Declarations, Attachments, and Credentials
Governance Service coordinates the evidence workflows that support control review and credential issuance.
Declarations
Section titled “Declarations”Declarations describe implementation progress, supporting evidence, or automated indicator results for a control. They may be saved as in-progress work or submitted as ready for review.
Attachments
Section titled “Attachments”Attachments support declarations and reviews with files such as evidence exports, reports, screenshots, or approval records. Store only what is needed to support the control decision.
Operators configure the object storage used for attachments. If storage is unavailable, attachment workflows may fail while other governance data remains available.
Reviews
Section titled “Reviews”Reviewers can add comments and outcomes after a control is ready for review. Comments support discussion. Outcomes record the reviewer decision.
Credentials
Section titled “Credentials”Governance Service coordinates credential issuance and revocation with Integrity Service. Credentials should be issued only after the reviewer has enough evidence to support the claim.
Revoked credentials should no longer be treated as active evidence.