AgentGuard Update: Open Core, Break-Glass Governance – and the First Real Findings

Description and use

AgentGuard split into an open‑source engine and a Pro offering, added a transparent break‑glass policy with automated expiration, and demonstrated real findings of hidden characters. Teams can now block malicious PRs and manage exceptions via GitHub Issues.

Problem

Developers need a CI gate that blocks malicious or policy‑violating PRs while allowing legitimate exceptions to be managed transparently.

Outcome

AgentGuard now provides a transparent, auditable break‑glass mechanism and a clear open‑core/pro split, enabling teams to enforce security policies while managing legitimate exceptions. The tool’s self‑scanning in its own CI and real findings of hidden characters demonstrate its effectiveness.

Workflow

• 1. Fork or clone the AgentGuard repo. 2. Install the free GitHub Action in your repo. 3. Configure the action with your policy rules. 4. When a PR is opened, the action scans the diff. 5. If a violation is found, the PR is blocked and a comment is added. 6. To grant an exception, create a waiver issue with the required reviewers. 7. The guardian workflow runs weekly, comments on expired waivers, and closes them. 8. Monitor the action’s logs and the guardian issue for audit trails.

Evidence

Ein Waiver ist ein Issue – ein unveränderlicher Beleg, wer wann was ausgenommen hat.

Source

Zwei aktive Open‑Source‑Repos, zwei unsichtbare Zeichen…

Source