Governance
Knowledge becomes operational only after its authority is clear.
RCA conclusions, compliance findings, and expert knowledge move through explicit review states with role checks, evidence checks, versioning, supersession, and audit history.
Controls
Authors cannot approve their own RCA conclusions.
Approved snapshots remain immutable.
Expert knowledge can be superseded without deleting prior versions.
Compliance findings retain requirement and evidence references.
Every mutation records actor, action, resource, request ID, and time.
Tenant and site boundaries apply before retrieval and before persistence.