Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions docs/runtime-governance/control-matrix-integration.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
# Runtime governance integration plan

This document defines the first expected binding points for the imported control bundle.

## Initial enforcement surfaces

1. Policy gate
- import the compiled policy bundle
- deny / warn / require approval according to row-derived blocker logic
- emit evidence for every evaluated control cell

2. Monitor lane
- ingest generated monitor bundle definitions
- attach monitor health and stale-review checks
- reconcile incidents back to row IDs

3. Generated test lane
- ingest generated test bundle definitions
- run high-risk row checks on integration and release paths

## Evidence expectations

Runtime actions should emit:

- row id
- bundle version
- decision
- evidence references
- incident linkage when applicable
- exception linkage when applicable

## Control loop

The runtime lane should eventually close the loop:

monitor breach -> incident -> change proposal -> bundle regeneration -> review -> redeploy
14 changes: 14 additions & 0 deletions monitors/generated/control-matrix/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# Generated control matrix monitors

This directory is reserved for monitor bundles generated from the imported Agentic Control Matrix package.

## Expected inputs

- row-specific monitor definitions
- stale-review and blocker-state checks
- monitor-health controls
- incident linkage expectations

## Source

The canonical monitor definitions should be generated from the standards package and pinned via the import manifest.
23 changes: 23 additions & 0 deletions policy/imports/control-matrix/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
# Control matrix import lane

This directory holds imported Agentic Control Matrix bundles for `agentplane`.

## Source of truth

The canonical standards package lives in:

- `SocioProphet/socioprophet-standards-storage`

`agentplane` is the consumer/runtime lane. It should import and pin released bundle versions from the standards repository rather than redefining the ontology locally.

## Seed state

This PR adds the import manifest and expected bundle paths so the runtime lane has a stable place to bind:

- policy bundle
- monitor bundle
- test bundle

## Next step

After the standards PR merges, pin the released package version and bind the imported policy bundle to the first runtime enforcement surface.
24 changes: 24 additions & 0 deletions policy/imports/control-matrix/manifest.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
{
"artifact": "agentic_control_matrix_v3_import",
"canonical_repository": "SocioProphet/socioprophet-standards-storage",
"canonical_pr": 10,
"canonical_package_path": "examples/control-matrix/v3",
"canonical_schema_path": "schemas/control-matrix",
"version": "v3",
"as_of_date": "2026-04-05",
"row_counts": {
"reachable_rows": 187,
"denied_rows": 16,
"tests": 1177,
"monitors": 686,
"exceptions": 8,
"incidents": 12
},
"expected_bundles": {
"policy": "policy/imports/control-matrix/compiled_policy_bundle_v3.json",
"monitor": "monitors/generated/control-matrix/compiled_monitor_bundle_v3.json",
"test": "tests/generated/control-matrix/compiled_test_bundle_v3.json"
},
"status": "seeded-import-lane",
"next_step": "Pin the merged standards release and bind the policy bundle to the first runtime gate."
}
14 changes: 14 additions & 0 deletions tests/generated/control-matrix/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# Generated control matrix tests

This directory is reserved for test bundles generated from the imported Agentic Control Matrix package.

## Expected inputs

- row-derived high-risk checks
- ship-blocker coverage tests
- approval and rollback path tests
- monitor/incident reconciliation tests

## Source

The canonical test definitions should be generated from the standards package and pinned via the import manifest.
Loading