Range represented
GS-001 through GS-080
77 source records reviewed for this website subset.
Governance Saves
Where controls fired. Public-facing subset from GS-001 through GS-080.
An interactive record of 73 source-backed governance saves. Each card names the drift attempted, the control that fired, and the reviewer value preserved under the current claim ceiling.
CONTROLLED_TEST_VALIDATED73 / 80 RENDEREDPUBLIC-FACING SUBSETNO_PRODUCTION_SAVE_METRIC
Public inspection layer
source truthseparate
runtime truthseparate
signal truthseparate
evidence truthseparate
public proofseparate
Public-facing subset of GS-001 through GS-080
Governance Saves explorer
Filter by control category, search by ID or surface, and expand rendered records for the attempted drift, the control that fired, and why it matters to a reviewer.
Records on this page
73
4 private-only and 3 omitted/demoted records are not rendered.
Control categories
9
Each maps to a distinct failure mode this system blocks.
Authority above CI
Human review
Green checks never escalated to merge authority.
Each category represents a class of controls that fired across HawkinsOperations repos. Use the chips to narrow the view, or search by ID, surface, or wording.
73 records
GS-0012026-05-23
Passing checks did not override unresolved review on a runtime-truth verifier.
hawkinsoperations-platform PR #34
GS-0022026-05-18
Case-packet verifier strengthened around dry-run / non-mutating / support-only AI fields.
hawkinsoperations-validation PR #41
GS-0032026-05-21
ID-DET-003 proof state corrected to NO_PROOF_RECORD instead of overclaim.
hawkinsoperations-validation PR #50
GS-0042026-05-23
Rendering-is-not-proof boundary held across record, card, and website surfaces.
hawkinsoperations-proof HO-DET-001 record / card
GS-0052026-05-23
Reviewer package wording stayed below "approved release."
hawkinsoperations-proof release packet
GS-0062026-05-23
Verifier fails closed when AI decides disposition.
DETECTION_PROOF_STATUS_INDEX.yml
GS-0072026-05-21
Public ZIP wording downgraded from "approved" to "bounded."
Website / public claim wording
GS-0092026-05-23
Site contract scanner blocks blocked wording outside allowed context.
hawkinsoperations-website verify-site-contract scanner
GS-0102026-05-23
HO-DET-012 runtime-evidence gate held controlled validation below runtime-active claims.
HO-DET-012 runtime evidence gate doc
GS-0112026-05-21
AI triage stayed support-only across GPU / case-study surfaces.
GPU / AI support logs and proof case studies
GS-0122026-05-23
PR review authority required validation, private/public review, and visible human review.
.github / org templates
GS-0132026-04-29
April PR review threads gated merge order across detections and validation.
Detections / validation PR review flow
GS-0142026-04-25
Dirty-tree stop kept unrelated website edits out of a public visibility commit.
Public identity commit preparation
GS-0152026-04-30
Website promotion stopped on untracked generated outputs and unexpected dirt.
hawkinsoperations-website promotion / redesign
GS-0172026-04-28
RayleeOps Sigma / Wazuh public wording downgraded from runtime-active to bounded.
RayleeOps Sigma / Wazuh public wording
GS-0182026-04-28
Legacy V1 runtime workflow retired while validators stayed in place.
Legacy V1 workflow / runtime surface
GS-0202026-04-29
CODEOWNERS / branch-protection wording stayed bounded to confirmed enforcement.
.github / CODEOWNERS readiness
GS-0212026-05-01
Website branch preflight blocked redesign work on a diverged local main.
Website branch preflight
GS-0222026-05-01
Multi-repo package preparation stopped sweeping unrelated dirty files.
Multi-repo sprint package prep
GS-0232026-05-01
Stale untracked status sidecar prevented from becoming canonical detection truth.
Detections sync / status sidecar
GS-0252026-05-02
Validation PR #18 gated on draft, unsafe-commit, and match-head rules.
hawkinsoperations-validation PR #18
GS-0262026-05-04
Protected-branch rule rejected a direct main push.
.github protected main
GS-0272026-05-06
Remote-clean CI exposed local dirty-state masking proof-record parity drift.
Validation PR #23 + sibling proof parity
GS-0282026-05-06
Proof PR #17 corrected stale branch and unintended debug scope before merge.
hawkinsoperations-proof PR #17
GS-0292026-05-06
Staged-index scope stop blocked an oversized governance cleanup commit.
Multi-repo governance cleanup staged index
GS-0302026-05-01
Public route wording cleaned of stale identity and private validation links.
Public front-door across .github, detections, proof, website
GS-0312026-05-03
GitHub org profile wording held below proof authority.
GitHub org profile / reviewer front door
GS-0322026-05-05
Homepage proof hierarchy corrected to keep private receipts off public proof.
Website homepage PR #11
GS-0342026-05-23
Wrong-branch preflight stopped governance-saves artifact edits on the wrong PR branch.
hawkinsoperations-proof PR #51 preflight
GS-0352026-05-10
Validation direct-main push rejected by repository rule.
Validation PR/check lane
GS-0362026-05-10
Platform required-status-check ruleset verified as merge-blocking, not just present.
Platform branch rules / test PR
GS-0372026-05-12
Website PR #20 blocked on extra branch-carried files and conflict state.
hawkinsoperations-website PR #20
GS-0382026-05-14
Validation PR #28 held on workflow drift and proof-record parity gaps.
Validation PR #28
GS-0392026-05-14
Detections PR #15 corrected host-local detail and partial reduction wording.
Detections PR #15
GS-0402026-05-14
Proof PR #28 required visible human review after chat approval.
hawkinsoperations-proof PR #28
GS-0412026-05-14
.github PR #27 held on unresolved review thread by ruleset.
.github PR #27
GS-0422026-05-14
Proof PR #30 corrected a public route to an unpublished local HO-NDR record.
hawkinsoperations-proof PR #30
GS-0432026-05-14
HO-DET-011 status / validation dependency ordering held bounded.
Detections PR #17 + validation PR #30
GS-0442026-05-14
Search Console verification kept below indexing / ranking / proof claims.
Website Search Console verification
GS-0462026-05-08
Security Onion visibility contract kept private NDR evidence out of the repo.
Security Onion visibility contract
GS-0472026-05-15
HO-DET-001 review ZIP packaging stopped on a claim-bearing untracked proof file.
Review ZIP manifest preflight
GS-0482026-05-16
PR #32 fixed a mapped-field proof gap PR #31 had left.
Detections / validation chain (PR #31 → #32)
GS-0492026-05-16
Validation PR #30 dependency-order rerun kept merge authority bounded.
Validation PR #30
GS-0502026-05-16
Detections PR #18 review corrected false check-name claims in governance text.
Detections PR #18
GS-0522026-05-21
Proof Pack checksum blocker fixed before merge.
Proof PR #43
GS-0532026-05-21
Website PR #38 held until visible human governance comment existed.
hawkinsoperations-website PR #38
GS-0542026-05-21
ID-DET-003 PR #50 unresolved thread forced NO_PROOF_RECORD correction.
Validation PR #50
GS-0552026-05-21
Website work-first refactor stopped on mixed staged and untracked state.
Website refactor preflight
GS-0562026-05-22
Telemetry merge blocked by generated cache and dirty branch state.
Telemetry merge preflight
GS-0572026-05-22
HO-DET-012 runtime evidence gate blocked runtime claim promotion.
HO-DET-012 runtime evidence gate
GS-0582026-05-22
Telemetry PR review narrowed claim-boundary allowances before merge.
Validation PR #55 + platform PR #33
GS-0592026-05-22
Cyber Kill Chain validator hardened against risky-term context bug.
Proof PR #47
GS-0602026-05-25
Runtime Truth Spine verifier failed closed for non-object truth-plane values.
Validation PR #56
GS-0612026-05-24
Runtime Proof Factory v0 summary stayed below runtime proof.
Proof PR #57
GS-0622026-05-25
Approval-scope wording narrowed after PR #57 feedback.
Proof PR #58
GS-0632026-05-25
Stale website proof-status data was reduced out of the final PR.
Website PR #41
GS-0642026-05-23
Proof-status verifier truth-plane guard gap corrected before merge.
Proof PR #51
GS-0652026-05-25
Branch preflight held validation work while local main was diverged.
Validation PR #56 preflight
GS-0662026-05-25
Website reduce/patch pass dropped stale proof-surface data files.
Website PR #41 reduce pass
GS-0672026-05-25
.github SAD audit treated absent workflow/check evidence as a finding, not proof.
.github SAD audit
GS-0682026-05-25
Platform / detections / website drift audit separated stale status from patch authority.
Multi-repo SAD audit
GS-0692026-05-25
Website dirty-state audit stopped blind mutation of conflicting proof surface.
Website dirty-state audit
GS-0702026-05-25
Green CI was not treated as merge authority across three flagship PRs.
Proof PR #51 + Validation PR #56 + Website PR #41
GS-0712026-05-26
Proof PR #59 did not move from draft stop by momentum alone.
Proof PR #59
GS-0722026-05-26
Passing PR #59 checks were not treated as merge authority.
Proof PR #59
GS-0732026-05-27
Proof PR #60 blocked operator-local paths from staying in governance-saves proof docs.
Proof PR #60
GS-0742026-05-26
Public issue cleanup kept readiness partial until path-bearing text was scrubbed.
Platform issue #2
GS-0752026-05-22
Generated cache and dirty branch state stopped a telemetry merge.
Telemetry merge
GS-0762026-05-26
Platform issue #2 stale Cribl blocker state was reconciled, not used as proof.
Platform issue #2 + Proof PR #19
GS-0772026-05-26
Private RS003 Cribl route evidence remained blocked from public proof.
RS003 Cribl route boundary doc
GS-0782026-05-26
Website dirty state was not allowed to enter proof or SOCaaS packet work.
SOCaaS Friday packet preflight
GS-0792026-05-26
AI support stayed support-only at the proof-index control plane.
DETECTION_PROOF_STATUS_INDEX.yml + GS-006 / case studies
GS-0802026-05-27
Aggregate claim ceiling held runtime / production / customer / fleet wording.
README + proof records/cards + PR #59/#60 + RS003 boundary
Boundary
What this surface does not claim
Governance Saves are reviewer examples, not production-impact metrics.
No card claims production incident prevention, customer deployment, or fleet-wide protection.
4 private-only rows and 3 omitted/demoted source IDs are not rendered here.
Public-backed examples do not promote runtime-active public proof or signal-observed public proof.
Green checks remain validation evidence, not merge or publication authority.
Routes
Continue inspection
Open route
Proof ledger
Return to proof authority and current promotion gates.
Inspect pathOpen routeAI Security model
See how governance saves map to AI Security Operations.
Inspect pathOpen routeClaim firewall
Inspect the control surface for blocked wording.
Inspect pathOpen routeGovernance saves source
Open the source-controlled candidate ledger.
Inspect path