Decision Assurance

Decision Assurance

Runtime evidence is not decision evidence

Different evidence types are useful because they answer different questions. The risk comes when one evidence type is mistaken for another.

Maintained by VeriscopicLast reviewed 2026-09-24

Three questions

What happened?

Runtime evidence records system or agent actions, policy enforcement, outputs and observed events.

How is the organisation controlled?

Governance evidence describes controls, roles, policies, assessments and governance posture.

Why did the organisation act?

Decision evidence links applicable evidence, authority, conditions, system contribution, judgement and commitment.

Useful inputs, incomplete answers

A signed runtime record or governance record may form an Evidence Object inside a decision-evidence package. It does not, by itself, establish the full decision-state unless it is connected to the relevant evidence, business authority, governing conditions, human judgement and organisational commitment.

Implementation-neutral by design

Decision assurance does not require the runtime or governance records to originate in a particular product. It asks that their relationship to the specific consequential decision is declared, reviewable and honest about limitations.