Governance and Approvals

    The ByteOr OSS substrate provides the foundational governance primitives used by Enterprise and Cloud. This page covers the OSS-provided contracts.

    What OSS Provides

    The OSS crates define the governance data model and verification primitives:

    • Environment posture definitions
    • Approval credential structure and verification rules
    • Capability scope definitions
    • Audit record schemas

    Enterprise and Cloud build their approval-aware execution flows on top of these primitives.

    Verification Rules

    Approval credentials are cryptographic and bind a spec hash, environment, capability scope, expiry, and signing key. The OSS verification layer rejects credentials when:

    • The signing key is unknown or the signature is invalid
    • The approval targets the wrong environment or spec
    • The credential has expired
    • The capability coverage is insufficient

    Canonical Published Surfaces

    Provenance
    Need the canonical source?
    Use the public hub to orient yourself, then jump to repo-owned docs or rustdoc when you need contract-level detail.
    Source-of-truth modelRepo docs index