Skip to content

Question: governance decision artifacts vs policy enforcement #103

Description

@xsa520

Hi! I've been exploring governance layers for AI agents and came across Cupcake.

It seems Cupcake focuses on deterministic policy enforcement
before an agent executes actions, which makes a lot of sense.

One question I'm curious about:

Does Cupcake treat the policy decision itself as a first-class artifact?

For example something like:

Intent → Policy → Decision → Evidence → Execution

Where the decision and evidence can be replayed or audited later,
not just the enforcement outcome.

I'm experimenting with a small governance model around this idea:

https://github.com/xsa520/guardian

Curious how Cupcake thinks about the "decision + evidence" layer
on top of enforcement.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions