Dual-control governance
Consent policies
Prepare, review, and activate purpose-specific policies with clear separation between maker and checker.
i
Activation here does not enable downstream use
There is no external synchronization, provider override, or silent renewal. Downstream systems require a separate explicit implementation decision before any use.
Aggregate posture
Governance overview
Maker workspace
Prepare a new policy version
The next policy version is assigned automatically when saved.
Governed lifecycle
Policy register
The checker must be a different administrator from the maker.
No policies are in the register.
Synthetic assurance
Zero-side-effect rehearsal
Validates ownership, maker-checker separation, version conflicts, expiry, and prevention of silent renewal, override, synchronization, and automatic downstream activation.