Operational decision posture — core controls live, with a clear path to buyer proof.

How often a signed Decision Dossier is produced. Volume signals real adoption — not just policy on a shelf.

Next move — 128 signed dossiers/month is operational. Next move is breadth: add at least one regulated workflow (treasury movement, healthcare authorization, or AI-agent tool call) so the dossier mix proves governance, not just retries.

Share of high-blast-radius actions (money movement, regulated access, irreversible writes) that resolve through a governed evaluation.

Next move — ~17% high-blast-radius coverage is on the path. The next layer is regulated workflows that buyers ask about by name (treasury, refunds above a threshold, AI agent tool calls). Add them to the evaluator.

Number of verified policy packs encoded into the policy graph and evaluated against live decisions.

Next move — Policy coverage is Strong. Next move is contributing one customized pack back so prospects see attribution as a marketing-acquisition surface.

Frequency of routed human approvals — the override loop that catches policy gaps before they become incidents.

Next move — 18 approval pings/month is the start of an override loop. Each ping you don't route is a 👍-thread audit gap. Route at least one more decision type (vendor onboarding, refund, or contract change) through the same surface.

Combination of audit-room access, public verify links, and private signing keys — the three things an external reviewer asks for first.

Next move — None of the readiness primitives are on, so any external reviewer starts from cold. Turn on public verify links first (one config toggle, lowest cost, biggest viral surface), then enable the audit room, then upgrade to private signing keys.