Compliance by Construction

The principle that compliance requirements (authorisation, auditability, explainability, reversibility) should be enforced by the infrastructure itself, not documented after the fact. The Grid provides a clear action trail, enforced permissions, and proof of control as built-in properties of every operation.

Unlike compliance-as-documentation, which produces evidence after the fact (control matrices, attestation reports, exception logs), compliance-by-construction makes the controls themselves runtime properties. The audit trail is not a generated artefact; it is the only history the Grid keeps. Permissions are not policy documents; they are signed tokens checked at every action. Reversibility is not a procedure; it is what the substrate does. Auditors verify by querying the system, not by reading the binder.