Skip to content

governance

Claude edited this page Sep 23, 2026 · 3 revisions

Governance

Canonical: SAFRS_SPEC.md, .safrs/policy.json, docs/governance/.

This wiki summarizes. Policy JSON and the spec are authoritative.

Pages

Cross-cutting feature pages (kept for Control Center catalog paths):

Policy snapshot

From .safrs/policy.json:

  • Operating model: human-governed-agent-executed-machine-enforced
  • Default risk: R1
  • Capsule root: projects
  • Shared packages: packages
  • Tools: tools
  • Verification command: bash scripts/safrs-verify.sh (Windows: scripts/safrs-verify.ps1)

Forbidden by default: read production secrets, write production data, direct production deploy, self-authorize R3, disable governance to pass, transmit repository data to an unapproved endpoint.

Related

Clone this wiki locally