opschain admin governance controls create
Included from Basic tier
opschain admin governance controls create --key <key> --name <name> --domain security|change|agent [--description <text>] [--owner-role <role>] [--instrument <kind>:<id>]...
Creates a governance control (GovernanceService.CreateControl): a
named, owned, reviewable statement about enforcement. Instrument refs
point at the rows that implement the control by {kind, id} — e.g.
authorisation_policy:<id>, notification_mandate:<id>,
maintenance_window:<id>, trust_grant:<id> — leaving every
instrument's schema untouched; no refs means a procedural control
attested by humans. The key and domain are immutable once created. Admin
plane.
-o json / -o yaml emit the created control.
Flags
| Flag | Meaning |
|---|---|
--key <key> | The unique catalog key (mandatory). |
--name <name> | The control's name (mandatory). |
--domain security|change|agent | The governance domain (mandatory). |
--description <text> | What the control states. |
--owner-role <role> | The role accountable for the control's reviews. |
--instrument <kind>:<id> | An implementing instrument ref (repeatable). |
Exit codes
| Code | Meaning |
|---|---|
| 0 | Created. |
| 1 | Refused — the admin-floor refusal, a duplicate key, or an invalid domain (named by the server). |
| 2 | Usage error, including missing mandatory flags, a malformed --instrument, or a missing server target. |