Governed Workflows & Approvals

OrviQ enforces enterprise governance by decoupling business entity operations from approval workflows.

---

The Workflow Doctrine

1. AI Recommends, Humans Decide
   AI models generate proposals, draft mappings, and extract evidence. However, mutating states (e.g., publishing a policy, approving a control mapping, granting an exception) requires human sign-off.

2. Maker-Checker & Multi-Eye Governance

   • 4-Eye Review (Maker-Checker): The user proposing a change cannot approve their own submission.
   • 6-Eye / 8-Eye Review: Multi-stage escalation requiring domain manager or executive committee sign-off for high-impact decisions.

3. Approvals Hub (/approvals)
   All pending approval items across all domains converge into a single centralized decision queue. Decision makers can review full context, attached evidence, and prior reviewer notes before granting approval or returning with comments.