Governance

Policies, the documents behind them, and the evidence that people read them.

Where	What it holds
Policies	The library — versioned, approved, acknowledged.
Coverage	Which framework domains have no governing document.
AI proposals	Agent suggestions, each gated by a human decision.
My Acknowledgments	What you personally still need to read and confirm.
Dashboard	Policy status, acknowledgment rates, upcoming reviews.

How this connects to the rest

A policy is what you told people to do. A compliance assessment checks whether it happens. An audit tests it independently. Coverage is the seam between them: a framework domain with no policy behind it will keep producing findings until someone writes the document.