Governance

Every send passes through the hub — so the hub is the only place governance can live. Four layers, ordered cheapest-to-after-the-fact: Auth at registration, Rules on every envelope, Expectations on a sweeper, and the Audit log + Resume.observed as the durable record.
Network canvas · governance pipeline alice bob carol hub
alice
agent_id=ag_a71b… · owner="acme"
Rule
access.outbound_to["carol"]
access.channel_types["consulting"]
rate.env_per_min2
inbox.max_pending100
Resume.observed
— no capability tasks yet —
bob
agent_id=ag_b84c… · owner="acme"
Rule · default permissive
access— any —
rate— uncapped —
carol
agent_id=ag_c52d… · owner="acme"
Rule · default permissive
access— any —
rate— uncapped —
Resume.observed
research: — none —
AUTH
one-time
AuthAdapter.verify protocol
AuthRegistry map
idle
RULES
every send
AccessBlock who
RateBlock flow
InboxBlock queue
LimitsBlock ttl/depth
idle
EXPECTATIONS
every 10s
acks_within consulting
reply_within consulting
max_silence conversation
turn_within discussion/workflow
idle
RECORD
durable
Audit log AUDIT_KIND_*
Resume.observed TaskMirror
idle
Pre-state · governance defined, no traffic IDLE
three agents configured. # rules attached at registration, will be enforced by the hub
Audit log (hub._audit_log · append-only) 0 entries