Sep 2026· ACM Transactions on Software Engineering and Methodology· 1 citation· 28 references
TL;DR
This work presents a framework for defining and enforcing governance policies via a Domain-Specific Language (DSL) and an executable decision engine and extends the core language with bindings for GitHub and GitLab and provides a form-based editor to ease authoring.
Abstract
Software development increasingly involves heterogeneous stakeholders, including diverse human contributors and AI-powered agents. This amplifies governance challenges around transparency, participation, and accountability, particularly in Open-Source Software (OSS) projects where policies are usually implicit. Building on our prior vision paper, we present a framework for defining and enforcing governance policies via a Domain-Specific Language (DSL) and an executable decision engine. The DSL captures scopes, roles and individuals (with weighted participation and profiles), policy composition and deadlines, and platform-aware conditions. The engine operationalizes policies over collaboration events and records votes, rationales, and timestamps for traceability. We extend the core language with bindings for GitHub and GitLab and provide a form-based editor to ease authoring. We evaluate expressivity by formalizing existing GOVERNANCE.md files from a curated dataset and demonstrate enactment by reproducing three governance policies from different GitHub repositories.
The Specification Governance and Validation Framework is proposed, a design-science artifact that treats structured specifications as an external control plane for agentic software engineering and provides a reproducible governance model and a basis for future empirical validation of specification-driven enterprise AI...
S. Suryawanshi· World Journal of Advanced Re...· 0 citations
The Unified Policy Architecture is introduced, a governance architecture for Enterprise AI Operating Systems that provides a unified policy model for governing AI and agents, tools, workflows, memory, enterprise resources, and agent-to-agent interactions and enterprise business rules.
Prabhu Raghav, B. Pandi, A. Vivek et al.· 0 citations
SWE-Prometheus is presented, a benchmark for the broader task of improving repository engineering governance, showing why repository-governance evaluation should report improvement, behavior preservation, evidence quality, and coverage together.
Jia-Jun Wu, Lei-Xin Sun, Zi-Hang Tan et al.· 0 citations
The AI Contribution Governance Framework is introduced, which organizes recurring concerns and governance mechanisms across projects and helps OSS communities develop AI contribution policies and provides researchers with a vocabulary for studying how AI is changing collaborative software production.
The results support the technical feasibility of replacing human execution of specified governance-review tasks with agents and software, and derive a residual-work threshold and show why automating most cases can still increase labor.
AI agents increasingly enter practitioner workflows through delegated, multi-step tasks, such as data analysis, document review, coding, and summarization. Existing governance debates tend to emphasize provider-level technical governance, which steers general model behavior, and policy, which defines the boundaries of...
Nick Hagar, Nick Diakopoulos· AI and Ethics· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.