We design websites as growth infrastructure.

class ActionState(StrEnum):
    DRAFT = "draft"; REVIEWED = "reviewed"; APPROVED = "approved"
    EXECUTED = "executed"; VERIFIED = "verified"

ALLOWED = {DRAFT: {REVIEWED}, REVIEWED: {APPROVED}, APPROVED: {EXECUTED}, EXECUTED: {VERIFIED}}

async def transition(package, target, actor, policy, audit):
    if target not in ALLOWED.get(package.state, set()):
        raise InvalidTransition(package.state, target)
    decision = await policy.authorize(actor=actor, action=f"package:{target}", resource=package)
    if not decision.allowed:
        await audit.append("action.denied", package.id, actor.id, decision.reason)
        raise PermissionDenied()
    if target is ActionState.APPROVED and not package.has_distinct_human_approver:
        raise HumanApprovalRequired()
    return await package.advance_atomically(target, decision.id)

@dataclass(frozen=True)
class EvalGate:
    min_precision: float = .92
    min_recall: float = .86
    min_provenance: float = .98
    max_p95_ms: int = 1800

def promotion_decision(candidate: Metrics, baseline: Metrics, gate: EvalGate) -> Decision:
    checks = {
        "policy_regressions": candidate.policy_regressions == 0,
        "quality": candidate.precision >= gate.min_precision and candidate.recall >= gate.min_recall,
        "provenance": candidate.provenance_coverage >= gate.min_provenance,
        "latency": candidate.p95_ms <= gate.max_p95_ms,
        "non_inferior": candidate.mission_score >= baseline.mission_score,
    }
    return Decision(proposable=all(checks.values()), checks=checks, auto_promote=False)

async def evidence_for_case(case_id: UUID, principal: Principal) -> list[Evidence]:
    scope = await policy.read_scope(principal, object_type="Observation", purpose="mission-analysis")
    if scope.is_empty: raise PermissionDenied()
    rows = await ontology.observations.search(
        case_id=case_id, compartments=scope.compartments, valid_at=clock.now(), limit=200
    )
    return [Evidence.from_object(row).redact(scope.fields) for row in rows]