You are here:
Governance Policy Categories
Policies are grouped into 10 categories based on the type of risk they address. Each category contains a set of policies, and each policy contains a set of rules.
| Category | Description |
|---|---|
| Security | Protects against code-level vulnerabilities, unauthorized data access, and common attack vectors including injection, XSS, and CSRF. |
| Quality | Enforces coding standards and best practices to reduce technical debt and ensure long-term maintainability. |
| Agent Behavior | Restricts coding agents to safe, approved actions and prevents risky or unauthorized behavior. |
| Operational | Governs pipeline operations and deployment processes to maintain a traceable, controlled release workflow. |
| Performance | Prevents governor limit violations and resource-heavy patterns that degrade scalability in bulk data scenarios. |
| Architecture | Enforces layered architecture and modern platform patterns to keep codebases modular and extensible. |
| Testing | Ensures every change is validated with meaningful tests that meet coverage requirements before promotion. |
| Compliance | Enforces regulatory and organizational compliance requirements across encryption, access controls, and audit logging. |
| Agent Oversight | Keeps humans in control of AI agents by requiring human review and approval at key decision points. |
| AI Models | Controls which AI models coding agents can use, so development stays on your org's approved models. |
Did this article solve your issue?
Let us know so we can improve!
