Additive runtime governance

Compliance Reflex

Your existing Coherence runtime stays authoritative. Compliance Reflex adds a simple enforcement layer on top: ALLOW, LIMIT, REPAIR, REVIEW or BLOCK — with a reason, recommended fix and metadata-only evidence receipt.

Request failed with status code 404

Proof boundary: this layer enforces configured technical policies. It does not certify that an organization is legally compliant with GDPR, the EU AI Act or another law.

ALLOW

Allowed

LIMIT

Allowed with limits

REPAIR

Repair / reroute

REVIEW

Human review

BLOCK

Blocked

Reflex checks recorded

Latest 500 metadata-only receipts

Routeable providers

Blocked

Human reviews

Sovereignty Mode

Extra routing constraints added on top of the existing provider/runtime controls.

Global: No extra geographic restriction. Existing Coherence governance remains active.

Compliance Reflex active

Disabling it never disables the existing Coherence runtime; it only removes this additional layer.

Safe route repair

When a route violates the configured sovereignty policy and an approved alternative exists, re-route and run the existing runtime preflight again.

Require verified governance metadata

Unknown or merely declared provider governance metadata is sent to review.

Fail closed on unknown residency in EU-only mode

Unknown residency does not silently count as EU-resident.

Policy Packs

Composable technical controls. These add to, not replace, existing Coherence governance.

Execution chain

Existing Coherence runtime → Compliance Reflex → ALLOW / LIMIT / REPAIR / REVIEW / BLOCK → existing provider runtime → postflight → evidence receipt.

Governed provider metadata

Only metadata already stored for your provider connections is shown here. Credentials are never returned.

Provider	Connection	Hosting region	Residency	Governance metadata

No routeable providers found. Configure and test a provider in Provider Connections.

Recent Compliance Reflex receipts

Why a request was allowed, limited, repaired, reviewed or blocked.

No Compliance Reflex runtime receipts yet. They will appear automatically when governed AI requests are processed.