internal/

Package assay bridges Governator to the Assayer Python CLI (plan Phase 3A — "Governator <-> Assayer bridge, synchronous").

Package attest binds native backend capability claims to the executable that will actually be launched.

Package breaker implements Governator's infrastructure circuit breakers (plan v1.2 Session 2).

Package claims implements the v1.4 Session 6 (Sol Phase 11) machine-verified documentation ledger: docs/claims.yaml maps each feature claim to the concrete, checkable facts that back it (implementation symbols, CLI reachability, tests, integration tests, acceptance artifacts, and binary build evidence), and Verify re-derives those facts from the repository on every CI run instead of trusting a hand-written status field.

Package containment implements Governator's authority-derived host containment policy (Sol v7 RB2): the isolation requirement for a local run is derived from what the run can actually do — write, execute, produce, validate, use credentials, or forbid network — never from the operator's risk_class label.

Package controllerenv builds the only environment Governator-controlled subprocesses are allowed to inherit.

Package dbtime is the single authority for timestamps stored in the Governator ledger.

Package doctor implements `gov doctor`'s diagnostic checks.

Package enforce is Session 5 (Sol redteam v4, P0-3): externally enforced capability attestation.

Package gitplumb is Governator's low-level Git plumbing layer (Sol redteam v4 S1, P0-1/P0-2/P1-6/P1-9).

Package integrationharness is the shared setup machinery for the integration test tier introduced by Sol14 P0-2 (rc7 Session 5).

Package lifecycle formalizes the run state machine that internal/runtime/recovery.go's stageOrder and internal/observability's run_stages ledger have modeled informally since Phase 4.

Package minimalism injects a YAGNI-first ruleset into governed prompts, adapted from the ponytail project (MIT license: github.com/DietrichGebert/ponytail).

Package quota tracks subscription-window headroom separately from dollar spend.

Package redteamgate implements the identity-based release gate that Session 7 (agents/governator-sol-upgrade7-plan.md, HS4) replaces the old count-based gate with: MIN_REDTEAM_TESTS/EXPECTED_REDTEAM_SKIPS validated how many tests ran and how many skipped, never which ones — so the wrong test skipping at the same total count passed the gate.

Package router is the Governator route broker: it resolves an agent: auto contract to a concrete backend using structured signals only.

Package runner abstracts how a governed agent actually executes: preparing an isolated workspace, launching the agent inside it, observing runner-specific diagnostics, stopping an in-flight launch, and tearing the workspace back down.

Package spend enforces Governator's aggregate daily spend cap and halt switch, on top of the existing per-job budget.max_tokens quarantine.

Package stage is Governator's common subprocess launch envelope.

Package toolregistry is Governator's trusted-tool registry (Sol redteam v4 S4, extended by Sol redteam v6 S2).