Governance guarantees

Guarantees

What Aarmos guarantees

Aarmos governs the execution of declared governance. It does not determine what governance ought to be.

These are technical guarantees, not legal ones. Each item in the first list is testable against a receipt you already hold. Each item in the second is something you own, and the receipt shows that you owned it.

Aarmos guarantees

  • Deterministic evaluationThe same declared governance and the same inputs produce the same Verdict, on any machine, at any time.
  • Deterministic compositionParticipant contributions combine under one published rule: a contribution may narrow a Verdict, never widen it.
  • Evidence integrityEach receipt is signed and chained to the one before it. Alteration, removal, or reordering is detectable.
  • Receipt immutabilityEvidence is append-only. It is never edited in place; it leaves only through declared retention.
  • Offline verificationA receipt verifies with an open verifier, with no network access and no dependency on Aarmatix.
  • ReplayA recorded Verdict is reproducible from the contributions recorded alongside it.
  • Contribution attributionEvery Verdict is explainable solely from the participant contributions on the receipt. There is no hidden step.

Aarmos does not guarantee

  • Business correctnessWhether an action was the right one for the business is not something the runtime evaluates.
  • Regulatory complianceAarmos produces evidence auditors can read. It does not determine whether an organization meets an obligation.
  • Policy qualityA policy that permits too much is executed faithfully. The runtime does not judge whether governance is sufficient.
  • External evaluator correctnessAn answer from a customer's evaluator is recorded with its identity and inputs, not re-derived or second-guessed.
  • Organizational approval decisionsAn approval satisfies a step-up. Whether the approver should have approved is the organization's judgement.
  • Action taken outside AarmosGovernance covers what is routed through it. Coverage is reported as counts and named gaps, never assumed.

Ownership of each item in the second list is set out in the shared responsibility model. Liability is allocated in the Terms of Service.