Governance

How CDC governs data movement and records what happened, assessed against a governance bar.

• Governance and audit model: where enforcement sits (the pre/post-hook boundaries), fail-closed behaviour on uncertainty, the two-phase audit that keeps “authorised” and “committed” distinct, the record-level tamper-evidence chain, and how the triggering principal is captured. Start here.
• Context value integrity: the character rule applied to text entering governed process context, what a rejection looks like, why there is no opt-out, why nothing already stored is re-validated, and the knowingly accepted regression on mis-decoded text.
• Governed domain models: how the model catalogue decouples consumers from source systems, stores governed data as a preserved event log, and carries identity, sensitivity, and ownership as first-class, enforceable facts.
• Governance Rules as data: how a Rule is stored as a versioned JSON document over a closed catalogue, how it is evaluated with three-valued Conditions, where it applies, and how an unreadable Rule fails closed.