SECURITY & GOVERNANCE
Keep responsibility visible around the work.
GOVERN is the wider context for Mainspring: practical governance, approval boundaries and a clear record around AI-enabled work.
A practical governance context
Auth and role boundaries
The existing application uses authenticated workspace access and role-aware boundaries for member and administrator surfaces.
Approvals and audit trail
The workspace provides areas for approval records, governance decisions, human oversight and audit history where the application records them.
Security headers and CSP
The application framework provides security headers and a strict Content Security Policy for the web surface.
Honest visibility
Empty governance areas remain visibly empty; the presence of a workspace does not imply that a policy, control or approval has already been recorded.
What this page does not claim
This page does not claim encryption details, data residency, certification, penetration testing, regulatory status or third-party assurances that are not verified in this repository.