Trust & Conflict Firewall
Independence is not a promise govrn makes — it is a structure govrn is built around. By design, the body that builds is never the body that attests.
Confidential · June 2026. Forward-looking; describes govrn's intended operating structure. Any figures are illustrative.
A verdict is only worth paying for if the party issuing it has nothing to gain from the answer. That is the entire economic premise of attestation, and it is the one thing a governance company can lose in a single decision and never get back. govrn treats independence as the asset — engineered into the company's structure, not asserted in its marketing.
The conflict every governance vendor has
Most AI-governance tooling is sold by the same party that built the thing being measured, or by a party that profits from a particular result. That creates a structural incentive to grade leniently, to define success as "passed," and to quietly soften the standard over time. The buyer knows this. So the verdict gets discounted — and a discounted verdict does not satisfy a board, a regulator, or an auditor.
govrn's answer is separation of duties: govrn is built so that the function that builds and runs (the Aperture engine) is walled off from the function that attests (the govrn standard). One produces evidence; the other independently judges it. The intended structure is that neither can overrule the other.
Why this holds even inside one company
govrn does not require two companies to be independent. The intended structure draws the same separation that accreditation bodies demand between distinct firms internally, as a permanent boundary the company is built around:
| Function | What it does | What it must never do |
|---|---|---|
| Build / Run (Aperture engine) | Measures, instruments, produces the record | Issue its own attestation |
| Attest (govrn standard) | Independently judges the record against frameworks | Build or tune the thing it judges |
This mirrors the established principle in conformity-assessment practice — drawn from ISO/IEC 17021-1, the standard that governs certification bodies — that the body which builds or consults is never the body that certifies, and that a meaningful cooling-off period (commonly framed as roughly two years in conformity-assessment practice) separates anyone from attesting on work they advised. govrn is built to adopt that principle as an internal invariant: as the team grows, the attest function will carry its own reporting line and its own judgment, and the engine team will not be able to reach into the verdict.
The seam between them is real and deliberate. As designed, the govrn-interface carries evidence, not a verdict — the engine hands over the measured record, and the standard reaches its own conclusion. That separation is what makes the conclusion defensible. See The Standard & The Engine.
Independence as a moat, not a constraint
Counterintuitively, the firewall raises the value of the engine rather than limiting it. Because the intended structure keeps the attest arm separate, every record the Aperture engine produces is meant to be judged by a credibly independent party — which is precisely what a CISO, board, or regulator will pay for. The separation is a feature that compounds:
- Reproducibility reinforces independence. The engine is deterministic, with no model in the measurement path — the same inputs always produce the same record. There is no discretion to lean on, no place for a thumb on the scale. The verdict rests on math, not on the attester's mood.
- Fresh records keep the verdict honest. An attestation is valid only against a fresh record, which is why continuous measurement is required — and why the running engine plus fresh-record attestation is the renewing relationship, not a one-time stamp. See Business Model.
- The record compounds. The accumulated, attributed record grows more valuable with time, and its value depends entirely on the independence of the body that vouches for it.
Over time, the durable moat is not the software — competitors can build engines. It is the independent attestation plus the accumulated, attributed record: an asset that cannot be back-dated, cannot be self-issued, and gets harder to replicate the longer govrn runs.
The principle, stated plainly
govrn is built so that it is never self-certified. The standard is third-party by construction, aligned to accredited practice (ISO/IEC 42001, NIST AI RMF, and four more crosswalks), and the intended structure firewalls the attest function from build and run as a permanent structural rule. Evidence stays portable — sovereignty, not lock-in — so the buyer is never trapped, which is itself a tell that the verdict is honest. Independence is what makes the verdict worth paying for. The firewall is how govrn guarantees it.