14:02:31ingeststep.startclassify ticket TCK-1

Reference

Clone and run

The whole stack runs on your machine: clone, bring up the containers, play scenario one end to end. There is no live LLM endpoint in the deployed site; the agent runs here, and the deployed pages render captured traces and live Cedar decisions from those runs.

  1. 01

    Clone

    Apple Silicon and x86 Linux are both supported. You need Docker and pnpm.

    shell
    git clone https://github.com/Sart-Hack/governed-support-agent.git
cd governed-support-agent
pnpm install
  2. 02

    Bring up the stack

    Postgres, Langfuse, Bifrost, and the four MCP mock servers come up in containers. The verify step waits for every healthcheck before returning.

    shell
    pnpm stack:up
pnpm stack:verify
  3. 03

    Play a scenario

    Run scenario one end to end through the governed workflow. The Cedar checks, audit log, and OTel trace are real; the trace lands in Langfuse on localhost:3001.

    shell
    pnpm demo          # scenario 1 (TCK-1)
pnpm demo TCK-5    # the delete-account refusal

Five minutes after the clone, a peer engineer can answer the question this whole repo is built around: what does this agent refuse to do, and why?

https://github.com/Sart-Hack/governed-support-agent →