Judging Changes¶
A governed change has a decision before it and execution evidence after it. These pages cover the changes that happen another way: someone changes a resource in a cloud console, or a controller acts while the Network Authority (NA) does not answer. The NA records them, judges each one, and says what is to be done about a judged DENY.
All of it is off by default. Out-of-band records need
EVIDENCE_OUT_OF_BAND=on (with EVIDENCE_STORE=on). Remediation, reviews
and the emergency capability also need EVIDENCE_REMEDIATION=on.
Observers, break-glass, judgements and quarantine: how changes made outside governed actions are recorded and judged.
What a judged DENY leads to: remediation guidance, due times, the cancel pair, reviews by a second holder, waivers and notices.
Urgent changes under an ordinary DENY, or while the NA does not answer: the emergency capability and break-glass.