Govern

What it does

Agent identity, policy, receipts, and audit records. Connect your Govern account and its agent, identity, policy, receipt, audit_event arrive in the ledger as versioned source snapshots, filed as evidence, with a receipt for every sync. Company OS keeps the source, the history and the review boundary; nothing is written back to Govern.

What the connection supports

• Syncs agent, identity, policy, receipt, audit_event
• Agent receipts table in the Technology department, one row per receipt
• Denied agent actions, 7 days: Actions Govern refused in the last 7 days.
• Lands on People, Legal, Technology
• Every sync leaves a receipt, including the ones that failed
• Available to agents through Company OS context tools

What installing grants

You see this list again on the install screen, and nothing happens until you approve it there.

1. Confirm your accountIdentify which Govern account approved.
2. Read your name and emailHow the connection is labelled.
3. Identify the workspaceThe workspace the token is bound to and your role in it.
4. Read agent identitiesRead the workspace's agent identities.
5. Read governance policiesRead the workspace's policies.
6. Read signed receiptsRead the workspace's signed action receipts.
7. Write the Agent receipts tableOne row per signed action receipt in Govern: which agent did what, under which policy. Rows are authored by Govern and keep their history.
8. Seed the Denied agent actions, 7 days metricBound to agent-receipts, daily.