Override detail
OVR-202608-0137
PRIORITY_CHANGE · building BLD-4417 · 2026-08-31 · twilight shift · decided at L4
ESCALATE
What the shift leader did
- Decision type
- PRIORITY_CHANGE
- From
- P3
- To
- P2
- Quantity moved
- 10
- Reason code
- CARRIER_LATE
- Forecast confidence
- 93.9%
- Downstream capacity
- —
- Minimum staffing intact
- yes
What happened to the stores
- Replenishment
- no miss
- On-time
- 97.2%
- Notes
- No downstream impact observed.
Constraint evaluation trace
The constraints in the order the policy evaluated them. Every constraint is evaluated even after one fails, so the whole picture is on the record; the first failure is the one that decides the verdict. Read from the signed payload.
| # | Constraint | Rule | Outcome | Observed | Limit | Reason code |
|---|---|---|---|---|---|---|
| 1 | Minimum staffing intact | hard-constraint-min-staffing | pass | 1 | 1 | — |
| 2 | Forecast confidence at or above floor | forecast-confidence-floor | pass | 9,390 | 7,000 | — |
| 3 | Decision type covered by a rule | uncovered-decision-type | fail | — | — | decision_type_not_covered_by_rule |
Verdict ESCALATE — decided by Decision type covered by a rule. Policy flow-center-v1.
Tamper-evidence
- Record class
- retrospective_evaluation_record
- Proof id
- proof-b720c027-cd39-4266-a0c2-fb5016f6b216
- Position in chain
- 149
- Record hash
- e507596905c8976d60d0b97743f0141c5894b567e4d193d6190f1c176a1c7ceb
- Previous record hash
- e7e386d179316bcd8b7fd0090ad030d87df246ba6c2d37828b41bef846732e66
- Input hash
- df8202ad60034633cf8d5ea24c564e315a5772b93393a15c95c9c49ae67ecb2b
- Rules hash
- 8d39825c9dc17a7d59df5d4bc7f86535086e7e4f0fc4c970c2947fc9eca831d3
- Signature
- present (Ed25519)
- Workflow
- Flow-Center Operating Overrides Replay
- Policy applied
- Flow-Center Operating Policy · flow-center-v1
- Sealed at
- 2026-09-16 03:57:35 UTC
- Stored disposition
- escalate
Verification is independent of the screen you are looking at: it recomputes the record from its own contents, checks the signature, and rehashes the payload against the input hash bound into the signed core.