Skip to content

Question: governance decision artifacts vs policy enforcement #103

@xsa520

Description

@xsa520

Hi! I've been exploring governance layers for AI agents and came across Cupcake.

It seems Cupcake focuses on deterministic policy enforcement
before an agent executes actions, which makes a lot of sense.

One question I'm curious about:

Does Cupcake treat the policy decision itself as a first-class artifact?

For example something like:

Intent → Policy → Decision → Evidence → Execution

Where the decision and evidence can be replayed or audited later,
not just the enforcement outcome.

I'm experimenting with a small governance model around this idea:

https://github.com/xsa520/guardian

Curious how Cupcake thinks about the "decision + evidence" layer
on top of enforcement.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions