software lifecycle governance