Declarations, Attachments, and Certificates
Governance Service coordinates the evidence lifecycle for controls and applied policies.
Declarations
Section titled “Declarations”Declarations capture evidence, assertions, or automated findings for a project control. They can be submitted by users or created by worker workflows.
Attachments
Section titled “Attachments”Evidence files are uploaded through Governance Service and stored in the configured object storage provider. The database stores attachment metadata and service-generated storage keys or access URLs, depending on the configured provider.
Certificates
Section titled “Certificates”Certificate workflows depend on Governance Service, Auth Service, and Integrity Service. Governance Service coordinates policy and project context while Integrity Service handles integrity records and credential-related operations.
Production Requirements
Section titled “Production Requirements”Use a real object storage provider in production and confirm that evidence upload, download, and retention expectations match customer policy.