Governance readiness · evidence layer
Guardian is a lightweight layer—not a replacement observability stack. It gives compliance, risk, legal, and AI teams one shared governance record for production signals, incidents, oversight actions, and exportable evidence when review pressure arrives—starting with one in-scope production system first.
4-week readiness sprint — fixed scope, first baseline.EU AI Act overviewTechnical depth (For AI).
Operating record
Guardian keeps system context, monitoring posture, incidents, and reviewer notes in one traceable path so when questions arrive, the evidence is already next to the production story.

Illustrative UI—values reflect configured inputs and review rules, not a legal determination.
The operating view above is the anchor: Guardian keeps inputs, incidents, ownership, and review artefacts in one governed record so that surface still holds when questions sharpen—not a rebuilt deck each time.
Governance infrastructure, not certification or a legal verdict. Start with one in-scope production system; expand the same pattern once the record is credible.
EU AI ActMethodologyProduction review guideHiring & HR AICredit, fraud & underwriting
Capabilities line up with the states you see in the product view—documented here as a checklist, not a new story.
Outcomes you feel once the operating record replaces one-off reconstruction.
Each item maps to owners, timestamps, and artefacts in the same governed record—prioritise one system first, then widen coverage.
Who touches the record in practice—aligned with the roles implied in the product view.
| Role | In practice |
|---|---|
| Compliance | Readiness tracking, evidence bundles, regulator-facing preparation |
| Risk | Thresholds, alerts, review workflows, risk record maintenance |
| Legal | Incident documentation, defensible records, review support |
| AI / ML | Production signals, drift and robustness visibility, incident input |
| Operations / Product | Oversight actions, workflow visibility, follow-up coordination |
For EU context, see the EU AI Act overview. For metrics and defensibility, see methodology.
4-week readiness sprint — fixed scope, first baseline.