Inspiration

AI agents are moving from chat into real enterprise action: they can repair code, trigger browser/RPA workflows, query data, update records, write customer responses, and coordinate with other agents. The risk is that an agent can look successful while leaking data, skipping approval, mutating production, weakening tests, or inventing evidence.

AgentGuard CI was built for UiPath AgentHack Track 3: UiPath Test Cloud. The core question is: before an AI agent is allowed into a real workflow, can we test whether its action is evidence-backed, bounded, reversible, and routed to a human when needed?

What it does

AgentGuard CI is a reliability firewall for enterprise AI agents. It runs repeatable agent failure scenarios and classifies each result as:

  • Promote: evidence-backed and safe enough to continue.
  • Review: useful, but requires a human decision.
  • Block: unsafe, overconfident, destructive, missing approval, or missing evidence.

The prototype includes a command-backed code-repair suite, a live-local enterprise agent adapter suite across browser/RPA, data, support, workflow, document, finance, HR, CRM, SOC, knowledge, and multi-agent scenarios, plus JSON, Markdown, JUnit, and Test Cloud-style evidence packets.

How UiPath is used

The project is designed around UiPath Test Cloud as the governance layer for agent reliability testing. AgentGuard maps each failure mode into a repeatable Test Cloud-style case, attaches evidence artifacts, and produces a clear promote/review/block decision that a human reviewer can inspect before a release or workflow action is trusted.

The UiPath Labs environment hosts the AgentGuard review-agent path and demonstrates the final review gate: AgentGuard evidence goes into UiPath, UiPath reviews the evidence, and the output is a release decision with risk score, rationale, and required follow-up.

How I built it

The system is a TypeScript monorepo with a React/Vite dashboard, Node.js scenario runners, and reliability-core packages. The architecture separates three layers:

  • Scenario runners execute repeatable agent failure modes.
  • Reliability gates normalize results into goal fidelity, tool boundary, evidence integrity, state safety, and human approval checks.
  • The dashboard and Test Cloud evidence model make every decision inspectable by judges, developers, and reviewers.

Challenges I ran into

The hardest part was making the product honest. It would be easy to claim broad agent support without evidence. Instead, AgentGuard separates command-backed tests, live-local deterministic traces, and UiPath-hosted review evidence so judges can see exactly what was tested.

Another challenge was making the UiPath integration visible. The current submission shows the integration as an evidence review gate: AgentGuard produces evidence, UiPath reviews it, and Test Cloud-style cases make the result repeatable.

Accomplishments that I'm proud of

  • A working AI-agent reliability gate with repeatable local verification.
  • Test Cloud-style evidence for code repair and enterprise agent scenarios.
  • Promote/review/block outcomes instead of vague pass/fail summaries.
  • A public GitHub repository with setup instructions, MIT license, deck, and evidence artifacts.
  • A UiPath Labs review-agent path that connects AgentGuard evidence to a hosted review decision.

What I learned

Agent testing is not just about whether an agent completed a task. It is about whether the action is safe enough to approve. AgentGuard turns reliability, security, and human approval into a repeatable testing workflow.

What's next

Next, I would connect the evidence packet directly into live UiPath Test Cloud cases, add richer Studio Web orchestration, and benchmark multiple coding and low-code agents under the same reliability contract.

Built With

  • agent-reliability
  • ai-agents
  • automation
  • ci
  • coded-agents
  • enterprise-ai
  • github-actions
  • governance
  • node.js
  • playwright
  • react
  • studio-web
  • typescript
  • uipath
  • uipath-test-cloud
  • vite
  • vitest
Share this project:

Updates

posted an update

UiPath Track 3 update: the public GitHub README is now optimized for judges.

What changed:

  • Added a 60-second review path at the top of the repository.
  • Added explicit UiPath components: Test Cloud, Studio Web/Labs, evidence artifacts, and coded-agent workflow.
  • Added hosted Labs evidence files, including validation notes, JSON capture, and deployment screenshot.
  • Kept the project reproducible with: npm install && npm run submission:check

GitHub: https://github.com/baiqidi/agentguard-ci

Log in or sign up for Devpost to join the conversation.

posted an update

DeveloperWeek submission refreshed: public demo video is live, the GitHub repo points to the dedicated codex/developerweek-ny branch, and npm run developerweek:check plus npm run video:check:developerweek verify the 17-scenario enterprise-agent reliability suite.

Log in or sign up for Devpost to join the conversation.

posted an update

DeveloperWeek code update: AgentGuard CI now has a dedicated DeveloperWeek submission gate.

  • Added npm run developerweek:check to rebuild the product, regenerate the live-local agent adapter suite, and verify the submission packet.
  • Added ?contest=developerweek dashboard mode plus judge-facing Progress / Concept / Feasibility / Enterprise relevance panels.
  • Evidence packets now target DeveloperWeek NY Agent CI Gate and write developerweek-ci-evidence.json.
  • Added a GitHub Actions workflow that runs the same gate and uploads developerweek-agentguard-evidence.

Latest branch: https://github.com/baiqidi/agentguard-ci/tree/codex/developerweek-ny

Log in or sign up for Devpost to join the conversation.

posted an update

Post-submission polish for FIND EVIL:

  • Added a judge-first README entry point for AgentGuard IR.
  • Published the public demo video: https://youtu.be/CTRoxgFSGlg
  • Expanded the replayable DFIR coverage to five checkpoints: disk persistence, authentication-log accuracy, containment approval, Windows Event Log lateral movement, and memory process tree triage.
  • Kept the project reproducible with one command: npm install && npm run sans:check. This regenerates the SIFT-compatible evidence packet, execution log, accuracy report, and judge summary.

The Devpost GitHub link now points directly to the FIND EVIL submission branch so reviewers land on the contest-specific README and evidence path.

Log in or sign up for Devpost to join the conversation.