Production configuration or secrets change via automation; teams discover it from logs after the fact.
Domain status
Active- Shipped today
- Workflow Dispatch GuardShipped
- Deployment & Config Change GuardShipped
Workflow dispatch guard is canonical; deployment guard available under engagement.
Guard readout
- Status
- Shipped
- Control steps
- 05
- 01Config or secret change proposed
- 02Policy evaluates production-touching rules
- 03Risk advises on baseline deviation
- 04Production-touching changes escalate to approval
- 05Execute or block — evidence preserved
Risk advises. Policy decides. Evidence proves.
Production-touching change or out-of-baseline modification.
Evidence bundle with the change action, policy version, risk advisory context, and approval when required.
Pre-execution control over production changes — not reactive log review.
