EX-GOVERNANCE-CONSTRAINTS-MAP.md

Purpose

Map canonical record types to governance constraints and enforcement locations.

Scope

Constraint mapping for canonical GovernanceRecordType values from packages/core/governance/types.ts.

Governance Constraints

| recordType | constraintId | Constraint Summary | Enforcement Location (file/function) | |---|---|---|---| | ACCESS_DECISION | GOV-AUTH-001 | Access decision payload and decision validation | packages/core/governance/validateGovernanceRecord.ts / validateGovernanceRecord | | POLICY_FREEZE | GOV-POL-001 | Policy freeze precedes policy-bound actions | packages/core/governance/verifyCrossDomainGovernanceIntegrity.ts / verifyCrossDomainGovernanceIntegrity | | TENDER_TRANSITION | GOV-TN-001 | Tender transition lifecycle and policy binding checks | packages/core/governance/verifyCrossDomainGovernanceIntegrity.ts / verifyCrossDomainGovernanceIntegrity | | AUCTION_TRANSITION | GOV-AU-001 | Auction transition lifecycle and policy binding checks | packages/core/governance/verifyCrossDomainGovernanceIntegrity.ts / verifyCrossDomainGovernanceIntegrity | | SETTLEMENT_INTENT | GOV-ST-001 | Settlement intent authorization and creation checks | packages/core/settlement/verifySettlementAuthorization.ts / verifySettlementAuthorization; packages/core/settlement/appendSettlementIntent.ts / appendSettlementIntent | | SETTLEMENT_EVENT | GOV-ST-002 | Settlement event authorization and lifecycle checks | packages/core/settlement/verifySettlementEventAuthorization.ts / verifySettlementEventAuthorization; packages/core/settlement/verifySettlementLifecycle.ts / verifySettlementLifecycle; packages/core/settlement/appendSettlementEvent.ts / appendSettlementEvent | | KES_VERSION_PROPOSED | GOV-KES-001 | KES version propose chain and authorization checks | packages/core/kes/verifyKesVersionChain.ts / verifyKesVersionChain; packages/core/kes/verifyKesAuthorization.ts / verifyKesAuthorization | | KES_VERSION_RATIFIED | GOV-KES-002 | KES ratify authorization and hash matching checks | packages/core/kes/verifyKesRatifyAuthorization.ts / verifyKesRatifyAuthorization; packages/core/kes/verifyKesVersionChain.ts / verifyKesVersionChain |

Enforcement Layer (Code/Doc)

• Code: packages/core/*
• Docs:
  • docs/governance/RECORDTYPE_REGISTRY.md
  • docs/governance/METADATA_KEY_ALLOWLIST.md
  • docs/governance/GOVERNANCE_STATE_MACHINE_MATRIX.md
  • docs/governance/protocol/PROTOCOL_CONSTANTS.md