Effect confirmed
The rail reports the bounded result and the receipt binds it to the originating authority.
03 / proof
Governance receipts
Evidence survives the action.
Aetheria preserves why an effect was proposed, who held authority, what Gateway decided, what the rail reported, and what recovery followed.
Governance receiptObserved
- Proposal
- records.release.request
- Actor
- records.supervisor
- Purpose
- approved.publication
- Authority
- delegation.active
- Policy decision
- admit.scoped
- Registered rail
- records.publish
- Dispatch
- accepted
- Effect state
- observed
- Recovery
- available
Normalized evidence object
A decision record that extends through execution.
A governance receipt is more than an activity log. It binds the proposal and authority decision to the registered rail, dispatch state, observed outcome, and available recovery.
- 01Proposal identity
The exact requested effect and its typed inputs remain bound to the record. - 02Authority resolution
The actor, delegation, purpose, scope, policy, and target establish why the decision was valid. - 03Boundary decision
Gateway records admission, denial, or deferment before any rail dispatch. - 04Effect state
Dispatch, observed success, failure, or unknown outcome remain separate facts. - 05Recovery continuity
Reconciliation, rollback, revocation, and corrective action link back to the originating decision.
Explicit outcomes
No synthetic certainty.
Each result carries different operational meaning and a different next control.
No dispatch
The boundary prevents execution and preserves the failed authority or policy condition.
Rail failure
The action was authorized, but the registered rail reports failure and exposes recovery.
Reconcile first
Dispatch exists without confirmed effect. The system preserves uncertainty and opens reconciliation.
Unknown-state recovery
Uncertainty becomes governed work.
A timeout or broken connection does not prove that an external effect failed. Aetheria preserves the dispatch, blocks conflicting follow-on action, and drives reconciliation.
- 01Preserve the dispatch
Keep the exact rail request and correlation evidence intact.
- 02Mark the effect unknown
Prevent success language and dependent execution.
- 03Reconcile the external state
Query the authoritative system or route the case to a responsible operator.
- 04Bind the resolution
Attach the confirmed effect, corrective action, or recovery to the original receipt.
Independent assurance
StilleNacht tests the exact target.
StilleNacht remains outside Aetheria's installed execution authority. It evaluates the named build, environment, workflow, policy, and evidence boundary without converting internal test volume into a universal certification claim.
Exact release
Assurance attaches to the build and configuration actually evaluated.
Falsifiable controls
Denial, failure, unknown state, recovery, and boundary violations remain testable.
Evidence, not theater
The record states what was proven and preserves what remains outside that proof.
Consequential action requires accountable authority.