Governance

Governance is the product.

NAIO governance and EDENA risk tiers are not compliance overhead. They are the reason regulated health systems and institutions will trust the program. Governance is built before the agents run. Never retroactively.

"An AI news agent is not a convenience tool. It is an institutional cognition layer. Therefore: Register before deploying. Zone before ingesting. Cap before scaling. Log before trusting. Review before expanding."

NAIO Institute

The Governance Institution

NAIO retains oversight authority over agent registration, risk tier assignment, budget governance, data zoning enforcement, and audit review cycles. Every agent, every workflow, every deployment answers to NAIO.

Agent Registration

Every agent must be registered before deployment. Required: identity, role, governance scope, risk tier, lifecycle, and human steward.

Stewardship

Each agent has a named human steward responsible for monitoring performance, reviewing escalations, and ensuring governance compliance.

Certification

Three credential levels: NAIO-C (Certified), NAIO-A (Advanced), and NAIO-F (Fellow). Each level unlocks greater governance authority.

Audit & Review

Every agent undergoes governance review every 30 days or upon escalation trigger. Immutable audit logs with defined retention policies.

EDENA Risk Classification

All AI actions must be classified before execution.

EDENA is the ethical decision engine embedded in Florence operations. Its core rule is simple and absolute: classify first, execute second. No exceptions.

Green Zone

Low-Risk / Mechanical

Informational tasks, research, drafting, market analysis, content outlines, and cohort materials. Fully automated with periodic review.

Automation: Fully automated
Oversight: Periodic review

Yellow Zone

Operational / Supervised

Actions affecting systems or stakeholders. External outreach, content publishing, pricing modifications, financial projections, and entity registration.

Automation: Conditional
Oversight: Approval queue required

Red Zone

High-Risk / Human-Only

Irreversible decisions. Clinical actions, legal commitments, production deployments with PHI, financial commitments, and NAIO governance policy changes.

Automation: Blocked by default
Oversight: Mandatory human authorization

The Agentic Loop

The standard loop pattern.

An agentic loop is a governed workflow cycle in which agents, skills, tools, memory systems, and human stewards repeatedly transform signals into action and action into improved institutional intelligence.

01
Signal Detection
02
Analysis
03
Decision Proposal
04
EDENA Classification
05
Action or Escalation
06
Measurement
07
Learning
08
System Update

A loop without governance gates, monitoring, and feedback is not an agentic loop under this charter. It is merely an automation.

Escalation Protocol

Four levels of escalation.

No Red-tier decision may be executed autonomously. The escalation path ensures that risk is contained, investigated, and resolved at the appropriate level of human authority.

1

Automated Monitoring

Continuous system-level observation of agent behavior, performance metrics, and anomaly detection.

2

Steward Review

Named human steward reviews flagged items, approves threshold breaches, and adjusts agent parameters.

3

Governance Escalation

NAIO governance body convenes for policy-level decisions, risk tier reclassification, or systemic issues.

4

System Intervention

Emergency suspension, agent retirement, or infrastructure-level changes to contain risk.

Auditability

Every loop produces a verifiable audit record.

Logs must be immutable, retained according to policy, and available for operational, governance, security, and compliance review. The audit log is a product feature, not a burden.

Required Audit Fields

Timestamp
Agent identifier
Action description
EDENA classification
Data sources accessed
Tool usage
Approval status
Steward decision (if applicable)
Resolution rationale (for escalations)

Governance is not constraint. It is structural integrity.

Institutional buyers trust NAIO-governed ventures over non-credentialed startups. The audit log, the risk tiers, the human stewardship — these are what make the Florence Ecosystem trustworthy at institutional scale.

Talk to Us About Governance