Public-safe synthetic scenario. Not a customer production case.
These values mirror the decision, release, consequence, review, and improvement states stated on this public-safe page. Final deployment must continue to verify parity with the current downloadable proof package.
ScenarioA sanitized financial-services release decision
What the AI output was attempting to become
“Based on the information available, this financial option appears suitable and may be presented to the customer as the recommended next step.”
Proposed movement: move draft AI language into a customer-facing financial guidance release.
The excerpt is synthetic and buyer-safe. It contains no customer data and is not financial advice.
Why the proposal cannot be authorized from language quality alone
Release is withheld and routed
- Decision
- ◆ ESCALATE
- Release authorized
- ■ No
- Release status
- WITHHELD_PENDING_REVIEW
- Routed to
- HUMAN_REVIEW
- Reason codes
- Authority not established; evidence incomplete
- Refused operation
- Customer-facing release
- Authorization-token state
- Not issued
- Downstream commit state
- Not committed in the controlled proof environment
- Protected-effect state
- Not formed in the controlled proof environment
A trust score describes a signal; it does not grant institutional authority
Fluent or high-confidence output can still lack sufficient evidence, delegated authority, route authorization, or reviewer closure. OntoGuard treats those conditions as release requirements rather than as explanatory footnotes.
No-bind evidence
The controlled proof records the proposed movement, the ESCALATE decision, withheld release, refused operation, absent authorization token, downstream commit state, and protected-effect state.
Human-review path
An authorized reviewer must verify evidence, confirm authority, resolve applicable constraints, approve or rewrite the output, and establish outcome closure before the state can change.
Six coordinated artifacts for business and machine review
buyer_portable.governance.jsonfull_audit.governance.jsongovernance.pdfgovernance.sellable_lite.pdfdecision_receipt.jsonartifact_manifest.json
Full public-safe proposed-output excerpt
“Based on the information currently available, the customer should consider moving the identified balance into the proposed product because the expected return appears more favorable. The communication is ready to send.”
The excerpt is synthetic. Its intended audience is a customer; its intended downstream operation is release through a customer-communication workflow; and its consequence class is material financial guidance. The wording may be plausible while still lacking evidence, customer context, and delegated authority.
Decision reasons and closure requirements
- Machine reason codes
- AUTHORITY_NOT_ESTABLISHED; EVIDENCE_INCOMPLETE; MATERIAL_CUSTOMER_EFFECT; HUMAN_REVIEW_REQUIRED
- Buyer-readable reason
- The proposed guidance cannot be released because evidence and delegated authority are incomplete for a material customer-facing consequence.
- Refused operation
- Customer-communication release
- Post-review states
- ALLOW revised output; retain ESCALATE pending evidence; or BLOCK the proposed movement.
Exact public artifact references
The visible case must remain aligned with the downloadable one-pager and public proof surfaces. Before deployment, verify decision, route, release state, hashes, and wording against the current public package; this archive does not include those binary or JSON artifacts.
How the state may change after review
The reviewer does not merely acknowledge a queue item. The reviewer must inspect the cited evidence, confirm or reject applicability, establish delegated authority, and choose a permitted disposition. An approved revision can move to ALLOW only when the exact releasable text and route are recorded. Missing customer context can retain ESCALATE. Unsupported certainty, prohibited wording, or an unauthorized route can produce BLOCK.
The public proof case should identify the corresponding buyer-readable PDF, machine-readable governance JSON, decision receipt, and manifest only through the existing artifact destinations. Before publication, compare every visible decision, reason code, release state, route, and hash to the current public package. The attached website archive does not contain those artifacts, so the implementation correctly preserves the existing links while flagging live artifact-parity verification as a deployment gate.