Policy gates
Policy decides whether a recommendation is allowed, blocked, approval-required, or escalated before action is possible.
- Approval thresholds
- Risk classification
- Policy explanations
Yedron includes control from the start: Decision proposes, Policy gates, Workflow records approval, Action executes, and Audit preserves evidence.
Authority stays visible
The control path makes the decision, policy result, human authority, and action request distinct records.
Illustrative workflow view. Controls and integrations depend on deployment.
Policy decides whether a recommendation is allowed, blocked, approval-required, or escalated before action is possible.
Workflow records who approved, rejected, overrode, or escalated a decision so accountability stays separate from recommendation logic.
Decisions, policy results, approvals, actions, retries, failures, and sensitive reads must leave traceable evidence.
In practice
The policy result, accountable owner, and review history should travel with the decision. Define the cases that may proceed and the cases that need human judgment.
Route a proposed response for review when its cost, risk, or scope meets the workflow threshold. Show the reviewer the evidence and the policy explanation alongside the requested action.
Give operators an explicit path to reject, escalate, or override a proposed response within their authority. Keep the reason and review history available to the next owner.
Reconstruct a decision from its source context through the policy result, approval, action attempt, and observed outcome. Keep each responsibility identifiable during review.
How it works
Governance works best when teams define it with the workflow itself. The control path should remain clear during normal operation and when something goes wrong.
Agree the decision types, available actions, account boundary, and reviewer roles. Identify thresholds and the evidence needed to evaluate them.
Record whether the proposal is allowed, blocked, or approval-required. Where human authority is needed, preserve the reviewer decision and any escalation.
Follow the authorized action, failure path, and outcome. Preserve the records required to explain what happened and why the work was allowed to proceed.
Common questions
The control requirements are defined for the workflow. Policy determines the gate and required authority; cases that require a human decision are routed through the recorded approval path.
No. A recommendation supplies a proposed response. Policy and Workflow determine whether and how it may proceed, separately from the reasoning that produced it.
It does not proceed into execution through that path. The workflow should expose the policy explanation and define whether the next step is correction, escalation, or closure.
Adoption starts with one workflow, the systems around it, the approvals it needs, and the outcome your team wants to improve.
Design a decision loop