feat(governance): audit pipeline — manager, console + traces sinks

[aditik0303]

Stacked PR 3/7 — part of splitting feat/governance-core into reviewable slices. Base: feat/governance-policy-loading. One logical slice (branch is cumulative so CI is green). Merge in order #1 → #7 and delete each branch on merge so the next PR auto-retargets onto feat/agentic-governance. feat/governance-core kept untouched as backup.

[Copilot]

Pull request overview

Adds a governance audit pipeline with pluggable sinks, introducing OpenTelemetry trace spans for Orchestrator Traces and a developer-oriented console sink, plus tests that pin expected filtering and severity/status semantics.

Changes:

• Introduces AuditManager + AuditSink framework with async queueing, circuit-breaker behavior, and default sink configuration.
• Adds built-in sinks: TracesAuditSink (OTel spans) and ConsoleAuditSink (stderr output), plus a simple sink factory.
• Adds tests covering console formatting/filtering, sink re-registration counter reset semantics, and trace severity/status behavior.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/test_traces_severity.py	Verifies span verbosityLevel and error-status semantics for rule vs hook spans across enforcement modes.
tests/test_audit_register_sink.py	Tests AuditManager.register_sink behavior around circuit-breaker counters and duplicate registration.
tests/test_audit_console.py	Tests ConsoleAuditSink filtering and per-event formatting to stderr.
src/uipath/runtime/governance/audit/traces.py	Implements OpenTelemetry span emission for hook summaries and rule evaluations.
src/uipath/runtime/governance/audit/factory.py	Adds a name-based sink factory (traces, console) with env-driven console verbosity.
src/uipath/runtime/governance/audit/console.py	Implements stderr console sink with verbose/non-verbose filtering.
src/uipath/runtime/governance/audit/base.py	Adds core audit model, sink base class, and AuditManager with async worker/queue + circuit-breaker.
src/uipath/runtime/governance/audit/init.py	Exposes audit framework public API and documents built-in sinks and env vars.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[radu-mocanu]

this comment references old implementation. remove it.

[radu-mocanu]

this comment references old implementation. remove it.

[radu-mocanu]

Could we avoid the global _atexit_registered mutation by wrapping this cleanup state in a small private registry object?

class _AuditManagerCleanupRegistry:
    def __init__(self) -> None:
        self.live_managers: weakref.WeakSet[AuditManager] = weakref.WeakSet()
        self.atexit_registered = False
        self.lock = threading.Lock()

    def register(self, manager: AuditManager) -> None:
        self.live_managers.add(manager)
        if self.atexit_registered:
            return
        with self.lock:
            if not self.atexit_registered:
                atexit.register(self.cleanup)
                self.atexit_registered = True

    def cleanup(self) -> None:
        for manager in list(self.live_managers):
            try:
                manager.flush(timeout=2.0)
                manager.close()
            except Exception as exc:  # noqa: BLE001
                logger.debug("Audit manager process cleanup error: %s", exc)

[radu-mocanu]

shouldn t we have a parent span id as well?