module.governance-suite

@lssm-tech/module.governance-suite

Website: https://contractspec.io

Governance + Audit suite for the Agent + Workflow pillar — policy editor, constraint management, audit-trail inspection, and evidence attachment.

What It Provides

• Layer: module.
• Consumers: @lssm-tech/bundle.managed-companyos, the web-application-monolith /governance/** + /audit/** routes, and future native shells via shared view-models.
• src/core/ — policy simulators, constraint reducers, audit-event projectors, evidence-attachment workflows.
• src/presentation/ — promoted screens (GovernanceScreen, AuditTrailScreen, PolicyEditor, AuditEventDetail).
• src/data-views/ — data-view specs for tables and detail panels.

Installation

npm install @lssm-tech/module.governance-suite

or

bun add @lssm-tech/module.governance-suite

Usage

Import the root entrypoint from @lssm-tech/module.governance-suite, or choose a documented subpath when you only need one slice of the surface.

Architecture

• src/governance-suite.capability.ts — capability declaration.
• src/governance-suite.feature.ts — feature manifest listing the 10 governance/audit operations the module owns.
• src/core/ — domain logic.
• src/presentation/ — UI (design-system-first).
• src/data-views/ — data-view specs.
• src/index.ts — public barrel.

Public Entry Points

• . → ./src/index.ts
• ./governance-suite.capability → ./src/governance-suite.capability.ts
• ./governance-suite.feature → ./src/governance-suite.feature.ts
• ./core → ./src/core/index.ts
• ./presentation → ./src/presentation/index.ts
• ./data-views → ./src/data-views/index.ts

Notes

• Audit records are append-only; mutations and deletions break compliance invariants. Corrections are compensating events.
• Auditor persona sees every action with disabled + tooltip, never silent capability strip.
• Design-system primitives first; fallbacks marked // DS-FALLBACK:.

Transactional side effects use the generic @lssm-tech/lib.jobs/outbox/types port. The host supplies its transaction and persistent store; approval, policy, audit and caller-context behavior remain unchanged. Tests use the Jobs in-memory reference adapter rather than a Company runtime dependency.