Skip to content
BLACKLAKE
Sign up free
Docs▾ docs nav

Capture path · ci

CI pipeline

Gate deploys, code-mod runs, and other CI actions on a governed BlackLake decision. Same SDK; the actor is the pipeline.

Use the same `bl.govern({...})` call from your CI script — set `context.session = { user: 'github-action:deploy', machine: 'ci.acme.com', repo, branch, cwd, tool_client: 'github-actions' }` so the audit trail attributes the action to the pipeline, not a person. The decision token can be inspected by reviewers without sharing the SDK key (anonymous verify endpoint). Pair with `bl.cost.record` after each LLM call your CI step makes so cost rolls up against the `source: ci` bucket on `/v1/insights/coverage`.