opschain governance
Included from Basic tierpacks:change-governancepacks:security-governance
opschain governance <subcommand>
The governance feature verbs: the
surfaces a security officer, risk owner, reviewer or auditor uses on a
normal login — never the admin plane. Reads and reviewer writes are gated
by the delegable /governance/<surface> rule-path family (readable
gates the reads, updatable the reviewer writes); the evidence-ledger
surfaces additionally need the packs:security-governance entitlement.
The operational subset — catalog curation, cadences, campaign opening,
legal hold, waiver grants — lives under opschain admin governance.
Subcommands
| Subcommand | Meaning |
|---|---|
controls list|show | The control catalog. |
campaigns list|show|decide|close | Review campaigns and their decisions. |
evidence list|verify|export|attest | The hash-chained evidence ledger. |
posture | The governance posture report: findings, coverage, CCM metrics, chain verdict. |
waivers list | The exceptions register. |
work-items list|complete | Remediation work opened by revoke decisions. |
owners list | Subtree asset-owner declarations (change governance). |
See opschain docs governance for the model and opschain docs change-governance for the approval funnel.