Controls your organisation can own, version and review.
A Control Pack describes what must be true, what evidence is required, who owns the control and what changes when the control changes. It is configuration around one assurance runtime—not a separate product per industry.
Start with the obligation. Configure the workflow.
BioChangeGate v0.1
Life-sciences evidence change control: provenance, revision impact, selective replay and qualified review.
View the pilot →EU AI Act evidence controls
Applicability records, transparency evidence, human review and change traceability around customer obligations.
View the route →APRA AI assurance
Inventory, ownership, lifecycle change, resilience and evidence for regulated financial-services workflows.
View the route →Enterprise governance
Internal policy, approval, data boundary and review controls for general enterprise operations.
View the route →Every control answers five questions.
What must be true?
The obligation or policy condition.
What proves it?
The evidence request and source.
Who owns it?
The control owner and reviewer.
What is the verdict?
ALLOW, REVIEW, BLOCK or ABSTAIN.
What changes?
The impact and replay rule.