https://openworkloadgovernance.io/docs/concepts/Recent content in Concepts on Open Workload GovernanceHugoen-ushttps://openworkloadgovernance.io/docs/concepts/workloads/Mon, 01 Jan 0001 00:00:00 +0000https://openworkloadgovernance.io/docs/concepts/workloads/<p>A Workload describes a governed service or other workload through its metadata, ownership, classification, identities, resources, capabilities, dependencies, and access intents. The example describes <code>shop-api</code>, a customer-facing webshop API with <code>metadata.type: service</code>. The permitted workload types have not yet been defined.</p> <h2 id="questions-a-workload-answers">Questions A Workload Answers</h2> <ul> <li>What is this workload, and what type of workload is it?</li> <li>Who owns it, and who can approve governance actions?</li> <li>Which environment and data classification apply?</li> <li>Which identities and resources are associated with it?</li> <li>Which APIs and scopes does it provide?</li> <li>Which services and resources does it require?</li> <li>Which actions are intended between identities and targets?</li> <li>Which change-management, approval, and control requirements apply?</li> </ul> <h2 id="description-is-not-enforcement">Description Is Not Enforcement</h2> <p>Declaring ownership, required scopes, or an access intent does not provision an identity, grant access, or authorize a deployment. Participating systems need explicit validation and enforcement contracts. The draft describes desired governance relationships, not an implemented control plane.</p>https://openworkloadgovernance.io/docs/concepts/references/Mon, 01 Jan 0001 00:00:00 +0000https://openworkloadgovernance.io/docs/concepts/references/<p>OWG does not prescribe an identity provider. The Workload example connects external systems using named references and direct <code>ref</code> values, rather than defining users, groups, or teams itself.</p> <h2 id="named-references">Named References</h2> <p>Ownership lists names whose external targets are declared in <code>references</code>:</p> <div class="highlight"><pre tabindex="0" style="background-color:#f0f0f0;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-yaml" data-lang="yaml"><span style="display:flex;"><span><span style="color:#062873;font-weight:bold">ownership</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#062873;font-weight:bold">owners</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- omada:team<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- servicenow:group<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"></span><span style="color:#062873;font-weight:bold">references</span>:<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#062873;font-weight:bold">ref</span>:<span style="color:#bbb"> </span>omada://team/shop-team<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#062873;font-weight:bold">name</span>:<span style="color:#bbb"> </span>omada:team<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span>- <span style="color:#062873;font-weight:bold">ref</span>:<span style="color:#bbb"> </span>servicenow://group/customer-platform<span style="color:#bbb"> </span></span></span><span style="display:flex;"><span><span style="color:#bbb"> </span><span style="color:#062873;font-weight:bold">name</span>:<span style="color:#bbb"> </span>servicenow:group<span style="color:#bbb"> </span></span></span></code></pre></div><p><code>omada:team</code> is a local reference name in this example, not a universal subject type. Matching it to the reference entry identifies <code>omada://team/shop-team</code> as the external target. The example also names roles, a business service, a component, and a repository.</p>