# Governed capabilities
A governed capability is an approved operation AI may request — not a raw API call and not uncontrolled system access. Operational Trust checks each request against identity, business role, scope, policy, approval, and certification before execution.
AI may recommend, prepare, or perform work only within the identified person’s existing authority. It cannot invent new capabilities or expand that authority.
Why it matters
Giving AI direct system access creates uncontrolled risk. Governed capabilities express work in business language (customer.search, deal.reviewPipeline, approval.prepareRequest) while the platform enforces trust controls on every request.
Users do not select arbitrary tools or paste application credentials. The AI interface provides the interaction; AI Fabrix provides the governed capability behind it and binds every action to the active person’s verified authority.
How it works
AI → governed capability → Operational Trust checks → approved operation → evidence
Before execution, AI Fabrix verifies:
- who is acting and which business role is active
- which business context and records are in scope
- whether the capability is allowed for this person and case
- which policies and human approvals apply
- what evidence must be captured
Certified does not mean currently authorised. Validation and certification prove readiness for a scope; runtime Operational Trust still decides whether this request may proceed now. When authority or required context cannot be verified, the work stops safely — cannot verify means do not execute.
How Role Assistants receive catalogs of capabilities: How Role Assistants get capabilities. Integrators declare risk and approval expectations on the Configure AI contract track. Architecture mediation: Capability gateway.
Example
A Role Assistant requests contract.checkRenewalRisk for an in-scope customer. Operational Trust confirms the identified person, role, dimensions, certification, and policy. Only then does execution proceed — with audit and evidence recorded.
Business value
Governed capabilities make AI actions accountable, auditable, and aligned with business vocabulary instead of vendor-specific APIs — under existing enterprise authority.