Prove what shipped (audit & compliance)

Who: compliance, security, release managers. Goal: answer “prove what was in this production release” without a manual scramble.

The workflow

1. Reconcile the release so every PR/issue/artifact/deployment is attributed and classified.
2. Require approval via a policy so a human sign-off is on record.
3. Publish — Reloqui freezes an immutable snapshot (release, evidence, gate results, approval chain).
4. Generate the compliance audience note and the export package (GET /api/v1/export/releases/{id}).

Why it holds up

• Every claim traces to stored evidence with a classification reason.
• The snapshot is frozen at publish and append-only.
• The approval chain (who, when, comment) and policy result travel with it.
• Retention policies and a full audit log back the whole trail.

Result: an auditor gets a self-contained, defensible record — in seconds, not days.