Bring in the documents behind this client’s systems: model documentation, validation reports, policies, notebooks. Upload them, or connect the GitHub repository where they already live.
Page states
Authorization recorded. “I am authorized by Nebula Mutual to bring these files into this workspace.” Ticked by Practitioner, Northline Advisory, for Nebula Mutual, on 2026-10-12 10:02 CT.
Upload files
GitHub
One repository is connected.
Learn more about the GitHub app
The GovernanceOS app reads files only. It can never write, run anything, or see a repository you did not choose.
Connected repository
| Repository | Branch and paths | Pinned to | Last read | Approved |
|---|---|---|---|---|
| nebula-mutual/ read-only: contents and metadata |
main; docs/, validation/, registers/ | commit 9f2c1e7, 2026-10-15 | 2026-10-16 09:12 CT, on your request | by the organization owner of nebula-mutual on GitHub, 2026-10-15 |
Learn more about reading again
Reading the pinned commit again changes nothing unless a file is missing. Moving to the latest commit brings changed files in as new versions.
Files in this workspace
| File | Source | Hash at arrival | Arrived | Used in |
|---|---|---|---|---|
| model-card-claims-routing-v3.pdf | Uploaded by the practitioner | de050edafe57… show full hashde050edafe57b1616e0430829ee28204a1a014217e618fffa960d82d34148c7b | 2026-10-14 | Claims routing: cited in a draft finding |
| validation/ | GitHub, nebula-mutual/ | a47d6e80e738… show full hasha47d6e80e7388ed191d8c8f3fa970e2507af82e8322adcf953e15ec4c29ede95 | 2026-10-16 | Claims routing: cited in a draft finding |
| docs/ | GitHub, nebula-mutual/ | 5dbfee8490cd… show full hash5dbfee8490cdcc712f521ce956c822757af642ff8b30b86c79b8775f462af0ae | 2026-10-16 | Not used yet |
| vendor-attestation-2026.pdf | Uploaded by the practitioner | 7ed9a31c82f7… show full hash7ed9a31c82f79d8d9b638b0dda8f68410886bc5de228d28e48bb175f146ff054 | 2026-10-12 | Customer assistant: vendor file |
| .env | GitHub, nebula-mutual/ | none: not read | Refused 2026-10-16 | refused: looks like a secrets file; not read, not stored |
Learn more about files and evidence
A file in this workspace is not evidence. Evidence is attached to a gate by a named person, in the institution’s own tenant.
Required before the first upload or connection. Recorded with your role, the time and this client.
Upload files
Connect a GitHub repository
Install the GovernanceOS app on the repositories you choose, on GitHub’s own page.
Learn more about organization repositories
If the repositories belong to an organization, its owner approves the app there.
Confirm the client’s authorization first.
No files and no repository yet
Learn more about the file list
Files you bring in are listed here with their source, their hash at arrival and where each is used.
Waiting for the organization owner of nebula-mutual on GitHub to approve the GovernanceOS app. You asked on 2026-10-15 16:40 CT. Nothing is read until they approve.
Read this before the first upload: Nebula Gulf Bank’s profile is residency-bound. Files you bring in here are stored in Canada, outside the region. Choose what this workspace keeps.
Asked once for this client, and recorded with your role and the time.
Upload files
Connect a GitHub repository
The same choice applies to files read from a repository.
Choose what is kept, and record the client’s agreement, first.
No files for Nebula Gulf Bank yet
Files appear here with their source and their hash at arrival.
Required before the first upload or connection. Recorded with your role, the time and this client.
Upload files
Connect a GitHub repository
Confirm the client’s authorization first.
No files for Nebula Regional Health yet
Files appear here with their source and their hash at arrival.
How a file becomes evidence
Learn more about files and evidence
A file here is not evidence yet. It becomes evidence when a named person attaches it to a gate, in the institution’s own tenant. At that moment its hash, and for GitHub its commit, go into the record. A later change to the file arrives as a new version. The attached version never changes.
What GovernanceOS never does
- Run code or notebooks from these files
- Write to a repository
- Read or keep files that look like secrets, such as keys and .env files
- See repositories nobody chose
- Keep GitHub access after a disconnect
Where files live, and what happens at handover
- In this client’s workspace, in the Canadian region.
- When you hand a client’s workspace over, the files move to the client with it. As its consultant you keep a read-only copy that lists each file’s name and hash, not the file.
- When you hand over your own institution’s workspace, everything moves, files included, and you keep no copy.
- If your trial ends, the files freeze with the workspace and go into its one export file.
Who sees them
You, until the client claims the workspace; then the people the client adds.
Learn more about your assistant and files
Your assistant can read file names and hashes through the connector. It can never attach a file to a gate.