Operational decision posture — core controls live, with a clear path to buyer proof.

How often a signed Decision Dossier is produced. Volume signals real adoption — not just policy on a shelf.

Next move — 128 signed dossiers/month is operational. Next move is breadth: add at least one regulated workflow (treasury movement, healthcare authorization, or AI-agent tool call) so the dossier mix proves governance, not just retries.

Share of high-blast-radius actions (money movement, regulated access, irreversible writes) that resolve through a governed evaluation.

Next move — ~17% high-blast-radius coverage is on the path. The next layer is regulated workflows that buyers ask about by name (treasury, refunds above a threshold, AI agent tool calls). Add them to the evaluator.

Number of verified policy packs encoded into the policy graph and evaluated against live decisions.

Next move — Policy coverage is Strong. Next move is contributing one customized pack back so prospects see attribution as a marketing-acquisition surface.

Frequency of routed human approvals — the override loop that catches policy gaps before they become incidents.

Next move — 18 approval pings/month is the start of an override loop. Each ping you don't route is a 👍-thread audit gap. Route at least one more decision type (vendor onboarding, refund, or contract change) through the same surface.

Combination of audit-room access, public verify links, and private signing keys — the three things an external reviewer asks for first.

Next move — Missing: private signing keys. Each one removes a category of question a reviewer can ask. The cheapest next move is enabling private signing keys — minutes of work, an immediate posture lift.