01
Console: English in, policy out.
A governance sentence compiles into enforced controls - query filters, redaction at read, output scanning, response schemas.
Governance policy Enforced›Analysts may query deal documents, but client names and pricing terms never leave the workspace.
COMPILES TO POLICY · v14
Query filterscope: deal_docs · exclude: client_names Redaction at readpricing_terms → masked Output scanningblock: client_names, pricing_terms Response schemacited_answer.v2 · sources required 02
Governed endpoints.
The same governed context, callable from outside Verra - query it from anything the firm builds, inside or beyond the workspace.
Governed endpointpolicy v14 POST /v1/context/query
{ corpus: "deal_docs", q: "mid-market definition" }
Query filter appliedscope: deal_docs Redaction at readpricing_terms → masked Response schemacited_answer.v2 · 3 sources Recorded to trace#4822 · hash 9c41…0f 03
Proven, not asserted.
A validation harness grades responses against the contract; a failed probe localizes the gap and re-versions the policy.
Validation harness59/60 probes PROBE SET · GRADED AGAINST CONTRACT
Client-name redaction10/10 Pricing terms never surfaced10/10 Citation coverage ≥ 95%10/10 Response schema conformance10/10 ✕Permission boundary holdsgap: untagged span · re-tagging
Out-of-scope queries refused10/10 Re-run with policy v15
04
Every run replayable.
Each call recorded with its policy version and result hashes. Same corpus, same policy - the same run.
Run trace · #4821 Reproduced EVERY CALL · POLICY VERSION · RESULT HASH
search_corpus(deal_docs)v15a3f2…c91d extract_terms(CIM.pdf)v157be4…0f22 build_market_model(seg, h=5)v15d901…8a4e render_deck(template=firm)v1544c7…be03 #4821vs#4821-r Hashes match