Intervention consoleconnecting

Cosign — where a human stops a bad merge

The runtime human-in-the-loop surface for the genealogy fleet. Held actions surface with their evidence; an operator approves or rejects; the decision routes back to the enforcement plane and lands in an append-only audit chain.

Source: simulator · synthetic data
Run trace →Repo →

Cosign queue

0 held

Connecting to the governance stream…

When an agent proposes an action the policy can’t auto-clear, it surfaces here with full context for a decision.

Truth Chain

append-only · hash-linked

No decisions yet. Approve, reject, or let a hold time out — each writes a hash-linked row here.

Tamper-evident, not tamper-proof: an in-place edit breaks the chain, but a service-role holder could rewrite it. True WORM needs an external ledger.