Governance needs to appear in the workflow itself: clear sources, visible uncertainty, controlled access and an explicit review step. These are design objectives for this portfolio, not claims of certification or deployed controls. Validation must establish what each implementation actually delivers.