Governance
Governance makes IIOS trustworthy: every fact has lineage and evidence, ontologies and models are versioned, agents operate under human oversight, and nothing changes without an entry in the audit trail.
Lineage & evidence
Facts are never anonymous. Each assertion records who (or which agent version) made it, when, with what confidence, and the evidence it rests on. Superseded facts are retained, so you can reconstruct what the platform believed at any point in time.
// Every fact in the graph carries provenance and evidence.
{
"entity": "asset:pump-north-14",
"attribute": "condition",
"value": "degraded",
"confidence": 0.82,
"assertedBy": "agent:reliability-monitor@2025.3",
"assertedAt": "2025-06-01T14:22:07Z",
"evidence": [
{ "source": "historian:vibration", "ref": "tag/VIB-1408", "window": "24h" },
{ "source": "cmms:work-order", "ref": "WO-88213" }
],
"supersedes": "fact:9f21…" // full version history is retained
}Versioned ontologies & models
The shared ontology and the models that reason over it are versioned artifacts. Changes are proposed, reviewed, and promoted through environments — the same lifecycle you apply to code.
| Artifact | Versioned | Change control |
|---|---|---|
| Ontology | Semantic version | Review + migration plan |
| Reasoning model | Pinned per release | Eval gate before promote |
| Agent definition | Immutable version tag | Approval + scope review |
| Policies | Git-backed | Pull request + audit |
Human oversight of agents
Autonomy is graduated. Higher-impact actions require explicit human approval before they commit.
- 1ProposeAn agent produces an action with its reasoning and evidence attached.
- 2GatePolicy decides whether the action is auto-approved or needs a human.
- 3ReviewA reviewer sees the full rationale and can approve, reject, or amend.
- 4Commit & recordThe decision and its author are written to the immutable ledger.
Governance patterns
Everything is versioned
Ontologies, models, agents, and policies are artifacts with history — not mutable configuration.
Oversight scales with impact
Low-risk actions run autonomously; consequential ones route to a human, by policy.
Accountable by construction
Every fact, answer, and action ties back to a principal and its evidence.
Time travel
Retained history lets you audit what was known and decided at any moment.
