Configuration
Governance
The org's allowlists and hard caps over governed runs: which agent adapters, models, and CD adapters may execute, and how large a change may be. These controls fail runs closed, including when usage or identity is unknown; a refused run is recorded in the ledger with the control that refused it, never silently retried.