10 — Governance, Authority and Approval

Canonical reference: 00-SPINEWORKSPACE-INTEGRATEWISE-CANON.md §19
Status: Canonical

---

1. Governance

Governance is a cross-cutting authority boundary, not merely a single UI screen or one step in a linear workflow.

Governance evaluates: who or what requested the action; tenant and organizational scope; human or agent role; delegated authority; capability and target; risk and destructive potential; data sensitivity; approval policy; evidence requirements; audit obligations.

2. Canonical outcomes

ALLOW
DENY
REQUIRE APPROVAL
DELEGATE / ALLOW WITH BOUNDED AUTHORITY

3. Human governance

Human governance does not mean a human must approve every low-risk automated operation. It means the organization defines what AI may do automatically, what requires explicit approval and what may never be delegated.

4. Non-negotiable rule

Twin cannot self-approve consequential action or bypass Governance. Confidence never grants authority.