Manage governance policies

Open Policy to review active rules, their coverage, and changes or exceptions that need attention. When you need to create a rule, start with the application or application group it will govern.

Choose the right view

Create rule is available to authorized authors. It asks what the rule applies to: one application, an application group you manage, or the whole organization. Organization rules need tenant-wide rule management. See Apply one rule to an application group.

The policy list can be filtered by Applies to: one application, application group, or organization. A group rule shows its group’s name.

The controls you see depend on your role. If you can review a policy but cannot change its rules, VeriProof keeps authoring actions read-only.

Follow one policy from intent to evidence

1. Open the policy area or rule and confirm its expected outcome and owner.
2. Review the rules that support the policy.
3. Test the exact rule version against representative activity.
4. Use Monitor after activity when the rule evaluates completed evidence. Choose Record, Notify, or Flag session for its follow-up.
5. Use Shadow before action for an inline version. A Before and after activity version in Shadow suppresses effects in both paths.
6. Enforce only through the authorized path. A decision-relevant edit returns the version to Shadow and requires a new approval.
7. Check exceptions and the audited version history. Rollback creates a new Shadow version and preserves earlier evidence.