diff --git a/GOVERNANCE.md b/GOVERNANCE.md
new file mode 100644
index 0000000..27523fb
--- /dev/null
+++ b/GOVERNANCE.md
@@ -0,0 +1,33 @@
+# Governance — 405 Civic Portal
+
+This portal operates under the **WellSpr.ing Covenant Governance Model**.
+
+## Eight Principles
+
+The WellSpr.ing Eight Principles are the conduct standard for all portals, AI agents, and developers in the network. They are non-negotiable and non-waivable.
+
+Full text: [wellspr.ing/constitution](https://wellspr.ing/constitution)
+
+## VCAP Attestation
+
+AI agents operating in this portal are governed by the Vaulted Covenanted Agent Protocol (VCAP). The current WellSpr.ing attestation is at:
+
+[wellspr.ing/vault/ody/attestation-2026-04-17.json](https://wellspr.ing/vault/ody/attestation-2026-04-17.json)
+
+## Developer Covenant
+
+Developers contributing to this repository attest to the Eight Principles by submitting a pull request. If you disagree with any principle, do not contribute — the covenant is not a barrier, it is a shared foundation.
+
+## Data Governance
+
+- **Civic data** (news, events, business listings) is sourced from public records and community submissions.
+- **Personal data** is not collected except where explicitly provided by users.
+- **AI-generated content** is always disclosed as such.
+
+## Sovereignty
+
+This repository is the sovereign primary source. No third party controls or can gate access to this configuration. See [wellspr.ing/sovereignty](https://wellspr.ing/sovereignty) for the architectural rationale.
+
+---
+
+*WellSpr.ing — Civic AI for the commons. Freely given, so freely given.*