Wherever agents act,
govern.sh answers for them
Six industries, one control plane. Teams use govern.sh to hand agents real responsibility — refunds, deploys, payouts, patient scheduling — inside limits their risk team signed off on.
Different industries, the same three moves
Every page in this section tells the same underlying story: agents get identity, policies scope them, and receipts prove what happened. Only the stakes change.
Agents get identity
Every agent carries its own Ed25519 passport — a named, revocable identity that replaces shared credentials and answers the first audit question by default: who did this.
Policies scope them
Declarative rules bound what each agent may touch, how much it may spend, and which actions pause for a human — evaluated on every call in under ten milliseconds.
Receipts prove it
Each decision — allowed, denied, or approved — becomes a signed receipt chained to the one before it. The evidence assembles itself while the agents work.
Your industry is on this page.
Start with one agent and one policy. The receipts start chaining from the very first action.