{"slug":"security-and-governance/governance","title":"Governance for Human and AI Work in Spine","section":"security-and-governance","sectionLabel":"Security & Governance","status":"unclassified","type":"document","path":"security-and-governance/governance.mdx","bytes":881,"description":"Governance in SpineWorkspace applies uniformly to human and AI actors, gating every capability call with policy and producing durable receipts.","updated":null,"source":"integratewise/Integratewise-docs-wiki","content":"\nGovernance in SpineWorkspace applies the same way to people, Twin, and agents. Every capability call is checked against policy, and every executed action produces a receipt for audit and continuity.\n\n## What Governance Enforces\n\n- **Who can act** — role and scope checks.\n- **What they can act on** — entity and system scope.\n- **When they can act** — policy conditions and approvals.\n- **What is recorded** — receipts with source, timestamp, and outcome.\n\n## Related\n\n- [Governed Actions](/how-it-works/governed-actions)\n- [Permissions](/security-and-governance/permissions)\n- [Compliance](/security-and-governance/compliance)"}