decomposer: fix validation failure for Migrate the kab_ingestion domain models, ports, GitHub SCM connector, and SharePoint CMS connector into the repository's app/ package.; Wire the migrated ingestion components into the agent application entry point, card, settings, triggers, governance, publication, and validation layers.; Populate every remaining placeholder file with working application, package, test, dependency, and Kubernetes content.; Verify the migrated agent and completed repository end to end.

app/governance.py

@@ -1,6 +1,17 @@
-from .domain.models import Document
-from .settings import Settings
+from dataclasses import dataclass
 
-def authorize(document: Document, settings: Settings) -> tuple[bool, str]:
-    allowed = not settings.allowed_repositories or document.source.repository in settings.allowed_repositories
-    return (allowed, "approved" if allowed else "repository is not allowed")
+from .kab_ingestion.domain.models import SourceDocument
+
+
+@dataclass(frozen=True)
+class GovernanceDecision:
+    approved: bool
+    reason: str
+
+
+def review(document: SourceDocument, require_approval: bool = True) -> GovernanceDecision:
+    if not document.title.strip() or not document.body.strip():
+        return GovernanceDecision(False, "title and body are required")
+    if require_approval and document.metadata.get("governance_approved") is not True:
+        return GovernanceDecision(False, "governance approval is required")
+    return GovernanceDecision(True, "document passed governance")