Stale or incomplete context
A relevant restriction is omitted, an approval expires or the resource changes after review.
Control: mandatory dependency closure, explicit exclusions, validity intervals and external version bindings.
PALO FRAMEWORKAGENTIC GOVERNANCE | ADDITIVE REFERENCE PROFILE 0.1
PALO Tri-Graph Governance connects these three foundations to the authority, evidence and accountable roles that already exist in PALO.
Local reference preview | 29 October 2026 | PALO 3.1 remains the canonical foundation
Inspect a decision Read the technical specificationTHE GOVERNANCE NEED
A relevant restriction is omitted, an approval expires or the resource changes after review.
Control: mandatory dependency closure, explicit exclusions, validity intervals and external version bindings.
A plausible answer, a high confidence score or an external instruction is treated as permission.
Control: separate evidence quality from authority. Evaluate curated guards and an exact mandate scope.
A timeout hides a completed write. Retrying can duplicate the effect; compensation may be impossible.
Control: reconciliation before another write, a new mandate for recovery and explicit limits on reversibility.
THE THREE PILLARS
Attributed assertions, policy versions, provenance and typed dependencies.
What the evidence supportsA case snapshot with purpose, scope, selected facts, exclusions and version bindings.
What applies to this decisionStates and guarded transitions with required evidence and an accountable role.
Which transition may be proposedShared ontology and SKOS taxonomy / versioned dictionary / deterministic checks / decision receipt / reviewed change proposal
The graphs are logical views. A JSON snapshot and a state machine are sufficient for this reference implementation. A graph database is optional. Provenance and dependency queries are the reason to introduce graph structure.
DYNAMIC SEMANTIC EXPLORER
Concepts, relationships, definitions and field dictionaries load from the same versioned sources. Selecting a concept reveals its incoming and outgoing relationships and the existing PALO artifact it extends.
Loading the versioned catalogue...
| Field | Type | Allowed values | Semantic concept |
|---|
OWL ontology | SKOS taxonomy | SHACL constraints | JSON-LD concepts | Full dictionary
THE ENGINE, EXPOSED
All inputs are synthetic. The fixed evaluation time belongs to the fixture, not to a live deployment. This local evaluator never calls a target tool and never grants execution authority.
| Rule | Check | Witness |
|---|
Synthetic input | Caller-owned observations fixture | Evaluator source
TRANSPARENCY | EXPLAINABILITY | ACCOUNTABILITY
Expose the data origin, selected and excluded inputs, release versions and capability boundary.
Provide deterministic rule results and replay inputs. A receipt explains the policy evaluation; it does not expose hidden model reasoning or prove the real-world effect.
Assign owners to curation, admission, execution and review. Preserve original decisions, record challenges and issue linked corrections.
Production alerting, service-level targets, persistence and independent review remain implementation requirements.
EVIDENCE AND LIMITS
| Layer | Available in this extension | Limit |
|---|---|---|
| Semantic model | Versioned registry and generated OWL, SKOS, SHACL, JSON-LD and field dictionary | Does not establish truth, compliance or storage immutability |
| Reference evaluator | Deterministic candidate / hold / deny, dependency closure, time and scope checks, replay checks, local impact query | Caller observations are fixtures; no authentication or production adapter |
| External execution | Documented integration contract with existing PALO Action Claim and Effect Contract | Target-side compare-and-swap, revocation fences and effect observation require qualification |
| Learning and challenge | Explicit change and challenge concepts; local reassessment list | Human workflow, durable evidence retention and operating effectiveness untested |
Validation record | Generated artifact manifest | Review findings and fixes | Source repository