Agent governance

Agent governance is the rule set that decides what an AI coding agent is permitted to do in a given DevAware OS workspace. It composes governance blocks, project trust state, the destructive-command denylist, and the approval gate into a single policy surface.

Without agent governance, every agent run is a leap of faith. With it, the agent's permitted actions are explicit, inspectable, and auditable.