Decisions: propose, sign, supersede
Every consequential call — made by a human or an agent — is a row on the decision ledger at Org → Audit Spine. The ledger is append-only: decisions are never edited in place, they are signed, superseded, or reversed, and the full "why" travels with each one. Humans and agents write to the same ledger, so there is exactly one record of what the company decided.

Read a decision row
Collapsed, each row is a git-log line: a presence dot (olive for an agent, ink for a human), the title with a mono timestamp, the proposer's avatar, an act-type gate chip (Auto · Auto-notify · Approval-gated · Propose → approve · Human-gated), the Cortex version it relied on, and a reversibility flag.
Click a row to expand the full record: reasoning, the options considered, evidence, what would change the call, the derived-from clause (linked to its source authority in Cortex), the signature list, and the discussion thread.
Status maps to an outcome chip:
| Status | Chip | Meaning | | --- | --- | --- | | proposed | Escalated | Raised, awaiting endorsement | | adopted | Mandate | Within charter, enacted | | superseded | Overridden | Replaced by a successor | | reversed | Overridden | Undone within its window |
Propose a decision
- Open the form
Click New decision above the timeline. Proposing requires EDITOR access — a proposal enters the org's permanent record.
- State the call
Title ("What was decided?") and rationale ("Why this call, why now?") lead. Add a tag (launch · cost · policy · safety) for the facet filters.
- Declare reversibility
Pick the window: Reversible, Within 7 days, Within 30 days, Within Q, or Standing. Decisions are reversible by default; Standing means there is no undo.
- Attach the thinking
Options considered and evidence go in one per line. "What would change this" records the trigger that should reopen the call. The derived-from clause cites the charter or policy line the decision rests on.
Proposals scoped to a Space also post a system message into that Space's stream, so the room sees the call where the conversation happened.
Re-submitting a proposal with the same title while your previous one is still open is treated as a retry, not a new decision — sign, supersede, or adjust the existing row instead.

Sign to endorse
Signing appends your attestation — your member key and a server-stamped time — to the decision's signature list. Signatures are append-only and idempotent: you can't sign twice, and nobody can sign as you (the signer is always resolved server-side from the acting session). A superseded decision can no longer be signed.
You can sign from the expanded row here, or straight from the decision's card in the Home needs-you queue — both paths reach the same audited write, and the same is true when an AI colleague endorses a decision.
Supersede, adjust, or reverse
- Supersede — replace a decision with a successor. The form pre-fills from the predecessor; on submit the new row is created and the old one flips to superseded atomically, with the successor pinned to it. The room is told what replaced what. Superseded rows become read-only.
- Ask to adjust — request changes without killing the proposal. Your feedback lands in the decision's discussion thread flagged as an adjustment request, and the decision stays open while the proposer revises. You can @-mention colleagues in the ask.
- Reverse — undo a reversible decision within its declared window. Only proposed or adopted decisions can be reversed; the row flips to reversed on the record rather than disappearing.
Adoption — the proposed → adopted transition that turns a proposal into a mandate — is exercised through the agent plane's governance-gated decision.adopt method, and every transition lands on the spine either way.
Discuss without mutating
The discussion thread under each decision persists comments alongside the row — the decision itself is never edited. Every comment also chains a spine event, so the rationale trail stays complete. Deep links work across the app: a decision row anywhere (Home, a Space's Decisions tab, a mention) lands here with the row expanded and scrolled into view.
The ledger is live: an agent's decision.proposed or decision.signed appears without a reload.