Governance records are data models, not policy text. They prove governance exists and is actively managed.
| Record | Purpose |
|---|---|
| AI Use Case Record | Purpose, risk, data, owner, approval status. |
| Consumer Record | Human/app/service initiating AI calls. |
| Agent Record | Agent purpose, owner, identity, autonomy, routes, tools. |
| Model Record | Provider, deployment, lifecycle, allowed data, evaluations. |
| Model Route Record | Gateway route, policy, quota, budget, owner. |
| Entitlement Record | Who/what can use which model/tool/data source. |
| Tool Record | Operations, schema, risk, owner, allowed callers. |
| MCP Server Record | Host, exposed tools/resources, auth, runbook. |
| Data Source Record | Classification, authority, restrictions, owner. |
| Knowledge Source Record | RAG/ontology/graph provenance and refresh controls. |
| Prompt / Instruction Record | Prompt version, ownership, approvals, tests. |
| Output Validation Rule Record | Schema, grounding, release and approval criteria. |
| Evaluation Record | Test sets, red-team findings, release decision. |
| Audit Evidence Record | Runtime traces, policy decisions, approvals, exceptions. |