Control surface
| Question | Countersign supports | Your team still owns |
|---|---|---|
| Understand before action | Context, exact arguments, provenance, edit schema, and field-level diff | Risk-specific UX, training, and instructions |
| Intervene or stop | LangGraph interrupt/resume, allowed decisions, rejection, and execution outcomes | Approved stop procedures and escalation authority |
| Trace decisions | Hash-chained request, decision, expiry, and execution events; evidence export | Retention, access governance, and storage controls |
| Authorize reviewers | Admin, approver, and viewer roles; captured policy and quorum | Identity lifecycle, training, and delegated authority |
| Investigate failure | Original input, edit, policy, runtime outcome, and integrity verification | Incident response, monitoring, and broader technical logs |
A practical operating pattern
- Identify actions capable of material impact and define policies by action, graph node, risk, or amount.
- Include a reviewer-facing description, exact arguments, runtime provenance, and an edit schema where edits are safe.
- Require trusted identity and appropriate quorum wherever reviewer attribution matters.
- Resume only through the recorded decision path, then append the completed, failed, or halted outcome.
- Export and verify evidence, test restore paths, and review authorization and escalation arrangements periodically.
What remains yours
Teams still need to assess classification and applicability, manage risk, document the system, train reviewers, govern personal data, secure infrastructure, handle incidents, and maintain retention and oversight processes.
A hash chain detects altered exported history. It does not replace database controls, encryption, a retention policy, or an externally managed signing key. SQLite is an evaluation path, not a production claim.
Primary baseline
Read Regulation (EU) 2024/1689 and obtain qualified legal advice for role, classification, applicability, and timing. Use this guide as an engineering checklist, not a legal conclusion.