Why model selection is a governance decision

Classify data first

Public, internal, confidential and restricted data limit the permitted model routes, tools and external connections.

Policy before preference

The server-side control core excludes routes that are not permitted for the workspace, role, data class or sovereignty mode.

Provider review before optimisation

Selection by quality, latency or cost requires an active and reviewed provider route. Provider onboarding, budget limits and model version are reviewed separately before approval.

Record the decision in redacted form

The existing control core records the policy decision as a redacted event. A complete, filterable audit trail will be added with the Audit and Approval Centre.

Note: This article describes a technical operating model and does not constitute legal advice.