Govern
Enforced before execution.
The decision boundary is live before execution. Everything below exports as one signed proof pack.
Posture None Ready Shadow Enforce
Export proof packAllowed3310before executor ran
Blocked32withheld before execution
Held78awaiting a person
Receipts3420signed and scope-safe
StatusenforceJul 15 to Aug 15
Per governed action
Window-complete decisions for each action this control governs.
| Action | Allowed | Blocked | Held | Total |
|---|---|---|---|---|
PAY_INVOICE | 2110 | 28 | 72 | 2210 |
REQUEST_APPROVAL | 806 | 4 | 0 | 810 |
REJECT_INVOICE | 394 | 0 | 6 | 400 |
Control identity
accounts-payable / PAY_INVOICE
- control id
ctrl-ap-pay- entity
Invoice- environment
production- workflow
invoice-to-pay- activated
- Jun 15, 09:42 by alex@northstar.example
- activated by
- alex@northstar.example
Evidence
Decisions, receipts, and alerts live on Activity
Govern is where you set posture and export the proof pack. Every decision this control made, with its signed receipts, verifiability, alert deliveries, and the approval queue, is the evidence stream, and it lives on Activity so it isn't rendered twice.