GovernanceDraftIn reviewApprovedHemnaathSaiBoth

Human-owned rule authoring, clause lineage, golden tests, publication, activation, rollback, and RAG boundaries.

MarkdownH2ListUse # headings, - lists, and plain text. Every save creates a revision.

# Policy-as-Code Governance Manual ## Principle The insurer owns policy. EvidenceGate stores and executes only approved representations of that policy. A model may locate a clause. It may not convert a clause directly into an active rule. ## Source lifecycle 1. Register the authoritative policy document, endorsement, circular, or operational checklist. 2. Record insurer, product, jurisdiction, effective dates, source hash, and owner. 3. Segment clauses without changing their wording. 4. Retrieve candidate clauses for a policy author. 5. Author a typed rule with explicit inputs, outcomes, and explanation codes. 6. Link the rule to source clauses. 7. Add positive, negative, boundary, unknown-input, and conflict tests. 8. Require independent review. 9. Publish a signed rule bundle. 10. Activate by tenant and effective date with rollback available. ## Rule schema ruleId, name, insurerId, productId, jurisdiction, effectiveFrom, effectiveTo, inputSchema, deterministicExpression, outcomeMap, clauseIds, testSuiteId, author, reviewer, status, version. ## Publication states Draft, In review, Approved, Published, Active, Retired, Rolled back. ## Deterministic execution The engine accepts typed normalized facts and returns Pass, Fail, Unknown, Not applicable, or Error. Missing inputs never default to Pass. Expressions are sandboxed and cannot access network services or unversioned knowledge. ## RAG boundary Retrieval searches only approved tenant and product knowledge. It uses lexical and vector retrieval, metadata filters, reranking, and citation verification. Retrieved text is context for a reviewer or policy author. It is not an executable rule and cannot override a published bundle. ## Change control - Material changes increment the rule version. - Effective dates are mandatory. - Activation is logged. - Existing cases retain the rule bundle selected for their run. - Emergency rollback restores the prior signed bundle. - Every production rule has a named insurer owner and EvidenceGate custodian. ## Minimum golden tests - Expected pass. - Expected fail. - Missing mandatory input. - Boundary date or amount. - Contradictory facts. - Not-applicable product or procedure. - Prior-version replay.