Set Coding Agent Guardrails with DevOps Center Governance (Developer Preview)

Six predefined policies are available out of the box. They cover critical risks such as SOQL injection, unauthorized data access, destructive commands, and direct deployments to production.

Govern how coding agents operate across your Salesforce org with DevOps Center Governance. This feature provides a centralized policy enforcement layer. It guides coding agents and developer actions that violate your organization's security and compliance rules across Agentforce Vibes coding agents— at the point of action.

Note In this release, all policies are Salesforce-defined and apply to Agentforce Vibes coding agents. Governance must be configured from the Hub org. Sandbox orgs are connected to the Hub org to import governance policies.

Where: This change applies to Lightning Experience in Professional (API access required), Enterprise, Performance, Unlimited, and Developer editions.

Note This change is in developer preview and is subject to the Beta Services Terms at Agreements - Salesforce.com or a written Unified Pilot Agreement, if executed by Customer. Its use is at the Customer's sole discretion.

When: This change is available on a rolling basis starting July 31, 2026.

Who: This change is available to users with a DevOps Center Admin permission set to enable policies. Agentforce Vibes users to view active policies in read-only mode.

Why: As AI tools become capable of writing code, deploying changes, and running commands autonomously, organizations need a reliable way to ensure those actions stay secure and compliant. DevOps Center Governance guides coding agents to enforce your rules automatically, without requiring developers to manually apply standards each time.

How: In the next-generation DevOps Center Home tab, click Manage Features, and then turn on Governance. View Policy Controls in the Governance tab.