From 5cfa6048febae910592db16382e4cc3df412d5d4 Mon Sep 17 00:00:00 2001
From: mblanke <mblanke@gmail.com>
Date: Wed, 24 Dec 2025 12:49:29 -0500
Subject: [PATCH] Define shared vs app-specific scope

---
 governance/SCOPE.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 governance/SCOPE.md

diff --git a/governance/SCOPE.md b/governance/SCOPE.md
new file mode 100644
index 0000000..cbd2847
--- /dev/null
+++ b/governance/SCOPE.md
@@ -0,0 +1,17 @@
+Shared across all applications:
+- Severity levels and meaning
+- Finding structure and terminology
+- Table layouts for findings
+- Filtering and sorting behavior
+- Icons and visual language
+
+Application-specific:
+- Data sources
+- Execution logic
+- Automation workflows
+- Permissions and access control
+- Branding name and copy where appropriate
+
+Rule:
+If something feels shared, it is shared.
+Default to goose-core.