Audience: Compliance, security, and governance stakeholders.

Governance

Policy enforcement, audit ledger, compliance evidence, Country Intelligence, and Industry Intelligence.

Guide

Deterministic Enforcement

Policy evaluation is deterministic and local. Invalid policy, unavailable audit, or misconfigured required components fail closed rather than silently permitting unsafe traffic.

Audit Evidence

Audit receipts preserve safe operational evidence for governed requests and privileged platform operations without exposing raw customer payloads.

Intelligence Packs

Country and Industry Intelligence are customer-installed local profile packs with entitlement checks and review-required states.

Authoritative Sources

These repository documents remain the source of truth for implementation details.

Policy format

Policy schema and enforcement actions.

docs/POLICY_FORMAT.md

Milestone 3A defines the first strict policy file format for isolated policy loading and pure JSON transformation. Milestone 3B applies that same policy format to live non-empty proxy request bodies.

Audit ledger

Tamper-evident audit receipt behavior and verification.

docs/AUDIT_LEDGER.md

Milestone 4A adds an isolated SQLite audit-ledger foundation. The ledger is append-only and cryptographically tamper-evident.

Country Intelligence

Jurisdiction profile loading and evaluation.

docs/COUNTRY_INTELLIGENCE.md

CP-2 adds a deterministic, offline country intelligence layer for GeoCordon.

Industry Intelligence

Industry profile loading and evaluation.

docs/INDUSTRY_INTELLIGENCE.md

GeoCordon Industry Intelligence is a local, deterministic, provenance-aware registry for sector-specific governance, security, compliance, deployment, and control considerations.

Enterprise acceptance

Operational acceptance checklist.

docs/ENTERPRISE_ACCEPTANCE.md

Certification checklists for GeoCordon Version 2 platform adoption. Use with `docs/PRODUCTION_HARDENING.md`, `docs/RELEASE.md`, `docs/HIGH_AVAILABILITY.md`, and `docs/SUPPLY_CHAIN.md`.