GOVERNANCE_STATE_MACHINE_MATRIX.md

0. Purpose

Define deterministic governance state transitions with canonical code-aligned record types.

1. Policy Domain

States:

• DRAFT
• FROZEN

Transitions: | From | To | RecordType | |---|---|---| | DRAFT | FROZEN | POLICY_FREEZE |

2. Access Decision Domain

State model:

• Stateless override by latest decision for (subjectId, action, policyHash).

RecordType:

• ACCESS_DECISION

3. KES Domain

RecordTypes:

• KES_VERSION_PROPOSED
• KES_VERSION_RATIFIED

Constraints:

• Monotonic contiguous version chain.