| Element | Approved | Executed | Result |
|---|---|---|---|
| Prompt | identity-check v9 | identity-check v9 | Match |
| Model config | primary-gpt v3 | primary-gpt v3 | Match |
| Policy set | pii-boundary v5 | pii-boundary v5 | Match |
| Tool scope | document-store (read) | document-store (read+write) | Finding |
Assurance is a comparison you can inspect — not an assumption.
The approved configuration is compared with what actually executed, field by field, for a single workflow run.
- A mismatch is surfaced as a finding and can trigger governed remediation.
- Comparisons run on metadata: keys, versions and hashes.