# DEB-140: Implementing Basic Governance

> **Jira:** [DEB-140](https://divami.atlassian.net/browse/DEB-140)  
> **Source Report:** [20260315.md](../../reports/jira/20260315.md)

- **Status:** On Hold
- **Assignee:** Phawhan Saii Gajjalakonda
- **Priority:** Medium
- **Created:** 2026-02-16T08:43:22.950+0530
- **Updated:** 2026-02-26T12:42:58.033+0530

**Description:**

1. The governance includes implementing the policies for all the tables to see only their own personal data will be reflected while communicating with the agent. 
2. Encryption of the data we are syncing to the database.

**Architecture Diagram:**

```mermaid
flowchart TD
    subgraph DataSyncLayer[Data Sync Layer]
        A[Raw data from source]
        B[Encrypt at rest<br/>AES-256]
        C[Store in DB]
    end
    subgraph QueryLayer[Query Layer]
        D[User Query]
        E[RBAC Policy Check<br/>row-level security]
        F{Has access?}
        G[Filter to user-owned data]
        H[Return filtered result]
        I[Deny with message]
    end

    A --> B --> C
    D --> E --> F
    F -->|Yes| G --> H
    F -->|No| I
```
