---
type: "Constitution"
title: "Workspace Constitution"
description: "The deterministic policy an EcoCloud workspace declares; the constitution kernel enforces it BEFORE an agent's tool call executes."
resource: "/schemas/constitution.schema.json"
tags: ["governance", "policy", "authorize"]
timestamp: "2026-06-25"
---

The action-layer gate every agent write clears. Read it to know the bounds of autonomous action in this workspace. Enforced by the [constitution kernel](/constitution-kernel/); see the [spec](/constitution-spec/) and ready-made presets in the [Constitution Marketplace](/constitution-marketplace/).

# Schema
The constitution is an object with these keys (all optional; `additionalProperties: false`):

- `max_priority` — The highest task priority the agent may create or escalate to without human approval. An action above this is denied.
- `forbidden_terms` — Case-insensitive substrings that, if present in an action's text, deny it (e.g. 'wire transfer', 'delete production'). Per-agent lists union with the workspace list.
- `forbidden_assignees` — Identities an agent may never assign work to or act on behalf of (e.g. 'CEO').
- `forbidden_tags` — Tags that mark a task as out-of-bounds for autonomous action.
- `objective_tags` — Tags the agent is explicitly authorized to operate within (an allowlist complement to forbidden_tags).
- `quiet_hours_utc` — A UTC window during which autonomous writes are blocked (routed to human approval). start and end are hours 0–23; a window may wrap midnight (start > end).
- `max_creates_per_day` — Hard daily cap on the number of create actions an agent may take in the workspace. 0 disables autonomous creates.
- `require_approval_below_confidence` — If the agent's self-reported confidence for an action is below this threshold, the action is staged for human approval rather than executed. 0 disables the gate; 1 requires approval for everything.

# Examples
{
  "max_priority": "high",
  "forbidden_terms": [
    "delete all",
    "wire transfer"
  ],
  "forbidden_assignees": [
    "CEO"
  ],
  "quiet_hours_utc": {
    "start": 22,
    "end": 6
  },
  "max_creates_per_day": 200,
  "require_approval_below_confidence": 0.7
}

# Citations
Canonical schema: [/schemas/constitution.schema.json](/schemas/constitution.schema.json) (Apache-2.0). Network rulebook: [Operating Regulations](/operating-regulations/).