Variable: GovernanceFramework

const GovernanceFramework: TObject<{ contacts: TWith<TArray<TString>, { description: "Whom to write to about the framework: one to eight role mailboxes, none repeated."; }>; disputeRoute: TWith<TString, { description: "Where an entity, a holder or a verifier takes a dispute."; }>; governingAuthority: TObject<{ contact: TWith<TString, { description: "The authority's address: a role mailbox such as `trust-office@`, never a person's."; }>; name: TWith<TString, { description: "The institution that governs the framework."; }>; }>; name: TWith<TString, { description: "The framework's title."; }>; roles: TArray<TObject<{ admissionCriteria: TArray<TObject<{ enforcedBy: TWith<TUnsafe<... | ... | ... | ...>, { description: "How the criterion is enforced. `pipeline`: the platform refuses an applicant that fails it. `metadata-policy`: it is compiled into the subordinate statement, so a verifier enforces it too. `trust-mark`: the entity must hold a trust mark that evidences it. `audit`: it is checked afterwards, from the audit trail."; }>; id: TWith<TString, { description: "The name of the criterion, stable within the framework so that a decision can cite it."; }>; statement: TWith<TString, { description: "What an applicant must satisfy, in one paragraph."; }>; }>>; code: TWith<TString, { description: "The role as the platform names it, such as `TRUST_ANCHOR_ADMIN`. An identifier, never prose."; }>; name: TWith<TString, { description: "The role as a person reads it."; }>; }>>; statementLifetimes: TObject<{ anchorConfigurationSeconds: TWith<TInteger, { description: "Lifetime of the trust anchor's own entity configuration, from `iat` to `exp`."; }>; entityConfigurationSeconds: TWith<TInteger, { description: "Lifetime of an admitted entity's entity configuration."; }>; subordinateStatementSeconds: TWith<TInteger, { description: "Lifetime of the trust anchor's subordinate statement about an admitted entity."; }>; }>; version: TInteger; }>

Defined in: packages/contracts/src/schemas/governance-framework.ts:236

The governance framework (D2.8, PO2.8): the rulebook the anchor's entity configuration points at through policy_uri. Shaped after the ToIP Governance Metamodel's components (35) at their minimum: who governs, which roles exist and what admits an entity to each, how long statements live, whom to contact and where disputes go.

It is published as JSON exactly as validated, and every field is public by design: the governing authority is an institution, and every address is a role mailbox. A published version is never edited; a changed document is the next version.

Not here: the national rulebook and the machine-readable policy that later versions will link to their clauses (17 section 6.5, 48). They are additive.