Approval waits for the evidence
Every change carries what has been proved about it and what has not. An approval is refused by the server while any acceptance criterion has no evidence against it, and the refusal names which — enforced where it cannot be walked past, rather than reported on afterwards.
No figure is stored
Counts, cycle positions, forecasts and spend are derived from the underlying records every time they are shown. A stored count is a count that drifts, and one that has drifted is worse than none.
Nobody is measured
There is no per-person metric anywhere, by design. Facts people record — who is on something, who is away — are kept. Numbers computed about a person are not, because a delivery system that scores people gets the numbers it deserves.
Agents work under a spec gate
Agents open changes and propose; they never merge, close, set a priority or approve their own work. Anything an agent wrote is marked as such, everywhere it appears.
The record is a hash chain
Every decision appends to a ledger that is verified nightly and anchored, so a claim about what was approved and when is one you can check rather than one you take.
Exports you can hand over
A monthly evidence bundle, signed, with the facts the Trust page states and the ledger's verification alongside them — the thing a procurement questionnaire actually wants.