Agent OS · Component · developer-runtime-governance
Local coding-agent execution governance
What it does
Normalize hook events from coding-agent runtimes (including custom ones) and decide allow, deny or approval before local tool execution; record the result.
Core pattern
Pre-action policy decisions + human permission and audit
- Input
- Runtime hook/tool event
- Output
- Execution decision and result audit
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| runtime | string | custom | coding_assistant · model_provider_code · custom |
| operation | string | — | — |
| mode | string | enforce | observe · enforce · broker |
| rules | — | — | — |
| fail_closed | boolean | true | false · true |
Maturity and limits
Runtime services, provider registration and tests are included. Source paths were inspected statically; tests and live integrations were not executed. This rating describes implemented code, not production validation.
Credential-bearing configuration is excluded from this inventory. Apache-2.0; provider terms apply. BYOK and operation scopes required. Live-ready labels are repository claims, not revalidated here; deferred/catalog-only operations are not normal callable features.
Used in pipelines
Industry tags
- Legal servicesTransferable use
For authorized desktop organization of case materials, use pre-action policy decisions followed by human permission and audit.
Skills pack
Reference pack with offline tests
Download · 18KBSHA-256 38ed94831b4235e38e05b5215385c90fe2fc6e5dbf8e5be0179bd403245a0c62
Related components
-
Collaborative delivery, approvals and evidence gates
Draft and artifact versioning + human handoff approval
Working 4 pipelines -
Tenant identity, enterprise SSO, provisioning and access control
Organization membership sync + scoped role access
Working 1 pipeline -
Retrieval ranking and authorization-boundary evaluation
Relevant and forbidden sample tests + retrieval boundary reports
Working not yet in a pipeline -
Browser login/session readiness toolkit
Session preparation + dependency readiness diagnosis
Working 1 pipeline