Fail-closed governance
Invalid permits, frozen agents and expired approvals are blocked by the server.
Vordence
Trust should be inspectable, not implied.
This center separates controls enforced by the product from optional provider configuration and formal assurances that still require commercial completion.
Tamper-evident evidence
Permit, release and runtime-event hashes make silent changes detectable.
Protected access
Site identity, hashed API keys, expiring invites and revocable workspace roles.
Data lifecycle
Configurable retention plus a seven-day deletion-request recovery window.
Honest provider state
Email, billing, webhook signing and external timestamps never appear active without credentials.
Verified client decisions
Acceptance can require up to three distinct signed-in client reviewers bound to the exact sealed release.
Current assurance boundary
Vordence supplies operational governance and evidence. It is not a certification authority, legal e-signature service, penetration-test report, SOC 2 report, or guarantee that an external automation behaved correctly. Independent timestamping is identified separately from local SHA-256 sealing.