# Governance, decisions and approvals Resolve policy and review decisions into explicit evidence before consequential work is allowed to proceed. Source snapshot: bcc79fcc27c4d801c2119bef81ddcce7b4e86498 ## Match the decision to the proposed work Connect issues and verifies context, plan, mutation, diff and promotion decisions bound to digests. Production hosts use durable-required mode with injected receipt storage and signing. The README describes a permit as usable only after its receipt has been stored and exact read-back matches. Verification at the point of use checks freshness, scope and integrity. This gives a concrete integration rule: changing the target, plan or relevant context requires the corresponding decision binding to be reassessed. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Use decisions for branching, then enforce effects DecisionRuntime evaluates shared predicates and immutable decision graphs without evaluating creator-authored code. It validates before execution, bounds complexity and traces, pins subgraphs by revision/digest, and produces replayable results. Form conversion lives in a dedicated adapter. Workflow conversion only admits exact outcome-operation revisions in the server-controlled allowlist; the workflow/product runtime still owns effect execution and authorization. Keep a graph evaluation trace available to explain why a branch was selected. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Make human review useful HumanReview, ReviewQueue and the governance modules provide product composition around assignment, escalation and review outcomes. Present the exact proposed action, its scope, material changes and supporting evidence. A review record should identify the decision it produced and the work it applies to. Keep obligations visible: an allow decision can still require a host to fulfill conditions or persist evidence before an action is eligible. A button label or a previously granted role is not a replacement for that current decision. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Inspect a protected action Follow its approval requirement, trusted actor/context and decision request. Locate the receipt store/signature ports and the point at which the executor re-reads or verifies the resulting permit. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Trace a changed proposal Compare the approved target with a changed input, stale plan or different scope. Use the maintained validation path to see which binding invalidates the old receipt and which review must be repeated. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Check the operator experience Review how pending, denied, expired, superseded and completed decisions appear in the queue. Link the operator back to the exact evidence and outcome rather than collapsing every non-success state into a generic failure. Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md Source: https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/decision-runtime/README.md ## Packages - [@lssm-tech/lib.feature-flags](https://lssm.co/docs/packages/lib.feature-flags/): Feature flags and experiments module for ContractSpec applications - [@lssm-tech/lib.assurance-spec](https://lssm.co/docs/packages/lib.assurance-spec/): Provider-neutral assurance and compliance evidence correlation contracts for autonomous-company actions. - [@lssm-tech/module.audit-trail](https://lssm.co/docs/packages/module.audit-trail/): Audit trail module for tracking and querying system events - [@lssm-tech/lib.contractspec-connect](https://lssm.co/docs/packages/lib.contractspec-connect/): Provider-neutral packet authority and durable decision receipts for ContractSpec Connect. - [@lssm-tech/lib.decision-runtime](https://lssm.co/docs/packages/lib.decision-runtime/): Deterministic, effect-free DecisionGraph and PredicateSpec runtime. - [@lssm-tech/lib.economic-evidence](https://lssm.co/docs/packages/lib.economic-evidence/): Provider-neutral economic evidence primitives for usage, cost, budget, replay, and projection refs. - [@lssm-tech/module.editions](https://lssm.co/docs/packages/module.editions/): Reusable deterministic edition platform surfaces for resources, UI, workflows, storage, agents, and evidence. - [@lssm-tech/module.governance-suite](https://lssm.co/docs/packages/module.governance-suite/): Governance and audit suite — policy editor, audit trail, and compliance surfaces for the Agent + Workflow pillar - [@lssm-tech/module.human-review](https://lssm.co/docs/packages/module.human-review/): Generic tenant-scoped human review contracts, append-only decisions, and optional React surfaces. - [@lssm-tech/module.review-queue](https://lssm.co/docs/packages/module.review-queue/): Review queue module: human-in-the-loop approval, escalation, audit-grade decision flows, and per-domain health probe.