \"name\": \"send_email\",\n \"args\": {\n \"to\": \"alice@example.com\",\n \"subject\": \"Quarterly Report Ready\",\n \"body\": \"Hello Alice,\\n\\nThe quarterly report is now ready. Please let me know if you need anything further.\\n\\nBest regards,\\n[Your Name]\"\n },\n \"id\": \"chatcmpl-tool-b77dfe144c780d6a\",\n \"type\": \"tool_call\"\n}\n```","toolCallCount":0,"sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:07.805Z","traceId":"cf5effac81909b5f","step":"policy_decision","tool":"send_email","args":{"to":"alice@example.com","subject":"Quarterly Report Ready","body":"Hello Alice,\n\nThe quarterly report is now ready. Please let me know if you need anything further.\n\nBest regards,\n[Your Name]"},"ruleId":"escalate-external-email","effect":"escalate","message":"Sending email to an external address requires human approval.","sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:07.803Z","traceId":"cf5effac81909b5f","step":"propose","tool":"send_email","args":{"to":"alice@example.com","subject":"Quarterly Report Ready","body":"Hello Alice,\n\nThe quarterly report is now ready. Please let me know if you need anything further.\n\nBest regards,\n[Your Name]"},"sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:41:06.888Z","step":"session_start","input":"Send an email to alice@example.com saying the quarterly report is ready","sessionId":"2b420969-191c-4170-b656-5fcd1df838c8","chatId":"2b420969-191c-4170-b656-5fcd1df838c8","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:49.073Z","step":"session_end","output":"Email sent to hello@internal.tech: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready.\" (simulated).","toolCallCount":1,"sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:49.045Z","traceId":"29cfe16641549d05","step":"observe","tool":"send_email","observation":"Email sent to hello@internal.tech: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready.\" (simulated).","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:49.038Z","traceId":"29cfe16641549d05","step":"execute","tool":"send_email","args":{"input":"To: hello@internal.tech\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready."},"observation":"Email sent to hello@internal.tech: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready.\" (simulated).","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:49.021Z","traceId":"29cfe16641549d05","step":"policy_decision","tool":"send_email","args":{"input":"To: hello@internal.tech\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready."},"ruleId":"allow-internal-email","effect":"allow","message":"Internal @internal.tech addresses are always permitted.","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:49.019Z","traceId":"29cfe16641549d05","step":"propose","tool":"send_email","args":{"input":"To: hello@internal.tech\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready."},"sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:45.982Z","step":"hitl","tool":"send_email","args":{"input":"{\"to\":\"alice@example.com\",\"subject\":\"Quarterly Report Ready\",\"body\":\"The quarterly report is ready.\"}"},"humanDecision":"proceed","ruleId":"escalate-external-email","feedback":"modify the to email to hello@internal.tech","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:45.981Z","step":"session_start","input":"Proceed","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:09.229Z","step":"session_end","output":"\n\n**Policy escalation** (rule: `escalate-external-email`): Sending email to an external address requires human approval.\n\nAttempting to use tool:\n```json\n{\n \"name\": \"send_email\",\n \"args\": {\n \"input\": \"{\\\"to\\\":\\\"alice@example.com\\\",\\\"subject\\\":\\\"Quarterly Report Ready\\\",\\\"body\\\":\\\"The quarterly report is ready.\\\"}\"\n },\n \"id\": \"chatcmpl-tool-8ca97646aff7e671\",\n \"type\": \"tool_call\"\n}\n```","toolCallCount":0,"sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:08.944Z","traceId":"fea46c92249860d1","step":"policy_decision","tool":"send_email","args":{"input":"{\"to\":\"alice@example.com\",\"subject\":\"Quarterly Report Ready\",\"body\":\"The quarterly report is ready.\"}"},"ruleId":"escalate-external-email","effect":"escalate","message":"Sending email to an external address requires human approval.","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:08.943Z","traceId":"fea46c92249860d1","step":"propose","tool":"send_email","args":{"input":"{\"to\":\"alice@example.com\",\"subject\":\"Quarterly Report Ready\",\"body\":\"The quarterly report is ready.\"}"},"sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:39:07.650Z","step":"session_start","input":"Send an email to alice@example.com saying the quarterly report is ready","sessionId":"2ce71447-485c-4b59-8f32-a0eee640899c","chatId":"2ce71447-485c-4b59-8f32-a0eee640899c","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:38:19.255Z","step":"session_end","output":"Email sent to alice@example.com: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready. Please review it at your earliest convenience.\" (simulated).","toolCallCount":1,"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:38:19.228Z","step":"observe","tool":"send_email","observation":"Email sent to alice@example.com: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready. Please review it at your earliest convenience.\" (simulated).","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:38:19.228Z","step":"execute","tool":"send_email","args":{"input":"To: alice@example.com\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready. Please review it at your earliest convenience."},"observation":"Email sent to alice@example.com: subject=\"Quarterly Report Ready\", body=\"The quarterly report is ready. Please review it at your earliest convenience.\" (simulated).","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:38:19.224Z","step":"hitl","tool":"send_email","args":{"input":"To: alice@example.com\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready. Please review it at your earliest convenience."},"humanDecision":"proceed","ruleId":"escalate-external-email","feedback":"","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:38:19.224Z","step":"session_start","input":"Proceed","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:37:32.124Z","step":"session_end","output":"\n\n**Policy escalation** (rule: `escalate-external-email`): Sending email to an external address requires human approval.\n\nAttempting to use tool:\n```json\n{\n \"name\": \"send_email\",\n \"args\": {\n \"input\": \"To: alice@example.com\\nSubject: Quarterly Report Ready\\n\\nThe quarterly report is ready. Please review it at your earliest convenience.\"\n },\n \"id\": \"chatcmpl-tool-831d5eb011240250\",\n \"type\": \"tool_call\"\n}\n```","toolCallCount":0,"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:37:32.076Z","traceId":"c361ffddabe354bf","step":"policy_decision","tool":"send_email","args":{"input":"To: alice@example.com\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready. Please review it at your earliest convenience."},"ruleId":"escalate-external-email","effect":"escalate","message":"Sending email to an external address requires human approval.","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:37:32.075Z","traceId":"c361ffddabe354bf","step":"propose","tool":"send_email","args":{"input":"To: alice@example.com\nSubject: Quarterly Report Ready\n\nThe quarterly report is ready. Please review it at your earliest convenience."},"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:37:31.265Z","step":"session_start","input":"Send an email to alice@example.com saying the quarterly report is ready","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:35:40.652Z","step":"session_end","output":"[POLICY_DENIED] Destructive DB mutations are forbidden by policy.","toolCallCount":1,"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:35:40.617Z","traceId":"36a0e5a754b04952","step":"policy_decision","tool":"delete_database","args":{"input":"users"},"ruleId":"deny-destructive","effect":"deny","message":"Destructive DB mutations are forbidden by policy.","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:35:40.616Z","traceId":"36a0e5a754b04952","step":"propose","tool":"delete_database","args":{"input":"users"},"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:35:39.860Z","step":"session_start","input":"delete all users from db","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:37.564Z","step":"session_end","output":"Weather in Chennai: sunny, 72°F","toolCallCount":1,"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:37.522Z","traceId":"5e1922ad393c4739","step":"observe","tool":"get_weather","observation":"Weather in Chennai: sunny, 72°F","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:37.521Z","traceId":"5e1922ad393c4739","step":"execute","tool":"get_weather","args":{"input":"Chennai"},"observation":"Weather in Chennai: sunny, 72°F","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:37.511Z","traceId":"5e1922ad393c4739","step":"policy_decision","tool":"get_weather","args":{"input":"Chennai"},"ruleId":"allow-safe-read","effect":"allow","message":"Read-only weather lookup is always permitted.","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:37.511Z","traceId":"5e1922ad393c4739","step":"propose","tool":"get_weather","args":{"input":"Chennai"},"sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
{"ts":"2026-05-25T02:34:36.971Z","step":"session_start","input":"whats the chennai weather","sessionId":"c2324908-bdd3-4692-8908-4fe89cd35841","chatId":"c2324908-bdd3-4692-8908-4fe89cd35841","nodeId":"agentAgentflow_0"}
Loading