Skip to content

v1.7.0 — Local Organization Governance

Purpose: Defines only the architecture delta from the canonical Forgevena platform blueprint. Audience: product, architecture, engineering, security, operations, documentation, release, and AI coding agents Owner: Governance and Policy Maintainers Roadmap authority: docs/strategy/FORGEVENA_VERSIONED_PRODUCT_ROADMAP.md#10-v170--local-organization-governance Lifecycle: planned Review: before implementation and at every lifecycle promotion

Architecture Delta

Add one deny-overrides policy evaluator for organizations, principals, roles, artifacts, capabilities, and external-effect boundaries.

flowchart LR
  U["User or governed automation"] --> P["Preview and policy"]
  P --> C["Local Organization Governance"]
  C --> S["State, evidence, and rollback"]
  S --> V["Validation and health"]

Component and Module Boundaries

Committed features remain behind existing application-context, state, policy, consent, audit, and rollback services. No feature may introduce a parallel authority.

Data and Control Flow

Inputs are schema-validated, classified, and policy-evaluated. External effects stop at consent boundaries. Outputs contain metadata and evidence references, while secrets and sensitive content remain excluded.

Dependencies

  • v1.6.0

Failure Modes

  • Partial operations recover from journals or last-known-good state.
  • Unsupported compatibility fails visibly.
  • Missing credentials, approval, billing, or network access stops at preflight.
  • Corrupt or unverifiable evidence blocks promotion.