Governed, tenant-scoped settings

Tenant configuration governance

Review configuration evidence with a hard separation between approval and application.

Approval does not apply configuration

This module never changes runtime flags, fees, real policies, environment variables, secrets, or an external system.

Loading the private configuration workspace…