Governance flows on top of multi-tenant-artifact-permission-isolation: tenant onboarding, quotas, lifecycle, scan policy, audit, and SLA.