doctrine part 7.4 · every medium+ risk action must dry-run before approval. the coliseum is paper-only by article i.1. every simulate produces a journal entry. every approval produces a chained receipt with rollback. the audit feed is real.
scenario picker
01 · simulate
every medium+ risk action gets a dry-run · outcome · cost · latency · rollback · before any signed receipt is produced
02 · approve
the operator sees confidence + risk + alternative + simulate result · A approves · R refuses · S re-simulates · M modifies
03 · audit
every event chains into the journal · 12 fields · target · parameters · confidence · risk · approvedBy · outcome · rollback · merkle root
04 · rollback
every reversible action carries a rollbackId · one click unwinds the chain · receipts are append-only · the unwind is itself a receipt
closes the open simulation cycle · seals all journal entries since the last batch into one merkle root · operators must type 'settle' to confirm · cannot be reversed