Governed Agentic DevSecOps Becomes a Product Surface

GitLab 19.4 combines agentic development, MCP, CI/CD governance, open-weight model options, cost-per-credit accounting, and granular usage controls. GitHub's generally available workflow execution protections add a complementary control plane that separates code contribution from CI execution through per-workflow policies, evaluate mode, insights, and APIs. Adoption, reliability, and vendor-reported cost claims remain to be independently tested.