Glossary

Allow / deny / require approval

The three control routes for a proposed action. Policy decides which route applies; evidence records the outcome.

Every guarded action routes to one of three outcomes: ALLOW (policy permits), DENY (policy blocks), or APPROVAL_REQUIRED (named human must authorize this exact action). Evidence records whichever route applied.