ForgeLayer

Private beta Policy Control Center

Define the rules AI software work must follow before it can proceed.

Explore repository boundaries, protected and sensitive paths, tests, verification, approvals, rollback, security, execution, and GitHub restrictions derived from RepoBrain and the shared sample forgelayer.yml.

Review policiesTask Policy ContextRepository boundariesRepository scope foundationOpen RepoBrainRequired VerificationRequired EvidencePolicy RequirementsRestricted CapabilitiesAgent RestrictionsMergeGuardGoverned Work RecordReadinessPolicy Analytics
Active internal workflow gateLocal state onlyRepository writes: falseGeneric human-approval policy

Executable Policy Engine v1

One deterministic gate, with every intervention explained.

The evaluator retains all matching rules, applies documented precedence, separates policy from platform capability state, and fails closed when policy is invalid or unavailable. It cannot grant a capability.

Sourcedemo:forgelayer-private-beta-policy
Source statusloaded
Version1.0.0-demo
Validationvalid
Rules5
Enabled4
Disabled1
Persistencefalse

Deterministic precedence

  1. Platform hard prohibition
  2. Invalid or unavailable policy
  3. Explicit deny or block rule
  4. Revoked or suspended repository or task authority
  5. Budget violation
  6. Missing required verification
  7. Missing required evidence
  8. Missing required approval
  9. Conditional allowance
  10. Allowed preview

Platform hard boundaries

  • authentication · globally disabled
  • persistence · globally disabled
  • repository_connection · globally disabled
  • repository_metadata_access · globally disabled
  • repository_content_access · globally disabled
  • repository_write · globally disabled
  • branch_creation · globally disabled
  • commit_creation · globally disabled
  • pull_request_creation · globally disabled
  • github_posting · globally disabled
  • workflow_dispatch · globally disabled
  • agent_dispatch · globally disabled
  • external_agent_call · globally disabled
  • command_execution · globally disabled
  • network_access · globally disabled
  • automatic_merge · globally disabled
  • billing · globally disabled
  • production_telemetry · globally disabled

Affected Controlled Tasks

Focused deterministic evaluations

These snapshots are derived from explicit demo policy data. They are not live repository policy, production telemetry, or authorization.

blockedpolicy-snapshot-5cc8bbf1

secure payment webhook

Policy decision
blocked budget exceeded
Matched rules
payments-protected-path
Current missing evidence / verification
evidence:security_review_evidence, evidence:rollback_plan, verification:payment_webhook_security, verification:auth_session_boundary
Policy approval definition
owner
Approval requirement status
satisfied
Current effective authority
blocked platform
Blocked capabilities
automatic_merge, command_execution, github_posting, repository_write
Current next controlled action
Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.
Open task policy evaluation
blockedpolicy-snapshot-d8a299d8

harden risky prompt

Policy decision
blocked missing verification
Matched rules
prompt-security-review
Current missing evidence / verification
evidence:promptforge_analysis, verification:prompt_injection_security_tests
Policy approval definition
reviewer
Approval requirement status
approval revoked
Current effective authority
revocation active
Blocked capabilities
automatic_merge, external_agent_call, github_posting, repository_write
Current next controlled action
Keep current authorization revoked. Current authorization is revoked. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.
Open task policy evaluation
blockedpolicy-snapshot-69ecde00

investigate failing tests

Policy decision
blocked missing verification
Matched rules
failing-tests-evidence
Current missing evidence / verification
evidence:failing_test_output, evidence:passing_rerun_output, verification:test_failure_reproduced, verification:test_remediation_verified
Policy approval definition
reviewer
Approval requirement status
satisfied
Current effective authority
kill switch active
Blocked capabilities
automatic_merge, command_execution, github_posting, repository_write, workflow_dispatch
Current next controlled action
Keep workflow progression blocked by the active kill switch. An active kill switch blocks workflow progression. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.
Open task policy evaluation

Approval Authority foundation

Approval is bound to one exact work state.

Authority, approval, revocation, kill switches, verification, and execution transport remain separate control dimensions.
Open Approval Center

secure payment webhook

Approval requirement satisfied. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

blocked platform
Required authority
workspace owner
Principal
Demo workspace owner / demo authority
Exact object
controlled-task-secure-payment-webhook
Repository
repository-identity-secure-payment-webhook
Risk / budget
HIGH / task-budget-secure_payment_webhook-v1
Dispatch authorization
dispatch-authorization-preview-db15b2cd
Verification plan
verification-plan-2458e6d26e940ec0
Evaluated at
2026-08-10T08:38:25.041Z
Grant expiry
2030-07-11T09:00:00.000Z / not expired
Capability expiry
2030-07-29T09:00:00.000Z / not expired
Current authority
blocked platform
Approval requirement
Satisfied
Historical grant state
granted
Revocation
not revoked
Kill switch
inactive
Verification
incomplete
Repository runners
not run / blocked platform
Execution transport
disabled

Approval requirement satisfied. Repository verification has not run, and execution transport remains disabled.

Controlled TaskWork RecordReview RunVerification Plan

harden risky prompt

Keep current authorization revoked. Current authorization is revoked. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

revocation active
Required authority
prompt security reviewer
Principal
Demo prompt-security reviewer / demo authority
Exact object
controlled-task-harden-risky-prompt
Repository
repository-identity-harden-risky-prompt
Risk / budget
HIGH / task-budget-harden_risky_prompt-v1
Dispatch authorization
dispatch-authorization-preview-ec038137
Verification plan
verification-plan-d17b2a5528b4be7a
Evaluated at
2026-08-10T08:38:25.041Z
Grant expiry
2030-07-11T09:00:00.000Z / not expired
Capability expiry
2030-07-29T09:00:00.000Z / not expired
Current authority
revocation active
Approval requirement
approval revoked
Historical grant state
granted
Revocation
revoked
Kill switch
inactive
Verification
incomplete
Repository runners
not run / blocked platform
Execution transport
disabled

A historical approval exists, but current authorization is revoked.

Controlled TaskWork RecordReview RunVerification Plan

investigate failing tests

Keep workflow progression blocked by the active kill switch. An active kill switch blocks workflow progression. Repository verification has not run. Execution transport is disabled. Dispatch remains disabled.

kill switch active
Required authority
engineering approver
Principal
Demo engineering approver / demo authority
Exact object
controlled-task-investigate-failing-tests
Repository
repository-identity-investigate-failing-tests
Risk / budget
MEDIUM / task-budget-investigate_failing_tests-v1
Dispatch authorization
dispatch-authorization-preview-683d375f
Verification plan
verification-plan-b860ede3565b9a00
Evaluated at
2026-08-10T08:38:25.041Z
Grant expiry
2030-07-11T09:00:00.000Z / not expired
Capability expiry
2030-07-29T09:00:00.000Z / not expired
Current authority
kill switch active
Approval requirement
Satisfied
Historical grant state
granted
Revocation
not revoked
Kill switch
active
Verification
incomplete
Repository runners
not run / blocked platform
Execution transport
disabled

An approval exists, but workflow progression is blocked by an active kill switch.

Controlled TaskWork RecordReview RunVerification Plan

Read-only normalized example

Strict forgelayer.yml v1 shape

The restricted parser rejects unknown fields, unsafe YAML features, duplicate rule IDs, unsafe paths, oversized input, and malformed policy. No silent fallback occurs.

id: forgelayer-private-beta-policy
version: 1.0.0-demo
status: active
source:
  type: deterministic_demo_policy
  identifier: demo:forgelayer-private-beta-policy
  status: loaded
  workspaceId: demo-workspace-forgelayer
  repositoryId: repository-identity-secure-payment-webhook
  loaded: true
  demo: true
  repositoryDerived: false
  persisted: false
  platformDefined: false
rules:
  - id: payments-protected-path
    title: Protect payment and authentication changes
    status: enabled
    priority: critical
    effect: conditional
    scope:
      workspaceId: demo-workspace-forgelayer
      repositoryId: repository-identity-secure-payment-webhook
    match:
      taskCategories:
        - security_review
      protectedPaths:
        - value: app/api/payments
          scope: directory
    requirements:
      evidenceTypes:
        - security_review_evidence
        - rollback_plan
      verificationTypes:
        - payment_webhook_security
      approverRoles:
        - owner
      requireAllApproverRoles: true
    restrictions:
      blockedCapabilities:
        - repository_write
        - command_execution
        - github_posting
        - automatic_merge
      maximumTokenBudget: 14000
      maximumTimeBudgetMinutes: 40
      permittedNetworkState: disabled
    explanation: Payment paths require stronger controls.
    remediation: Complete verification, evidence, and owner approval.
Trust boundariesFuture repository policy source

Policy rule explorer

Rules, evidence, requirements, and human control

Each rule shows its configuration source, affected work, deterministic result, and remaining human action without claiming production enforcement.

10 preview policiesNon-persistentNot production telemetry
10Total policiesDeterministic preview
1SatisfiedDeterministic preview
1ViolatedDeterministic preview
3Needs reviewDeterministic preview
2MissingDeterministic preview
1BlockedDeterministic preview
9Approval rule definitionsDeterministic preview
10Verification requiredDeterministic preview
1Protected-path rulesDeterministic preview
1Sensitive-path rulesDeterministic preview
Policy rule explorer

Loading policy preview

Preparing deterministic policy rules locally. No repository or network action is occurring.