Governance determines what may enter the capability ecosystem. Runtime determines how admitted capabilities may be used in each application