Panels
Panels are the operational interface layer for Layer-7 governance. They exist to make governance enforceable and visible: approval queues, decision detail views, audit evidence, and governed submission flows.
Executive Panel
The Executive Panel is the authority surface. It exists to approve, reject, or escalate actions that require human authority. Tier 2–4 decisions appear here with clear reasons and evidence.
Approval Queue
Pending items ordered by tier and risk. Tier 4 defaults to blocked and cannot execute without authorization.
Decision Detail View
Show input signals, score, tier, required authority, and policy flags with clear “why.”
Approval Actions
Approve / reject / escalate, with mandatory reason prompts for high-tier actions.
Executive outputs (what must be logged)
- approval_event: actor, role, decision_id, timestamp
- rationale: structured reason (required for Tier 3/4)
- policy_version: the policy snapshot used for evaluation
- execution_clearance: clearance token (production pattern)
Fail-closed posture
- Tier 2–4 are locked until approval exists.
- If the governance service is down, execution is disabled for governed surfaces.
- Approvals must be non-replayable and bound to the request context.
Ops Panel
The Ops Panel is the submission surface for operators and systems. It exists to make governed workflows the default: changes, releases, campaigns, configuration edits, and operational actions should enter through a governed intake.
Governed Submission
Operators submit actions with required fields. The system returns tier + authority + gate.
Preflight Checks
Policy validation before submission: completeness, constraints, and disallowed actions.
Status Tracking
Operators see queued/approved/rejected with clear next steps and reasons.
Ops panel controls (typical)
- Templates: “release”, “permissions change”, “campaign launch”
- Constraints: environment, blast radius, reversible plan required
- Attachments: risk justification, change plan, rollback plan (Tier 3/4)
- Auto-routing: manager/senior/executive queue based on tier
System submission pattern
- System clients submit to governance evaluation endpoint.
- They receive: tier, gate status, and clearance requirements.
- They cannot execute unless clearance exists.
- They must emit execution status back into the ledger.
Queue UX Rules (Non-Negotiables)
If panels are built poorly, governance becomes slow, ignored, or bypassed. These are the non-negotiables that keep governance runnable.
Reason clarity
Every lock must explain the “why” in plain language, with the policy flags visible.
Fast approve path
Low/medium approvals must be quick to prevent queue backlogs and shadow execution.
Audit-first actions
Every approval action must create ledger evidence automatically—no manual “logging” steps.
Minimum data to show per decision
- risk_score, risk_tier, authority_required, execution_gate
- policy_flags (ex: regulated_data, low_reversibility)
- request summary (what is changing, where)
- who requested (actor_id/service principal)
Approval controls (recommended)
- Approve requires optional rationale for Tier 2; required for Tier 3/4.
- Reject requires rationale for Tier 3/4.
- Escalate is available for Tier 3; Tier 4 is already executive-level.
- Override exists only if it is logged and policy-allowed.
Request a Panel Walkthrough
If you want a guided session reviewing approval queues, evidence expectations, and “passing” requirements for executive governance: