Governed Actions
Docs

Governed Actions

A Governed Action names one class of consequence — sending a model call, sending an email — and binds it to the facts a decision needs, the paths that can actually stop it, and a fixed evidence budget. Definitions are data: they describe, they never decide.

How to read one

  • Facts — what the decision relies on. Aarmos never asserts or infers them; each value comes from the participant entitled to assert it.
  • Enforcement paths — every path where the consequence can occur is either enforced or a named bypass. There is no third category, and coverage is reported as counts, never a percentage.
  • Evidence — projected under a fixed byte budget. Attribution and validity are never truncated.
  • State — read in five dimensions (intent, policy, enforcement, coverage, health) so "enabled" can never be mistaken for "enforcing everywhere".

Governed Actions add no fields to receipts. Verification is unchanged: aarmos verify and the open avar verifier read the same records as before.

Installed definitions

Operating them

From the CLI: aarmos ga list, aarmos ga show <id>, aarmos ga enable <id> (shadow first), aarmos ga shadow <id> --review, then aarmos ga promote <id>. Enforcing mode is refused until a shadow review has actually been recorded, and promotion is refused if the definition changed after that review. See the CLI reference.