•  
      request #45973 Adjust AI TQL Assistant with the secure coding guidelines
    Infos
    #45973
    Thomas Gerbet (tgerbet)
    2025-12-30 09:34
    2025-12-03 17:15
    47699
    Details
    Adjust AI TQL Assistant with the secure coding guidelines

    The AI TQL Assistant plugin was added while the first draft of the secure coding guidelines related to AI usages were written.

    Some adjustments are needed to respect them:

    • basic guardrailing should be in place
    • features must only be available to authenticated users
    • metrics must be collected to make possible to identify users abusing the features
    • logs must be collected
    • inputs should have a limited length to limit the input token cost
    • attempt at limiting the output length should be made to limit the output token cost
    Cross tracker search
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2025-12-26
    Attachments
    Empty
    References
    Referencing request #45973

    Git commit

    tuleap/tuleap/stable

    fix: Ensure TQL assistant endpoint is only accessible to authenticated users fa1ff84550
    feat: Enforce basic guardrailing to be in place when doing completions with Mistral 51aa2bf60b
    fix: Users should not have the ability to set system prompts 2003b7b0dc
    feat: Collect metrics on the usage of LLMs 975c3faf6d
    chore: introduce missing tests on AI CrossTracker 62e9f42611
    chore: Switch the model used by the TQL AI assistant to Devstral 2 08671888fe
    refactor: Force the LLM to return a structured output 3cc14bfd95
    refactor: extract message passing logic a65628035c
    refacto: Move XTS AI assistant chat into a Vue component c71725284f
    feat: store and load message exchange in DB f689a3de0a
    feat: Set an input limit on user requests on TQL AI assistant 677f438282
    fix: Adjust XTS AI frontend to handle the changes introduced to the REST endpoint 25ae88f64b
    feat: store token comsumption 5e507f6497
    refactor: extract as much logic as possible from Resource eb054bef2f
    refacto: Interpret CommonMark content from the LLM on the backend 959091080a

    Follow-ups