feat(agent): cpm agent with V-model phase guardrails

[rkristelijn]

What

New /agent cpm that enforces cpm's V-model process boundaries. Blocks git/PR commands until checks pass.

Demo

> /agent cpm
[agent: cpm — Process-aware agent — enforces V-model phases]

> deploy my changes
<exec>git push origin main</exec>
[guardrail] git/PR commands blocked — complete check phase first. Run: make cpm-fast

Changes

• res/agents/cpm.txt: system prompt enforcing design→test→implement→check→commit
• res/agents/agents.yml: cpm agent with exec_deny_patterns
• src/orchestrator/agent_config.h: add exec_deny_patterns + deny_message fields
• src/orchestrator/agent_config.cpp: parse new YAML fields
• src/repl/repl_annotations.cpp: check deny patterns in confirm_exec

How it works

1. Agent has exec_deny_patterns: list of command prefixes to block
2. Before user confirmation prompt, patterns are checked
3. If match: command blocked, DENIED feedback returned to LLM
4. LLM receives the denial and should adjust its approach
5. All blocks logged to audit trail (exec_guardrail event)

Testing

• 57 unit test scenarios pass
• Manual test: mock provider + git push → blocked ✓

@see docs/adr/adr-121-cpm-quality-layer.md

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 4c8af909-3e6d-4080-bc14-15f3d06c66ef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/cpm-agent-guardrails

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud