Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries
33 commits that changed nothing in the app are hidden. Show them
19runs
12live
1rolled back
3refused or stopped
2human actions

Runs, newest first

GitLab DevSecOps stages, lit when the run touched them (hover a chip for its artifacts):PlPlanCrCreateVeVerifyPkPackageSeSecureReReleaseCoConfigureMoMonitorGoGovern
RunSubjectTier OutcomeStartedDurationDevSecOps stages
#12Add GET /items/count endpointT1live, issue closed12 Oct 20:57:4817 min 19 s
PlCrVePkSeReCoMoGo
e6202d02fix(telemetry): start a new trace per request instead of Cloud Run'sT2live12 Oct 18:23:0610 min 04 s
PlCrVePkSeReCoMoGo
3650aa17fix(telemetry): export spans before the last response byteT2live12 Oct 18:02:0711 min 01 s
PlCrVePkSeReCoMoGo
#11Incident: SLO breach on app-00063-suh (e0574f5a)T3live, issue closed12 Oct 17:23:0732 min 00 s
PlCrVePkSeReCoMoGo
e0574f5a[demo] injected regressionT3rolled back12 Oct 17:19:064 min 01 s
PlCrVePkSeReCoMoGo
dffd77e9revert: [demo] injected regression (Gate 4 run 2)T3live12 Oct 16:38:0920 min 58 s
PlCrVePkSeReCoMoGo
d7daa7defix(app): strip whitespace from the Unleash instance IDT1live12 Oct 16:31:066 min 02 s
PlCrVePkSeReCoMoGo
c182de9bfix(governor): a dark launch only soaks once the canary shows the flag onT1live12 Oct 16:25:065 min 02 s
PlCrVePkSeReCoMoGo
592fb22d[demo] injected regressionT3promoted with unverified flag, then made safe12 Oct 15:39:0637 min 10 s
PlCrVePkSeReCoMoGo
1 human
#10Security finding: Use of cryptographically weak pseudo-random number generator (PRNG) in app/users.py-remediation flow12 Oct 15:36:081 s
PlCrVePkSeReCoMoGo
ac2d27a9revert: [demo] injected regression (Gate 4 run 1 stopped in CI lint)T1live12 Oct 15:27:065 min 03 s
PlCrVePkSeReCoMoGo
351282d6feat(governor): export OpenTelemetry from the governor serviceT2live12 Oct 14:13:0711 min 01 s
PlCrVePkSeReCoMoGo
!4MR !4: removes SAST jobT4refused (T4)12 Oct 14:22:080 s
PlCrVePkSeReCoMoGo
#9Security finding: Use of cryptographically weak pseudo-random number generator (PRNG) in app/flags.py-remediation flow12 Oct 14:14:172 s
PlCrVePkSeReCoMoGo
#8Security finding: Server-side request forgery (SSRF) in scripts/verify_decision.py-remediation flow12 Oct 14:14:142 s
PlCrVePkSeReCoMoGo
#7Security finding: GitLab personal access token in governor/tests/test_orchestrator.py-refused (T4)12 Oct 14:14:120 s
PlCrVePkSeReCoMoGo
#6Add GET /stats endpointT1live, issue closed12 Oct 13:10:0533 min 01 s
PlCrVePkSeReCoMoGo
#5Add DELETE /items/{item_id} endpointT1live, issue closed12 Oct 08:49:064 h 05 min
PlCrVePkSeReCoMoGo
1 human
#4Add GET /items/{item_id} endpoint-stopped: delivery flow never started, 4 requests (passed in #5)
owner note: Flows API 404 (fixed in run 2)
12 Oct 01:03:037 h 40 min
PlCrVePkSeReCoMoGo