Docs / Approvals
Change approval workflow
Every sensitive change is reviewed, approved, and recorded with immutable evidence.
How to use
1. Submit change
Propose policy or identity changes.
2. Review diff
Inspect deterministic change diff.
3. Collect approvals
Satisfy required approvers.
4. Apply + export
Apply change and export receipts.
Workflow steps
1. Submit change
Create a change request with explicit scope and justification.
2. Review diff
Review the deterministic diff and potential impact.
3. Approve or deny
Approval quorum is enforced; actions are recorded.
4. Apply change
Approved changes become active and are logged.
Core endpoints
POST /identity/changes/request
POST /identity/changes/preview
POST /identity/changes/approve
GET /identity/changes/timeline
Evidence artifacts
Change diff
Approval timeline
Receipt + hash
Exportable change pack
Registry snapshot + verification
PDF approval report
Key API endpoints
POST /policy/change-request — submit changePOST /approvals/approve — approve changeGET /approvals/timeline — approval timelineEvidence outputs
Approval timeline export
Change receipts + hashes
Rollback evidence