CodeSteward AI

Intelligent governance for every line of code

CodeSteward AI is an enterprise-grade AI orchestration system built on the GitLab Duo Agent Platform. It transforms codebase architecture into an interactive semantic graph, automating intelligent review routing, secret detection, governance policies, release notes generation, CODEOWNERS updates, and carbon footprint measurement.

---

🌟 Key Features Across 6 DevSecOps Stages

Stage	Agent / Module	Key Functionality
Verify	Verify Agent	Semantic AST parsing & BFS dependency ripple impact analysis
Secure	Security Sentinel	Scans MRs for .env/secrets, blocks merges & auto-assigns @security-team
Configure	CODEOWNERS Updater	Detects unowned file patterns and generates automated CODEOWNERS MRs
Release	Release Notes Gen	Categorizes MR changes into Features, Fixes, Security & Docs Markdown notes
Monitor	Rollback Predictor	Machine learning risk model predicting rollback probability (0–100)
Govern	Govern Agent	Subsystem impact scoring & dynamic multi-group approver assignment

---

🌱 Software Carbon Intensity (SCI) Metrics

Implements the Green Software Foundation SCI specification ($SCI = (E \times I) + M$):

• Baseline Review Duration: 4 hours (240 mins) manual review cycle.
• CodeSteward AI Automated Duration: 5 minutes automated review cycle.
• Estimated Savings: ~15.04 kg CO₂eq saved per MR (~235 minutes saved per review cycle).
• Badge: 🌱 A+ ULTRA LOW CARBON (High Impact).

---

☁️ Google Cloud Platform (GCP) Deployment

Built for scale on Google Cloud Run with Secret Manager integration:

# Deploy container to GCP Cloud Run
gcloud run deploy codesteward-ai \
  --image gcr.io/[MY_PROJECT_ID]/codesteward-ai:latest \
  --platform managed \
  --region us-central1 \
  --set-secrets="OPENAI_API_KEY=OPENAI_KEY:latest,CODESTEWARD_API_SECRET=GITLAB_TOKEN:latest"

---

⚡ Quick Start

# 1. Start CodeSteward AI Backend & Frontend
sh codesteward/codesteward-start.sh

# 2. Run Security Sentinel & SCI Analysis on an MR
curl -X POST http://localhost:8000/api/repos/analyze-by-url \
  -H "X-API-Key: codesteward-api-key" \
  -H "Content-Type: application/json" \
  -d '{
    "repo_url": "https://github.com/your-org/pulse.git",
    "source_root": "pulse",
    "source_branch": "feature/task-due-reminders",
    "target_branch": "main"
  }'

---

🎬 Demo & Links

• Demo Video: Watch 3-Minute Demo Video
• Live Cloud Run Deployment: https://codesteward-ai-uc.a.run.app
• Interactive 3D Graph UI: http://localhost:3000

---

📜 License

MIT License. Copyright (c) 2026-present Antony Jenish.