okhp3-authorization-governance

Define and enforce authorization checkpoints for defensive assessment and response workflows. Use when deciding who may approve tests, containment, sharing, or high-consequence actions. Do not grant authority implicitly or replace legal or security leadership.