Evidence graph
Traceable relationships among claims, sources, controls, tests, findings and decisions.
Preserve the relationship between requirement, risk, control, test, finding, approval and decision.
Traceable relationships among claims, sources, controls, tests, findings and decisions.
Hashes, timestamps, fingerprints and references that prevent version mixing.
Verifiable summary of the decision and the conditions supporting it.
Exportable set for human review, internal audit or re-clearance.
Each stage produces a decision, an accountable owner and enough evidence for the next stage not to rely on blind trust.
It is which system you are prepared to authorise, under which limits and with what evidence.