Governance

Who will act at TomoWISE, and the trust shape that will gate it. Design-phase.

Governance at TomoWISE follows the same model as the 2-BM pilot: people and autonomous agents are facility principals at the MAX IV Site, and on the beamline they surface through the actions they take. Their commands are gated by a trust shape (a Zone grouping the beamline's resources, a Conduit binding the surfaces that may issue commands, and Policies that say who may do what).

TomoWISE is pre-build, so this shape is not yet instantiated. The MAX IV operator and safety-review structure is still being defined and is carried pending on the MAX IV site page; CORA does not invent a MAX IV operator pool or review chain ahead of confirmation.

What is already settled is the boundary: clearances (the safety forms that must be active to start) are issued at the MAX IV Site, not on the beamline, and the beamline links up to them rather than restating them. The MAX IV safety-form names themselves are an open question (PSS-1 on Open questions).

The concrete Zone, Conduit, and Policy instances, and the operator pool, land when the beamline approaches commissioning, following the 2-BM governance shape.