{"slug":"platform/governance-authority-view","title":"16 · Governance & Authority View","section":"platform","sectionLabel":"Platform","status":"unclassified","type":"document","path":"platform/governance-authority-view.mdx","bytes":2930,"description":"May it be done? Identity → Authority → Capability → Policy → Plan → Approval → Authorization → Execution → Evidence — before Hermes ever executes.","updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\n## May It Be Done?\n\nGovernance answers **one question**: *may it be done?*\n\n```text\nIdentity\n   ↓\nAuthority             (who/what may act in this Work context)\n   ↓\nCapability            (what is being requested — provider-neutral)\n   ↓\nPolicy                (what constraints apply)\n   ↓\nPlan                  (capability sequence + inputs + scope)\n   ↓\nApproval              (human or delegated authorization)\n   ↓\nAuthorization         (governance verdict: allow / deny / require approval)\n   ↓\nExecution             (Hermes — only on allow)\n   ↓\nEvidence              (what happened, durably)\n```\n\n\nGovernance verdicts are **durable, auditable, and traceable** to identity, policy, and Work. Hermes never executes without one.\n\n\n## What Governance Evaluates\n\n* **Who** is requesting — user, Twin, or agent identity, with what roles and delegation.\n* **What** is being requested — which capability, with what inputs and side-effects.\n* **In what Work and Business Context** — not ambiently; every plan is scoped to a Work and a Business Context slice.\n* **Under which policy** — tenant, Work-type, and capability policies, including approval thresholds.\n* **With what evidence shape** — what receipt is expected, and how verification will judge outcome.\n\n## Verdicts\n\n| Verdict | Meaning |\n|---|---|\n| **Allow** | Plan is authorized; Hermes may execute. |\n| **Deny** | Plan is not authorized in this context; no execution. |\n| **Require approval** | A human (or delegated approver) must approve before authorization. |\n\nApproval is itself a Work action with its own identity, evidence, and audit trail.\n\n## Separation That Matters\n\n```text\nCapability Fabric          Governance                Hermes\n \"What can be done?\"  →  \"May it be done?\"  →  \"Execute it.\"\n       │                       │                      │\n   ADK / MCP               Policy /               Provider\n  resolution               Approval               execution\n```\n\nHermes does **not** become an authority of its own. Replacing Hermes does not change what is allowed — only how allowed work is executed.\n\n## Where to Go Next\n\n<CardGroup cols={2}>\n  \n    How authorized plans are executed with evidence.\n  \n  \n    The identities and tenancy governance reasons about.\n  \n  \n    How outcomes are judged and what becomes Spine truth.\n  \n</CardGroup>\n"}