{
  "id": "extension-interface:governance",
  "_kind": "ExtensionInterface",
  "_file": "extensions/extension-interfaces/governance.yaml",
  "_cluster": "extensions",
  "attributes": {
    "interfaceVersion": "1.0.0",
    "description": "Governance",
    "displayName": "Governance",
    "concern": "Policy enforcement on actions, outputs, and code changes.",
    "surface": "`evaluate(action) -> {allow, deny, ask}`, plus `auditLog(event)`.\nImplementations may chain policies (OPA, Cedar, custom).\n",
    "builtInDefault": "Pre-tool-use hook with a static allowlist. Audit log written to\n`.a5c/audit.log` as JSONL.\n",
    "notableImpls": [
      "subagent:code-reviewer",
      "skill:security-review"
    ]
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "plugin:example-native-claude",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "skill:security-review",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "subagent:code-reviewer",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "subagent:cursor.bug-bot",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "subagent:license-auditor",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "subagent:vulnerability-scanner",
      "to": "extension-interface:governance",
      "kind": "implements",
      "attributes": {}
    }
  ]
}