Governing AI Coding Agents (ADLC)

const engine = new TealEngine({
  policies: {
    tools: {
      file_write: { allowed: true, allowed_paths: ['src/**', 'tests/**'] },
      file_delete: { allowed: false },
      shell_execute: { allowed: true, allowed_commands: ['npm test', 'npm run build'] },
      git_push: { allowed: false }  // requires human approval
    }
  },
  mode: { defaultMode: PolicyMode.ENFORCE }
});

const secrets = new TealSecrets({
  scan_targets: ['code_output', 'commit_message', 'tool_arguments'],
  on_detect: 'DENY',  // block the operation
  confidence_threshold: 0.7
});

const budget = new BudgetManager(storage);
budget.createBudget({
  name: 'Coding Agent Session Budget',
  limit: 5.0,        // $5 per session
  period: 'session',
  action: 'DEGRADE',  // switch to cheaper model instead of blocking
  enabled: true
});

const circuit = new TealCircuit({
  failureThreshold: 3,
  resetTimeout: 30000
});

const reliability = new TealReliability({
  retry: { maxAttempts: 2, budgetMs: 10000 },
  fallback: { chain: ['gpt-4', 'gpt-3.5-turbo'] },
  degrade: { strategy: 'cheaper_model' }
});

const audit = new TealAudit({
  outputs: [new FileOutput('./governance-audit.jsonl')],
  config: {
    input_redaction: RedactionLevel.HASH,
    detect_pii: true
  }
});

// Export for CI/CD
const sarif = tealverify.exportSarif('./governance-results.sarif');

const memory = new TealMemory({
  adapter: localAdapter,
  defaultScope: 'SESSION',
  defaultTtlMs: 3600000  // 1 hour
});

// Policy: no secrets or PII in agent memory
// memory.write.deny_if.secrets = true
// memory.write.deny_if.pii = true

import {
  TealOpenAI, TealEngine, TealSecrets, TealReliability,
  TealAudit, PolicyMode, RedactionLevel
} from 'tealtiger';

// Configure governance for a coding agent
const engine = new TealEngine({
  policies: {
    tools: {
      file_write: { allowed: true },
      file_delete: { allowed: false },
      shell_execute: { allowed: true, allowed_commands: ['npm test'] },
      git_push: { allowed: false }
    },
    cost: {
      budget_limit: { perSession: 5.0 }
    }
  },
  mode: { defaultMode: PolicyMode.ENFORCE }
});

const secrets = new TealSecrets({ on_detect: 'DENY' });
const audit = new TealAudit({
  outputs: [new FileOutput('./coding-agent-audit.jsonl')],
  config: { input_redaction: RedactionLevel.HASH }
});

const client = new TealOpenAI({
  apiKey: process.env.OPENAI_API_KEY,
  agentId: 'coding-agent-001',
  engine,
  secretsEngine: secrets,
  audit
});

// Agent operates with full governance
// - Tool calls checked against policy
// - Secrets detected in generated code
// - Cost tracked per session
// - Every decision audited with TEEC evidence