Governance & RBAC
Prompt changes can materially affect product behavior. Mature teams define clear roles and protected environments.
Recommended roles
- Owners: can promote to production
- Editors: can draft and propose changes
- Readers: can view prompts and versions
Protected production
Protect production with:
- promotion-only access (no direct editing)
- required reviewers for changes
- audit log retention for prompt versions
Guardrails
Add guardrails around:
- model upgrades for production prompts
- tool allowlists (prevent unsafe tools)
- token budgets and max output sizes