Policies are the foundation of how Governance works. Each policy consists of a set of rules—each rule targeting a specific risk area and defining what gets prevented.
Lifecycle Center Governance evaluates coding agent actions in real time, preventing policy violations at the point of action before they reach your environment.
Policies and Rules
Policies are the foundation of how Governance works. Each policy consists of a set of rules—each rule targeting a specific risk area and defining what gets prevented. Policies are organized into 10 categories: Security, Quality, Agent behavior, Operational, Performance, Architecture, Testing, Compliance, Agent oversight, and AI models. This structure makes it easy to understand what each policy enforces and why.
All policies are active and all rules are enabled by default when you activate Governance. You can deactivate a policy or enable or disable individual rules to tailor what's enforced in your org.
Every time a coding agent performs an action, Governance evaluates it against every active rule. If no violation is found, the action proceeds without interruption. If a violation is detected, Governance prevents the action and returns a structured response—explaining what was violated and recommending a compliant alternative.
Enforcements
Each rule maps to one or more enforcements that carry it out. See Lifecycle Center Governance Enforcements.
Governance applies to Agentforce Vibes coding agents. Policy changes take effect across your entire org immediately—no additional configuration required in coding agent surfaces. To view active policies in Agentforce Vibes, see View active policies in Agentforce Vibes.