Loading…
Concept
Approval Evidence
Auditors increasingly ask for proof that a process was enforced by the system rather than followed by a person. Evidence assembled afterwards — a screenshot of a settings screen, a message in a channel treated as sign-off, logs stitched together at audit time — answers a weaker question, because it can be edited and it records what happened rather than what was permitted. A record produced by the check itself, while it ran, answers the question as it was asked.
How do I prove an automated action was actually approved?
Auditors increasingly ask for proof that a process was enforced by the system rather than followed by a person. Evidence assembled afterwards — a screenshot of a settings screen, a message in a channel treated as sign-off, logs stitched together at audit time — answers a weaker question, because it can be edited and it records what happened rather than what was permitted. A record produced by the check itself, while it ran, answers the question as it was asked.
2 patterns answer this
Safe code deployment
A pipeline — or an agent with repo access — ships to production, force-pushes, or runs a migration.
4 executable policies
Policy change review
Someone edits a policy, raises a threshold, or disables a rule.
6 executable policies
From this term to a governed action
- Safe code deploymentThe recurring action behind this term.
- GitHub Deploy Approval GateAn executable policy that implements it.
- Try to break it in the sandboxA real signed verdict, no account.
- Deploy on your surfaceAvailable on 3 platforms today.
- Verify the proof yourselfCheck the signature without trusting us.
- Start in Shadow ModeMeasure on your traffic before enforcing.
Where this fits
Decionis is the deterministic decision layer between intent and execution. This concept is one way in; the architecture behind it is the same in every case.