每项产生重要影响的操作都应留下证据。
Zof 记录发生了什么变更、验证了什么、哪些工具和模型参与其中、生成了哪些证据、满足了哪些策略、由谁授权操作，以及后续发生了什么。
一个对象，回答 发生了什么，以及为什么值得信任。
Zof 将验证结果、支持性记录和授权决策组织成证据包，供审查使用。Control Plane 在评估某项操作能否继续时使用这些证据。
Change
- Reference
- PR #4831 · payments/auth.ts
- Generated by
- Coding agent (model and version recorded)
- Affected systems
- 7 · Tier 0
- Risk
- High
Verification
- Unit
- Pass
- Integration
- Pass
- Security
- Pass
- Performance
- Pass
- PCI controls
- Pass
Evidence
- Artifacts
- 37
- Execution traces
- 14
- Policy evaluations
- 6
- Approvals
- 2
Authorization
- Payments Tier 0 policy
- Satisfied
- Security policy
- Satisfied
- Human approval
- Approved · release owner (named)
Outcome
- Decision
- Release authorized
- Production
- Healthy after release
- Evidence ID
- zof_ev_8f29…
Eight questions, answered for every action.
What changed
The change itself, its scope, and the systems the System Graph resolved as affected.
Who or what proposed it
A named developer, a coding agent, or an automation, with the model and tool versions involved.
What was verified
Which verification domains ran, what they covered, and what they found.
Which tools and models participated
Deterministic tools, verification systems, customer validators, and approved models, each attributed.
What evidence was produced
Artifacts, execution traces, screenshots, logs, and policy evaluations, sealed together.
Which policies were satisfied
Every policy evaluated against the change, with its result and the version of the policy that applied.
Who authorized it
The named approvers, their roles, and the exact decision they made.
What happened afterward
Production outcome recorded against the change, so the loop closes with what actually happened.
是证明，而非仪表盘。 为日后查阅而构建。
仪表盘告诉您此刻正在发生什么。证据则让数月后的审查者了解当时已知的信息、作出的决策，以及该决策在当时为何合理。
- 有记录且可归属
证据记录将发现和决策与生成它们的工具、系统或人员关联起来。
- 按策略管理存储和数据外传
在私有部署中，证据存储和任何获批的数据外传都遵循您配置的环境与策略。
- 可从 System Graph 查询
从一个服务追溯到影响它的变更、当时存在的证据以及作出的决策。
- 可按需导出
发布摘要、合规证据包和管理层报告均由同一批证据包生成。
The same evidence, read by four different rooms.
Release reviews
What must be proven for this release, and whether it has been.
Auditors and compliance
Which controls applied, which were satisfied, and who approved, with provenance.
Incident reconstruction
What changed before the incident, what evidence existed, and what was decided.
Leadership
Release readiness and risk posture built from proof, not from a status slide.
了解您系统的证据包是什么样
预约 Reliability Sprint，审查限定范围评估中的场景、观察到的行为和支持性记录。
- 证据处理遵循您的部署策略
- 来源信息与发现关联
- 可导出用于审计
