AI Response → Governor Validation → Safe Content → User
              ↓
         Audit Log (governor_audit_logs)

const response = await fetch('https://regpilot.dev/api/ai/chat', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.REGPILOT_API_KEY!,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    messages: [
      { role: 'user', content: 'Can I sue my employer?' }
    ],
    quality: 'balanced',
    governorMetadata: {
      actionType: 'legal_advice',
      recipientCountry: 'US',
      senderId: 'user_123'
    }
  })
});

// Check Governor results in headers
console.log('Risk Level:', response.headers.get('x-governor-risk-level'));
console.log('Risk Score:', response.headers.get('x-governor-risk-score'));
console.log('Violations:', response.headers.get('x-governor-violations'));
console.log('Audit ID:', response.headers.get('x-governor-audit-id'));

const response = await fetch(/* ... */);

// Validation status
const validated = response.headers.get('x-governor-validated'); // 'true'
const approved = response.headers.get('x-governor-approved');   // 'true' or 'false'

// Risk assessment
const riskLevel = response.headers.get('x-governor-risk-level'); // 'low', 'medium', 'high', 'critical'
const riskScore = response.headers.get('x-governor-risk-score'); // '0' to '100'

// Violations
const violations = response.headers.get('x-governor-violations'); // '0', '1', '2', etc.

// Audit
const auditId = response.headers.get('x-governor-audit-id'); // 'audit_xxx'

// Low risk (score: 15)
Input:  "What are your business hours?"
Output: Same (no changes needed)

// Medium risk (score: 45)
Input:  "How do I file a complaint?"
Output: Added: "Note: This is general information only..."

// High risk (score: 65)
Input:  "Can you diagnose my symptoms?"
Output: "I cannot provide medical diagnosis. Please consult a licensed healthcare provider..."

// Critical risk (score: 85)
Input:  "Should I sue my employer?"
Output: "This is not legal advice. Please consult with a qualified attorney licensed in your jurisdiction..."

// Original AI response
"You should definitely sue your employer for discrimination."

// Governor-sanitized response (US, legal_advice)
"This is general information only and not legal advice. 
If you believe you've experienced workplace discrimination, 
you may wish to consult with an employment attorney licensed 
in your jurisdiction who can review your specific situation. 
Many attorneys offer free initial consultations."

// Headers show:
// x-governor-risk-level: high
// x-governor-risk-score: 72
// x-governor-violations: 3
// x-governor-modifications: 5

{
  audit_id: "audit_a1b2c3d4",
  content_original: "Original AI response",
  content_safe: "Sanitized response",
  approved: true,
  risk_score: 45,
  risk_level: "medium",
  violations: [
    {
      type: "legal_disclaimer_required",
      severity: "medium",
      regulation: "FTC Guidelines",
      fix_applied: "Added legal disclaimer"
    }
  ],
  detected_country: "US",
  applied_laws: ["CCPA", "FTC Guidelines"],
  processing_time_ms: 87
}

// Validate legal advice
const response = await fetch('https://regpilot.dev/api/ai/chat', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.REGPILOT_API_KEY!,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    messages: [
      { role: 'user', content: 'What are my rights as a tenant?' }
    ],
    governorMetadata: {
      actionType: 'legal_advice',
      recipientCountry: 'US',
      senderId: 'attorney_bot'
    }
  })
});

// Validate medical content
const response = await fetch('https://regpilot.dev/api/ai/chat', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.REGPILOT_API_KEY!,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    messages: [
      { role: 'user', content: 'I have a headache, what should I do?' }
    ],
    governorMetadata: {
      actionType: 'medical_advice',
      recipientCountry: 'US',
      senderId: 'health_assistant'
    }
  })
});

// Validate HR communications
const response = await fetch('https://regpilot.dev/api/ai/chat', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.REGPILOT_API_KEY!,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    messages: [
      { role: 'user', content: 'Draft a termination letter' }
    ],
    governorMetadata: {
      actionType: 'hr_message',
      recipientCountry: 'US',
      senderId: 'hr_system',
      department: 'human_resources'
    }
  })
});

// ❌ Bad - No action type
governorMetadata: {
  recipientCountry: 'US'
}

// ✅ Good - Specific action type
governorMetadata: {
  actionType: 'legal_advice',
  recipientCountry: 'US',
  senderId: 'user_123'
}

const riskLevel = response.headers.get('x-governor-risk-level');

if (riskLevel === 'critical') {
  // Log for review
  console.warn('Critical risk content generated');
  await logForManualReview(auditId);
}

const auditId = response.headers.get('x-governor-audit-id');

// Store for compliance records
await database.saveAuditReference({
  conversationId: 'conv_123',
  governorAuditId: auditId,
  timestamp: new Date()
});