This page describes AAES Govern’s controls. AAES Operate has private-work permissions, operational reviews and recorded-spend limits; it does not include Govern. About AAES Govern
Before you enable this package
The telephony connector requires a consent-record reference for calls; that is not validation of actual consent. ACCOUNT_SID and the consented-number placeholder pass nothing until replaced.
Read each action's effects and exclusions below. Before installation, also read the complete package requirements, including credential issuance, scope, expiry, and provider permissions. These are deployment prerequisites, not capabilities this package supplies.
Capabilities (4)
Each capability below is one registered operation. The complete package JSON includes its exact network destination allowlist. The repository stores it at packs/twilio.json and embeds a copy in the release binary.
Risk tiers. R0 is the minimum for reads. R2 is the minimum for write, create, update, execute, and invoke. R3 is the minimum for delete, send, pay, deploy, approve, share, and transfer. Operators can raise these levels. A minimum tier does not measure the operation's business or confidentiality risk.
On supported execution paths routed through AAES Govern, the R3 actions listed below require approval by an authorized person. Bypass paths and observation-only registrations are outside that guarantee. A provider's restoration feature does not remove this approval requirement. A provider-side approval, such as approving a GitLab merge request, is also separate from AAES Govern human approval. The capability matrix shows which execution paths are implemented, restricted to lab use, or refused at startup. Live compatibility must be tested in your environment.
Field guide. Endpoint is the service address and request method. Connector is the adapter that makes the call. Custody describes how the credential is held; the credential reference identifies the value to resolve. Data class sets handling requirements: pii means personal data, financial means financial records, and internal means internal organizational data.
twilio.messages.read v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Messages.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Read messages.
Read the account's message log. Message bodies and the numbers at both ends are personal data, so the read is classified as pii (personal data). ACCOUNT_SID is a placeholder to replace before enabling.
twilio.messages.send v1.0.0R3
- Kind
- tool
- Action
- send
- Endpoint
POST https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Messages.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Send messages.
Send an SMS. A message cannot be recalled after delivery, and send is one of the designated actions requiring human approval, which is why it carries the minimum R3 tier. The recipient's number is personal data and the body may carry more, so the capability is classified as pii (personal data).
twilio.numbers.read v1.0.0R0
- Kind
- tool
- Action
- read
- Endpoint
GET https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/IncomingPhoneNumbers.json- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Read numbers.
List the phone numbers the account holds. Phone numbers are personal data, so the read is classified as pii (personal data). ACCOUNT_SID is a placeholder to replace before enabling.
twilio.calls.create v1.0.0R3
- Kind
- tool
- Action
- send
- Endpoint
call https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SID/Calls.json- Connector
- telephony
- Custody
- customer_vault
- Credential ref
secret-ref-twilio-auth-token- Data class
- pii
Create calls.
Place an outbound call. A call reaches a person and cannot be taken back, so the action is send at the minimum R3 tier; send is one of the designated actions requiring human approval. The telephony connector refuses a call whose request carries no consent record reference, and the dialed number must be in this capability's egress allowlist: replace '+1REPLACE-WITH-CONSENTED-NUMBER' with the real consented E.164 numbers, because the placeholder passes nothing. ACCOUNT_SID is a placeholder to replace before enabling.
Credential reference
The credential field names a reference rather than containing credential material. Packs are designed not to contain secrets; the format checks cover only known credential formats and cannot prove that arbitrary text contains no secrets. Installing a package registers its capabilities. Configure the provider credentials, endpoints, and network access, then test the integration in your environment before enabling it.
- Reference
secret-ref-twilio-auth-token- Custody
- customer_vault
- Injection
- header (Authorization)
Configure the value and injection format specified in the package. Assign responsibility for credential rotation and revocation, restrict provider permissions, and keep credential material out of logs and responses.
Complete credential requirements
The Twilio account's HTTP Basic credential — an API key pair or the account SID and auth token — held in the client's own secret manager. Twilio authenticates the REST API with HTTP Basic, so the stored material must be the complete Authorization header value (scheme included): 'Basic ' followed by the base64 of ACCOUNT_SID:AUTH_TOKEN (or the API key SID and secret). Prefer an API key over the account auth token: a key can be revoked without rotating the account's root credential.
Resources
twilio-account(api, pii):https://api.twilio.com/2010-04-01/Accounts/ACCOUNT_SIDtwilio-phone-number(number, pii):tel:+1REPLACE-WITH-TWILIO-NUMBER
Technical package and review record
Complete provider requirements and exclusions
Use a Twilio API key or the account auth token with only the access these capabilities need; the pack does not create one. Sending an SMS and placing a call both reach a person outside AAES's control and cannot be taken back, so both carry the send action at the minimum R3 tier, and send is one of the designated actions requiring human approval. SMS is registered over the HTTP connector because the telephony connector models calls, not messages; the call capability uses the telephony connector, which refuses any call whose request carries no consent record reference, and whose dialed number must itself be in the capability's egress allowlist — the '+1REPLACE-WITH-CONSENTED-NUMBER' entry is a placeholder that passes nothing until the reviewer replaces it with the real consented E.164 numbers, so this capability fails closed as shipped. ACCOUNT_SID is a placeholder to replace in every endpoint.
Message bodies and phone numbers are personal data, so the pack registers at the pii class throughout; it says nothing about Twilio Verify, Lookup, recordings or transcription, which carry their own data classes. AAES has not been certified by Twilio; the endpoints here are configuration to review and test; the vendor has not endorsed it.
Download the complete package JSON for exact network allowlists, credential requirements, exclusions, and setup notes. Read these requirements before installation.
The full documentation review record is supplied in the evaluation package. The evaluation package runs in your environment and comes only with the paid design partnership. This page reproduces the source links and review block; the full record is available for evaluation. Discuss a design partnership to inspect it before installation.
Review block
This section reproduces the review block recorded in the pack file. The evidence and approval record is separate: for a reviewed pack, it is in the evaluation materials and in the release binary's embedded assets.
Review completed: 2026-09-23
5 sources, retrieved 2026-09-20, 2026-09-23
- https://www.twilio.com/docs/messaging/api/message-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/voice/api/call-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/phone-numbers/api/incomingphonenumber-resource (retrieved 2026-09-20)
- https://www.twilio.com/docs/iam/api-keys (retrieved 2026-09-20)
- https://www.twilio.com/docs/usage/requests-to-twilio (retrieved 2026-09-23)
Current documentation links are navigation aids. They do not change the package, its historical sources or its review date. Review dates describe a documentation review, not a live integration test. No package is provider-endorsed or yet tested against a live provider tenant.
Release identity
SHA-256 of the pack file bytes: 859f02b4c91bd2fdb4d9b8e42b5abd58f59b7d986c98833d7a4a89d0cd45f305
Distributable: yes, digest matches the release manifest. Editing a package changes its release identity. A deployment plan checks its own file digests; it does not restore reviewed status or authenticate approval.