Zum Hauptinhalt springen
Dieser Inhalt ist noch nicht in Ihrer Sprache verfügbar und wird auf Englisch angezeigt.

Review Agent Governance

Plugin Verifiziert Aktiv

Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI config. Cedar-gated, receipt-signed, designed for the Hermes-style failure mode where a review bot posts without oversight.

1 Skill 0 MCPs
Zweck

To prevent AI agents from making unauthorized or erroneous changes to code reviews, PRs, or CI configurations by requiring explicit human approval and providing a cryptographically verifiable audit trail.

Funktionen

  • Mandatory human approval for review-surface actions
  • Cedar policy for declarative gating
  • Ed25519-signed receipts for auditability
  • Slash commands and flag files for approval windows
  • Automatic denial of unauthorized actions

Anwendungsfälle

  • Ensuring human oversight on AI-generated PR reviews.
  • Preventing AI agents from merging code without explicit human sign-off.
  • Auditing all AI agent actions on code review surfaces.
  • Controlling AI agent modifications to CI/CD workflow files.

Nicht-Ziele

  • General policy enforcement for all tool calls (use `protect-mcp` for this).
  • Replacing the need for human review entirely.
  • Automating the approval process itself.

Installation

Zuerst Marketplace hinzufügen

/plugin marketplace add wshobson/agents
/plugin install review-agent-governance@claude-code-workflows

Qualitätspunktzahl

Verifiziert
99 /100
Analysiert 2 days ago

Vertrauenssignale

Letzter Commit4 days ago
Sterne35.3k
LizenzMIT
Status
Quellcode ansehen