SDS-047: Risk & Evidence Service (RES)

[!CAUTION] SUPERSEDED: This specification has been merged into SDS-047: GovernedSpeed™ Governance Runtime.

Status: Superseded
Superseded-By: SDS-047
Version: 1.0
Date: 2025-12-25
Satisfies: [PRD-010, ADR-028]
Bounded-Context: architectural-governance

Summary (Historical)

This SDS previously defined the Risk & Evidence Service including:

• Domain model: EvidenceArtifact, RiskRegister, RiskEntry, EvidenceHash, RiskSnapshot
• Invariants: POL-RES-001 through POL-RES-006 (SHA256 hashing, score validation)
• Commands: SubmitEvidence, UpdateRiskEntry
• Queries: GetRiskSnapshot, GetEvidenceByModel, GetHealth, GetMetrics
• Events: EvidenceSubmitted, RiskEntryUpdated
• Ports: EvidenceRepository, HashCalculator, MetricsExporter, EventPublisher

The Policy Gateway (SDS-047) and Risk & Evidence Service have been unified into the GovernedSpeed™ Governance Runtime to ensure the enforcement point (sidecar gateway) and evidence collection mechanism (risk ledger) are handled by a single runtime entity.

For Full Content

See: SDS-047: GovernedSpeed™ Governance Runtime

Related

• ADR-028: GovernedSpeed™ LLMOps Architecture
• ADR-031: GovernedSpeed™ Integration
• SDS-047: Policy Gateway Service — Also superseded by SDS-047