# One-workflow governance checklist

Illustrative planning worksheet • October 5, 2026

## Define the work
- Business outcome and accountable owner.
- Agent, delegating user, tenant and target system.
- Consequential action and trusted context source.

## Establish authority
- Existing native controls and the specific remaining gap.
- Policy version and explicit allow / hold / deny conditions.
- Approval binding, expiry, mutation and separation of duties.
- All network, credential, retry and delegated paths.

## Test operation
- Normal, denied and approval-required requests.
- Missing policy, stale identity/stop state and dependency failures.
- Target idempotency and uncertain-result reconciliation.
- Stop scope, acknowledgement, verification and recovery.

## Retain evidence
- Policy decision, human authority, dispatch and target result.
- Coverage gaps and exceptions.
- Integrity, completeness, retention and access controls.
- Named rollout owner, success criteria and rollback path.

This worksheet is not an audit opinion or a product support matrix. Validate it against the deployment being reviewed.