Hasilkan kode yang aman dengan actor-critic workflow

Setup lab

1. Clone repository Galaxium Travels.

   git clone -b bob-learning-path-branch https://github.com/IBM/galaxium-travels

2. Buka folder di Bob dan jalankan /init.

Konfigurasi security rules

1. Beralih ke Agent mode dan aktifkan izin Read dan Edit.

2. Minta Bob membuat file security rule:

   Create an empty file .bob/rules/security.md

3. Isi .bob/rules/security.md dengan aturan keamanan komprehensif yang mencakup manajemen rahasia, autentikasi, enkripsi, validasi input, penanganan error, logging, dan dependensi.

Buat Actor dan Critic skills

Buat dua skill di Bob Settings > Skills:

1. secure-python-actor - Menulis kode Python/FastAPI yang memenuhi persyaratan keamanan
2. secure-python-critic - Meninjau kode terhadap NIST SP 800-53, OWASP ASVS Level 1, dan CWE Top 25

Jalankan actor-critic workflow

1. Klik + untuk memulai task baru di Agent mode.

2. Aktifkan izin Read, Edit, Execute, Skill, dan Subagent.

3. Minta Bob mengorkestrasikan actor-critic workflow untuk mengimplementasikan endpoint GET /bookings/{booking_id}:

   Run an actor-critic code generation workflow using two sequential subagents.
   
   Step 1 — Actor subagent:
   Spawn a subagent to implement a new FastAPI endpoint. Load the
   /secure-python-actor skill. Reference the following files:
   
   @booking_system_backend/server.py
   @booking_system_backend/services/booking.py
   @booking_system_backend/schemas.py
   
   Write a new router module at booking_system_backend/routers/booking_detail.py
   that implements GET /bookings/{booking_id}...
   
   Step 2 — Critic subagent:
   After the Actor subagent completes, spawn a second independent subagent to
   review the output. Load the /secure-python-critic skill.