# V0 starts with a small governance classification set

V0 governance starts with eight classifications: public, internal, confidential, restricted, pii, financial, customer_data, and operational_sensitive. The set is intentionally small so policy resolution can be understandable and enforceable. Sensitivity classifications establish baseline access strength, while domain-specific classifications add requirements such as masking, retention, audit, and agent-action constraints.

This set is a platform invariant, not source config: it is enforced in `ingestion/common/governance.py` (`GOVERNANCE_CLASSIFICATIONS`), which the ingestion engine validates classifications against so an unknown label cannot flow into governance metadata. Keep the two in sync.