title: “Governance Schema” description: “Machine-readable representation of AI governance information.”
Governance Schema
The Governance Schema provides the machine-readable structure for representing organizational AI governance information within the AIGO Framework. It provides the governance-level context in which AI systems, risks, controls, assessments, approvals, monitoring, assurance, evidence, incidents, changes, improvements, and retirement activities are governed.Purpose
The Governance Schema supports structured representation of the organizational governance arrangements required to operate AIGO. Governance information may include: * governance ownership * accountable authorities * governance roles * responsibilities * decision authorities * governance scope * policies * procedures * governance objectives * governance criteria * escalation mechanisms * oversight arrangements * approval authorities * assurance responsibilities * governance status * governance decisions * governance relationships The schema provides a machine-readable representation of this governance context.Governance context
AIGO distinguishes between the organizational governance layer and the individual AI system governance layer. A simplified model is: organization → governance → AI systems → risks → controls → evidence → decisions → assurance → improvement The Governance Schema provides structural support for the governance layer that establishes the context within which the remaining governed objects operate.Governance ownership
Effective AI governance requires clearly defined ownership and decision authority. Governance records may establish relationships between: * governance bodies * accountable executives * AI governance functions * system owners * risk owners * control owners * assurance functions * decision authorities * operational teams These relationships support accountability across the AI governance lifecycle.Governance scope
A governance record may establish the scope within which AIGO governance applies. Scope may consider: * organizational units * jurisdictions * AI system portfolios * business processes * technologies * use cases * lifecycle stages * applicable governance requirements The applicable scope should be sufficiently defined to determine which AI systems and governance activities are subject to the organization’s governance arrangements.Governance decisions
Governance decisions may include: * establishment of governance requirements * approval authorities * risk appetite or tolerance decisions * governance exceptions * policy decisions * escalation decisions * resource decisions * changes to governance criteria * acceptance of residual risk * lifecycle decisions * improvement decisions Where appropriate, decisions should be connected to the governance records and evidence supporting them.Governance relationships
The Governance Schema supports relationships between organizational governance information and the governed objects maintained by the AIGO machine-readable layer. These may include: * AI systems * risks * controls * assessments * approvals * monitoring * incidents * changes * assurance * evidence * management reviews * improvements * retirement This enables governance traceability from organizational authority to individual AI system decisions. A representative relationship is: governance authority → governance requirement → AI system → risk → control → evidence → assessment → decision → assurance → improvementGovernance and lifecycle management
Governance arrangements should remain connected to the AI governance lifecycle. Governance may establish requirements or decision authority for activities including: 1. AI system registration 2. classification 3. risk assessment 4. control determination 5. control assessment 6. approval 7. operation and monitoring 8. change management 9. incident management 10. assurance 11. risk acceptance 12. continuous improvement 13. retirement This allows organizational governance to provide oversight throughout the complete AI system lifecycle.Governance and evaluation
The Governance Schema can provide governance context for the AIGO machine-readable evaluation layer. The architecture separates: governance records → evaluation rules → evaluation → results Governance records establish the organizational context and relevant information. Rules define conditions that should be evaluated. Evaluation produces structured results that can become inputs to governance decisions. Automated evaluation should support governance processes rather than being interpreted as an autonomous substitute for accountable decision-making.Governance and assurance
Governance information may provide the scope, authority, and accountability context required for assurance activities. Assurance may examine whether: * governance responsibilities are defined * decision authorities are appropriate * governance processes are implemented * controls operate as intended * evidence supports governance claims * governance decisions are traceable * improvement activities are effective Management review and assurance results can in turn provide inputs to governance improvement.Governance and continuous improvement
Governance itself should be subject to continual improvement. Improvement activities may address: * governance structures * roles * responsibilities * policies * procedures * decision mechanisms * controls * risk methods * monitoring * assurance * evidence practices * evaluation * validation * organizational capability The Governance Schema therefore provides an important structural context for the AIGO improvement lifecycle.Machine-readable governance architecture
The Governance Schema is part of the broader AIGO machine-readable governance architecture. The schema family can be viewed as: governance → AI system → risk → control → assessment → approval → monitoring → incident / change → assurance → evidence → management review → improvement → retirement Not every AI system requires every record or relationship in the same way. The applicable governance path depends on the system, organizational context, risk profile, lifecycle stage, and applicable requirements.Validation
Governance records participate in the broader AIGO validation and traceability model. Repository validation may include checks relating to: * schema structure * references * traceability * evidence relationships * framework consistency * document integrity * repository health * machine-readable governance artifacts * rules * evaluation fixtures * orchestration configuration A successful validation result provides evidence about the integrity of the validated repository or artifact scope. It does not by itself establish legal compliance, certification, accreditation, or regulatory conformity.Canonical source
Machine-readable schema:schemas/14-governance/14-AIGO-Governance-Schema-v0.1.json
Schema documentation:
schemas/14-governance/14-AIGO-Governance-Schema-Documentation-v0.1.md