Skip to main content

Workflow Compliance & Control Evidence

Summary​

Workflow records audit and timeline entries alongside command changes, retains append-only instance actions, applies tenant query filters, and emits transactional lifecycle events.

Business Purpose​

Provide attributable evidence for definition changes and approval decisions.

Actors​

Workflow authors, approvers, delegates, process initiators, tenant administrators, product owners, support teams and owners of connected business modules.

Business Flow​

Create/update/publish/start/approve/reject/delegate commands add audit and timeline records before the unit-of-work save. Aggregate domain events become outbox records in the same save.

Responsibilities​

Authors maintain valid draft steps before publication. Initiating modules supply a subject and routing context. Approvers act only on applicable pending tasks. Tenant and service owners govern access, integration enablement and operational support.

Business Rules​

Core definitions, versions, steps, conditions, instances, tasks, actions, audit and timeline entities are tenant-filtered. Definition keys and version numbers have uniqueness constraints.

Integrations​

Workflow Service owns definitions, versions, instances and tasks. Connected modules can synchronously start and read instances when their integration is enabled; lifecycle domain events are persisted to an outbox and relayed as integration events.

Limitations​

Authorization policies are empty and endpoints are not marked as requiring authentication. Decision actors are not checked against assignments. No retention, legal hold, export, evidence signature, segregation-of-duties or tamper-evident control was found.

Requires Confirmation​

Production enablement, approver-role naming, upstream access enforcement, terminal decision propagation, notification ownership, retention and operating procedures require confirmation.

Source References​

  • microservices/src/workflow-service/Application/Commands/WorkflowDefinitionCommands.cs
  • microservices/src/workflow-service/Application/Commands/WorkflowInstanceCommands.cs
  • microservices/src/workflow-service/Infrastructure/WorkflowDbContext.cs
  • microservices/src/workflow-service/Api/Policies.cs
  • microservices/src/workflow-service/Program.cs

See Also​

Keywords​

Workflow, approval, definition, version, task, delegation.

Revision Information​

Draft source-backed business documentation reviewed on 2026-07-20; next quarterly review is 2026-10-20.