Skip to content

A Framework for Defining and Enforcing Governance Policies in Human-Agent Software Development

Sep 2026 · ACM Transactions on Software Engineering and Methodology · 1 citation · 28 references

TL;DR

This work presents a framework for defining and enforcing governance policies via a Domain-Specific Language (DSL) and an executable decision engine and extends the core language with bindings for GitHub and GitLab and provides a form-based editor to ease authoring.

Abstract

Software development increasingly involves heterogeneous stakeholders, including diverse human contributors and AI-powered agents. This amplifies governance challenges around transparency, participation, and accountability, particularly in Open-Source Software (OSS) projects where policies are usually implicit. Building on our prior vision paper, we present a framework for defining and enforcing governance policies via a Domain-Specific Language (DSL) and an executable decision engine. The DSL captures scopes, roles and individuals (with weighted participation and profiles), policy composition and deadlines, and platform-aware conditions. The engine operationalizes policies over collaboration events and records votes, rationales, and timestamps for traceability. We extend the core language with bindings for GitHub and GitLab and provide a form-based editor to ease authoring. We evaluate expressivity by formalizing existing GOVERNANCE.md files from a curated dataset and demonstrate enactment by reproducing three governance policies from different GitHub repositories.

View source

Similar papers

#software testing Open access Sep 2026

SPEC-DRIVEN DEVELOPMENT FOR ENTERPRISE AGENTIC SOFTWARE ENGINEERING: A GOVERNANCE FRAMEWORK FOR RELIABLE AI-GENERATED SOFTWARE

The Specification Governance and Validation Framework is proposed, a design-science artifact that treats structured specifications as an external control plane for agentic software engineering and provides a reproducible governance model and a basis for future empirical validation of specification-driven enterprise AI...

S. Suryawanshi · 0 citations
#artificial intelligence Preprint Sep 2026

A Unified Policy Architecture (UPA): The Governance Kernel for Enterprise AI Operating Systems

The Unified Policy Architecture is introduced, a governance architecture for Enterprise AI Operating Systems that provides a unified policy model for governing AI and agents, tools, workflows, memory, enterprise resources, and agent-to-agent interactions and enterprise business rules.

Prabhu Raghav, B. Pandi, A. Vivek et al. · 0 citations
#artificial intelligence Preprint Sep 2026

SWE-Prometheus: Measuring Engineering Governance Improvements in Real-World Repositories

SWE-Prometheus is presented, a benchmark for the broader task of improving repository engineering governance, showing why repository-governance evaluation should report improvement, behavior preservation, evidence quality, and coverage together.

Jia-Jun Wu, Lei-Xin Sun, Zi-Hang Tan et al. · 0 citations
Review Sep 2026

You can contribute if you... An Empirical Framework of AI Contribution Policies in OSS

The AI Contribution Governance Framework is introduced, which organizes recurring concerns and governance mechanisms across projects and helps OSS communities develop AI contribution policies and provides researchers with a vocabulary for studying how AI is changing collaborative software production.

G. Robles, D. German · 1 citation
Review Open access Aug 2026

Runtime configuration for situated governance of AI agents: a case study in investigative journalism

AI agents increasingly enter practitioner workflows through delegated, multi-step tasks, such as data analysis, document review, coding, and summarization. Existing governance debates tend to emphasize provider-level technical governance, which steers general model behavior, and policy, which defines the boundaries of...

Nick Hagar, Nick Diakopoulos · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.