Governed Actions
A Governed Action names one class of consequence — sending a model call, sending an email — and binds it to the facts a decision needs, the paths that can actually stop it, and a fixed evidence budget. Definitions are data: they describe, they never decide.
How to read one
- Facts — what the decision relies on. Aarmos never asserts or infers them; each value comes from the participant entitled to assert it.
- Enforcement paths — every path where the consequence can occur is either enforced or a named bypass. There is no third category, and coverage is reported as counts, never a percentage.
- Evidence — projected under a fixed byte budget. Attribution and validity are never truncated.
- State — read in five dimensions (intent, policy, enforcement, coverage, health) so "enabled" can never be mistaken for "enforcing everywhere".
Governed Actions add no fields to receipts. Verification is unchanged: aarmos verify and the open avar verifier read the same records as before.
Installed definitions
- External communicationsemail.sendexperimental
Governs the boundary where a message reaches a recipient and cannot be recalled. Recipient classification is asserted by the customer's directory, never inferred by Aarmos; paths that reach the transport without traversing the governed connector are named as bypasses rather than counted as covered.
0/2 enforced paths observed · 2 named bypasses
- Model callsmodel.invokesupported
Governs the boundary where context leaves the trust boundary and reaches an inference provider. Interception happens before transmission; anything Aarmos cannot intercept is named as a bypass rather than counted as covered.
0/2 enforced paths observed · 2 named bypasses
Operating them
From the CLI: aarmos ga list, aarmos ga show <id>, aarmos ga enable <id> (shadow first), aarmos ga shadow <id> --review, then aarmos ga promote <id>. Enforcing mode is refused until a shadow review has actually been recorded, and promotion is refused if the definition changed after that review. See the CLI reference.