Governance · Audit
Approvals & immutable audit trail
Every state change and every AI action is recorded. Exportable for audit. Roles enforced at API and again at query time.
audit-ready
Approvals queue
Nothing waiting.
Policy
- enforcedPHI fields require restricted access + audit trail
- enforced340B-eligible products surface in cross-domain queries with provenance
- enforcedNo agent self-approval of deployments or contracts
- watchOpen PHI deploy awaiting steward (1)
- enforcedIdentity-resolution merges require human confirmation
RBAC summary
| R | A | Ap | Ad | |
|---|---|---|---|---|
| Discover & query | ✓ | ✓ | ✓ | ✓ |
| Subscribe | ✓ | ✓ | ✓ | ✓ |
| Edit contract | ✓ | ✓ | ✓ | |
| Approve contract | ✓ | ✓ | ||
| Deploy to prod | ✓ | ✓ | ||
| Modify RBAC | ✓ |
Audit trail
| When | Actor | Kind | Action | Resource |
|---|