The failure mode platform teams recognize
An engineering agent gets a housekeeping task: close out stale tickets and tidy the board before the quarter ends. Somewhere in its plan, "tidy" escalates — an old project looks abandoned, the cleanest fix is removal, and the agent has a token that does not know the difference.
The explanation it writes will sound reasonable. That is the problem: destructive actions justified fluently are still destructive. Restoring a deleted Jira project — its tickets, history, and automations — is hours of work when it is possible at all.
What AgentGovernance demonstrates
The live control plane includes this exact scenario: an agent attempts "Delete Jira project ATLAS" and the action lands as a blocked verdict in the recent-actions feed — before the API call runs, with the attempt, the policy, and the verdict on the record.
Category block, not vibes
Destructive deletes on shared systems are blocked by policy — the verdict does not depend on how convincing the agent's reasoning reads.
Before the call, not after
The gate evaluates the action pre-execution. There is no cleanup job racing a deletion that already happened.
Blocked is a recorded outcome
The attempt is logged with agent, target, policy, and timestamp — auditors see what the agent tried, not just what succeeded.
Fast lanes stay fast
Comment, transition, and label actions keep running without approval. Only the irreversible category stops.
The first policy to ship
- Destructive deletes on shared systems (Jira, GitHub, DBs, cloud) never auto-run.
- Archive and bulk-edit actions route to a named owner for approval.
- Every blocked attempt is logged with agent identity, target, and policy version.
- Reversible hygiene actions (comments, transitions, labels) stay ungated.
- Review blocked attempts weekly — repeated tries are a signal, not noise.
Related guides
The same category logic governs money and external sends — see the refund-above-limit approval and external-party actions. Destructive deletes are simply the engineering slice of the same rule: irreversible actions need more than an agent's confidence.