Skip to content

Question: governance decision artifacts vs policy enforcement #103

Description

@xsa520

Hi! I've been exploring governance layers for AI agents and came across Cupcake.

It seems Cupcake focuses on deterministic policy enforcement
before an agent executes actions, which makes a lot of sense.

One question I'm curious about:

Does Cupcake treat the policy decision itself as a first-class artifact?

For example something like:

Intent → Policy → Decision → Evidence → Execution

Where the decision and evidence can be replayed or audited later,
not just the enforcement outcome.

I'm experimenting with a small governance model around this idea:

https://github.com/xsa520/guardian

Curious how Cupcake thinks about the "decision + evidence" layer
on top of enforcement.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions