Each Governance rule maps to an enforcement that checks coding agent activity against that rule.
An enforcement is the mechanism that puts a rule into practice — for example, a Code Analyzer check that scans generated code for a specific violation. When you enable a rule, its enforcement applies automatically. You don't configure enforcements separately from the rules they belong to.
Enforcements run at the point of action, before a violation reaches your org, blocking the violation before it can impact your environment.