Governance reports package a frozen brief, its evidence limits, and its decision context into a versioned PDF artifact.
Draft and final reports
- A draft can be generated from an unconfirmed brief and carries a visible draft notice.
- A final report requires a confirmed brief.
- A draft cannot be published as a final artifact.
Each artifact records the brief id and version it represents. Generating a newer brief does not change an existing report.
Delivery history
CiCi keeps artifact creation separate from distribution and observed retrieval.
Recording an out-of-band handoff does not prove that a recipient opened or read the report. CiCi reports zero observed access until retrieval is actually observed.
Download integrity
Reports are served through an authenticated route. Before serving a file, CiCi verifies the stored PDF against the artifact hash and records the retrieval. If verification or ledger recording fails, the file is not served.