The structured record a policy engine emits each time it evaluates a rule: allow or deny, the versioned rule id, a hash of the input and a timestamp, signed and written to the evidence store. A release or tool call without a verdict is an audit finding, and one that passed under an exception names it in its verdict.
- Developed in
- ch. 04, Layer 01: Govern-as-Code
Toolkit: Policy Card builder - Chapters
- ch. 04, The Stack · ch. 05, Patterns · ch. 12, Governance Program · ch. 23, AI Agents
- Source
- Defined by this Body of Knowledge: the section it is developed in is the source
Where it is used
12 chapters of the Body of Knowledge use the term. Each link opens the first section that does.
- 02 · Why Now What changes when governance is engineered 1 mention
- 03 · Values & Principles The eight values 1 mention
- 04 · The Stack Opening 5 mentions
- 07 · Maturity Model Observable criteria, by layer and level 1 mention
- 11 · AI Defined Eight characteristics that break classic IT governance 3 mentions
- 12 · Governance Program Policies across the lifecycle 1 mention
- 13 · Risk Management The loop: identify, assess, treat, monitor 2 mentions
- 15 · Deployment Vendor contracts and licence terms 1 mention
- 16 · Fairness & XAI Protected characteristics, proxies and the data you need to test 2 mentions
- 19 · Privacy & AI How to read this chapter 2 mentions
- 22 · Principles & Standards OECD AI Principles 1 mention
- 23 · AI Agents Agent incidents and telemetry 1 mention
Patterns that use this term
One pattern page uses the term.
- Continuous Assurance Telemetry 2 mentions
Related terms
Sources
No external source: the term is coined or used in a specific sense by this Body of Knowledge, and the section linked under "Developed in" is its source.
Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .