
For defined high-impact lanes, Good Proof enforces externally verifiable, fail-closed gates so outcomes are defensible before they're challenged.
Not a certification. Scope-limited verification. Acceptance depends on counterparty/programme requirements.
AI denials/exceptions can become disputes, appeals, and claim-handling cost.
Status Link verification before reliance for defined high-impact action classes.
Evidence Pack for claims, disputes, and oversight.
Reduces friction/exposure; does not guarantee claim outcomes or model correctness.
Verifiable decisions before they become claims.
Guardian sign-off on high-impact exceptions with audit trail.
Fail-closed + immediate revocation reduces blast radius.
"High-impact [ACTION_CLASS] SHALL require a valid externally-verifiable Status Link (No Stamp → No Ship)."
"On NOT_VERIFIED / NEEDS_REFRESH / WITHDRAWN / EXPIRED, Buyer SHALL treat as unverified and SHALL block or escalate per [ESCALATION_PATH]."
"Anti-spoof controls: verify_url host MUST match official_verifier; HTTPS/TLS required; redirects forbidden."
Webhooks accelerate orchestration; live Status Link verification remains the source of truth.
See /kill-switch for enforcement semantics and /clause-pack for exhibit templates.
If failed: Buyer MAY withhold reliance for affected action class.

One lane live: fail-closed gating + Status Link verification + dispute-ready Evidence Pack.
Definition of done: Workflow blocks on status ≠ VALID for selected action class.
Good Proof is scope-limited verification. A VALID status confirms scope compliance under lane rules—not outcome correctness.


Programme-scoped human finality for the edge cases.
Definition of done: your workflow blocks on status ≠ VALID.
Scope-limited verification. Not a certification.