Definition
A decision record is the preserved explanation of a release or security decision. It includes the evidence inputs, the policy version applied, the outcome, and the reasoning that connects them.
It makes release history reviewable for audits, incident response, and executive accountability.
Why it matters
It makes release history reviewable for audits, incident response, and executive accountability. Without a decision record, the basis for a decision vanishes when the people involved move on.
Example
A decision record for a release might state: candidate payment-service@v2.4.1-rc3, policy release-policy@v2.1, evidence SAST retest + reviewer attestation, outcome proceed, reasoning all policy requirements satisfied by corroborated evidence.
Related terms
- Proof artifact — A record that can be independently examined to support or refute a claim about a software release.
- Defensible release decision — A release decision whose basis can be reviewed and explained long after the decision was made.
- Policy-version binding — Associating a release decision with the exact version of policy that was active when the decision was made.