Govern · Governance Center
Governance by design
Policies, approvals, access, provenance and audit for every model in this workspace. All decisions here are simulated, and every one is recorded.
Approval workflows
Inspect why an action is held, then decide
apr-claims
Deploy claims-assistant to Private cloud
Requested by Jordan Pike
- Request
- Policy check
- Steward review
- Decision
- Deploy gate
Why it was held
Configuration reads Restricted dataset “Claims Operations Records”.
Policy · Restricted data requires deployment approval. Any configuration that reads a Restricted dataset must be approved by a Data Steward before deployment.
Scope of this decision
- Claims Operations Recordsrestricted
- TargetPrivate cloud (dedicated VPC)
Try it · restricted data
See a policy hold a deployment, then release it
- Add Restricted data
- Attempt deploy
- Data Steward approves
- Deploy unlocked
Claims Operations Records
1,902,340 records · PII detected
Config policy-copilot → Private cloud: held
Deployment gates
policy-copilot · Mistral Small 3 (24B) → Private cloud · staging
Datasets ingested
Engineering Wiki still processing.
No PII in trained weights
Strategy does not modify weights.
Model license
Apache-2.0 — permissive.
Policy library
7 of 7 policies enforced
- require-approvaldata
Restricted data requires deployment approval
Any configuration that reads a Restricted dataset must be approved by a Data Steward before deployment.
- blockdata
No PII in adapter training
Datasets with detected PII may be used for retrieval only — never to update adapter weights.
- blockmodel
Production requires safety evaluation
Production deployments must include safety and PII-leakage evaluation gates.
- warnmodel
Non-permissive licenses need legal review
Models under custom community licenses are flagged for license-term review before production.
- require-approvaldeployment
Restricted data stays off shared infrastructure
Restricted datasets may only be served from customer-managed, on-premises or isolated targets — or with approval.
- warnoversight
Human review of low-confidence answers
Responses below 0.6 groundedness are routed to a human reviewer queue.
- warnoversight
Prompt & response retention: 90 days
Inference logs are retained for 90 days, then purged. Audit metadata retained for 7 years.
Toggling a policy re-evaluates every gate instantly — try disabling one and watch readiness change.
Dataset classifications
6 datasets
- public0
Approved for external release.
- internal2
Employees only. Low sensitivity.
- confidential2
Business-sensitive. Need-to-know access.
- restricted2
Regulated or personal data. Deployment requires approval.
Role-based access
Roles × datasets — who may retrieve from what
| Dataset | Admin | ML Engineer | Data Steward | Analyst | Reviewer |
|---|---|---|---|---|---|
Internal Policy Libraryinternal | |||||
Equity Research Notesconfidential | |||||
Support Tickets (redacted)confidential | |||||
Claims Operations Recordsrestricted | |||||
Contract Archiverestricted | |||||
Engineering Wikiinternal |
Click a cell to grant or revoke role access. Changes are recorded in the audit trail.
Model provenance
Base model → data → build → deployment
policy-copilot
- Base modelMistral Small 3 (24B)
- DatasetsInternal Policy Library
- Buildrun-a1f3 · succeeded
- DeploymentPrivate cloud · live
support-tone-adapter
- Base modelLlama 3.1 8B Instruct
- DatasetsSupport Tickets (redacted)
- Buildrun-c09e · succeeded
- DeploymentDev sandbox · live
Policy violation events
Blocked builds, held deployments, failed gates
evaluation gate failed
research-synth · groundedness
Audit trail
Every action in this workspace
Jordan Pike requested deployment approval
claims-assistant → Private cloud
governance ·
system deployment live
support-tone-adapter · Dev sandbox
deploy ·
Avery Chen started build
support-tone-adapter
builds ·
system evaluation gate failed
research-synth · groundedness
builds ·
Dr. Samira Haddad reclassified dataset
Claims Operations Records → Restricted
data ·
Priya Natarajan approved deployment
policy-copilot → Private cloud
governance ·
Avery Chen started build
policy-copilot
builds ·