Loading documentation
Command & assurance / 01
Assurance / Continuous
NowFlow treats governance as runtime policy: least authority, explicit human decisions, protected data boundaries, controlled change, durable evidence, and safe recovery across agents and robotic systems.
No single instruction, credential, agent, or adapter should control the entire mission path.
Data classification follows the record through retrieval, reasoning, output, and retention.
Classify sources, fields, embeddings, prompts, outputs, telemetry, and attachments.
Limit retrieval and model access by workspace, mission, role, environment, and purpose.
Redact or deny sensitive fields before they cross an unapproved processing boundary.
Apply explicit retention, export, deletion, and legal-hold policy to operational evidence.
Mission logic, agent policy, adapters, models, and credentials can all alter risk.
Incident response must protect people and platforms without destroying causal history.
Pause or isolate affected mission runs and revoke exposed identities or authority.
Move robotic systems to approved safe states using independent control where available.
Preserve release, policy, decision, command, telemetry, approval, and operator evidence.
Resume only after scope, cause, remediation, and new release authority are documented.