Policy v1
An employee attests to the exact v1 state.
Correction-safe policy records
Policy attestation is a version-control problem.
Policy changes
v2 is a new revision with explicit lineage.
Evidence stays honest
The prior attestation remains bound to v1. It does not silently move to v2.
Workflow decides next step
A new attestation is requested only where policy and procedure require it.
Using UD alone does not establish SOX, GDPR, ISO 27001 or other regulatory compliance.