{"slug":"platform/09-governance-engine","title":"09 — Governance Engine","section":"platform","sectionLabel":"Platform","status":"unclassified","type":"document","path":"platform/09-governance-engine.mdx","bytes":2133,"description":null,"updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\n> **EXTRACTED / NOT CANONICAL.** Confidence-based auto-approval below is\n> superseded. Current Governance requires explicit human approval for actions\n> and canonical promotion.\n\n> **Extracted from:** IntegrateWise Platform Specification Suite\n> **Region:** first_pass\n> **Original line:** 998\n> **Lines:** 45 | **Chars:** 1,731\n> **Status:** Raw extraction — requires review and canonicalization\n\n09 — Governance Engine\n9.1 Responsibilities\nIssue governance tokens (gov*…) before any high-risk write.\nEnforce approval chains and confidence thresholds.\nDrive multi-level approvals and delegations.\nOperate emergency overrides.\n9.2 Approval chain\nConfidence ≥ 0.85 → auto-approve (subject to posture).\n0.70 ≤ Confidence < 0.85 → single approver.\n< 0.70 → multi-level approver chain.\ngovernancePolicy=judicial → N-of-M approvers; cannot be auto-approved.\n9.3 Token minting\nCopygov_token:\nid: gov_abc\ncapability_id: cap_update_field\nent_id: ent_lead_123\ndelta: {…}\nposture: propose|judicial|auto\napprover_chain: [usr_mgr, usr_director]\nexpires_at: ISO8601\naudit_ref: obs_audit*…\n9.4 Policy engine\nPolicies declared in tenant_spine_config.governance_posture (per existing spec).\nPolicies can be capability-scoped, entity-typed, or field-pinned.\n9.5 Emergency overrides\nBreak-glass token requires MFA + auto-creates AuditEvent flagged severity=emergency (16).\n9.6 Inputs\nCapabilityInvoked with governancePolicy != null.\nAdmin overrides.\n9.7 Outputs\ngov_token issued, then CapabilityAuthorized event.\n9.9 Events\nProduced: GovernanceRequested, GovernanceApproved, GovernanceRejected, GovernanceTokenMinted, GovernanceOverrode.\nConsumed: CapabilityInvoked, AdminOverrideRequested.\n9.10 APIs\nPOST /governance/request, POST /governance/{gov_id}/approve, POST /governance/{gov_id}/reject.\n9.11 State transitions\nrequested → pending_approval → approved | rejected | overrode | expired.\n\n9.12 Failure handling\nApprover unavailable → fallback to next in chain + SLA breach (16).\nExpired token → re-request.\n9.13 Extension points\nCustom policies via POLICY_PACK(name).\nDelegated approvers.\n"}