Governance Activation Readiness

Pre-flight checklist derived from the effective configuration. Resolve every failure and review the warnings before enabling governance or moving a capability from shadow (DryRun) to enforcing.

Refresh
Ready with warningsNo failures, but 3 warning(s) to review before enforcing.
5
Passing
3
Warnings
0
Failures

Audit

PASS
Kill-switch audit
Enabled.
PASS
Decision audit
Enabled.

Kernel flags

WARN
ring enforcement flag divergence
EnableRings=true enables the AGT kernel's ring enforcement capability, but the AME ring enforcement sub-option is disabled, so AME does not enforce it despite EnableRings=true.
→ Enable the matching AME sub-option, or set EnableRings=false to avoid confusion.
WARN
prompt-injection flag divergence
EnablePromptInjectionDetection=true enables the AGT kernel's prompt-injection capability, but the AME prompt-injection sub-option is disabled, so AME does not enforce it despite EnablePromptInjectionDetection=true.
→ Enable the matching AME sub-option, or set EnablePromptInjectionDetection=false to avoid confusion.
WARN
circuit-breaker flag divergence
EnableCircuitBreaker=true enables the AGT kernel's circuit-breaker capability, but the AME circuit-breaker sub-option is disabled, so AME does not enforce it despite EnableCircuitBreaker=true.
→ Enable the matching AME sub-option, or set EnableCircuitBreaker=false to avoid confusion.

Master

PASS
Governance master switch
Governance is enabled.
PASS
Conflict resolution strategy
Strategy 'DenyOverrides'.

Ring enforcement

PASS
Ring privilege enforcement
Disabled — calls are not gated by privilege ring.

Evaluated 2026-10-31 01:02:42Z. Master switch: enabled.