01
Intent or proposed action
An agent, workflow, or tool proposes a specific action with defined parameters, target resource, and execution context.
02
Identity and authority resolution
The control plane resolves the actor identity, delegated authority, and applicable policy set before any execution proceeds.
03
Current-state context collection
Policy evaluation uses current resource state, approval status, revocation state, and operational conditions — not a cached snapshot.
04
Policy and admissibility evaluation
The proposed action is evaluated against versioned policy. Matching actions proceed. Prohibited actions are blocked. Uncertain actions escalate.
05
Required approval binding
If policy requires human approval, the approval must be bound to the exact action parameters. Parameter substitution after approval is detectable.
06
Permit issuance
An execution permit is issued with defined scope, time-to-live, and lineage reference. Permits are revocable and expire.
07
Bounded execution
The action executes within the permit scope. Parameters, target, and duration are constrained by the enforcement boundary.
08
Settlement or failure recording
Execution outcome is recorded: success, partial success, denial, or failure. Each outcome is linked to the permit and policy version.
09
Evidence preservation
The complete decision chain — identity, policy, approval, parameters, permit, execution, and outcome — is preserved as independently verifiable evidence.
10
Later reconstruction
Any governed action can be reconstructed from preserved evidence without relying on the runtime that executed the action.