Decisions
Decision Ledger
The Decision Ledger is the lasting history of governance outcomes: what was decided, by whom, on what basis, and whether it is still valid.
- In the app
- Project → Approvals & Exceptions → Decision Ledger tab; each decision opens on its own page
What a decision records
- The governed record, the lifecycle action and the outcome.
- Who decided, the role they acted in, and the authority they relied on.
- The result of each policy condition, such as required evidence or no open critical findings.
- A hashed snapshot of the evidence reviewed, so later changes cannot rewrite what was seen.
When a decision needs review
A decision moves to Review Required when it expires, a monitoring threshold is breached, a vendor change or regulatory update affects it, its evidence goes stale, the system is reclassified to a different tier, or someone chooses Request reassessment.
Why the ledger matters
An approval queue shows work waiting for action. The ledger shows what authority existed at a point in time. Decisions are never overwritten; a reassessment produces a new decision alongside the old one.
Last reviewed 2 October 2026
Next stepExceptions & reassessmentAn exception is a bounded, owned and time-limited waiver. Reassessment reopens governance work when an earlier decision may no longer hold.