Purpose

This specification defines governance guardrails for UI translation of EX-CT-01 (Contract / Award Procedure) states, actions, and visibility. UI MUST strictly reflect governance artefacts and MUST NOT imply approval, payment, or real-world action taking.

State-to-Visibility Rules

• For each governance state, UI MUST display only information permitted by governance artefacts.
• Role-based visibility:
  • Awarding Authority MAY see contract status, legal review status, signature status.
  • Contracting Authority MAY see contract draft, legal review, signature status.
  • Selected Bidder MAY see award status, contract status post-approval.
  • Legal Reviewer MAY see contract draft, legal review record.
  • Governance Oversight MAY see full traceability records.
• UI MUST NOT display:
  • Internal deliberations
  • Signature authority details to unauthorized roles
  • Payment or settlement status
• Signature status MUST be separated from approval status.

Action Constraints per State

• Actions visible in UI MUST map strictly to governance state transitions.
• UI MUST NOT expose actions for payment, contract performance, or amendment.
• UI MUST NOT allow contract signature before approval.
• UI MUST NOT allow award without documented tender reference.

Terminology Allow/Deny List

• Allowed: "Award Proposed", "Legal Review Completed", "Contract Approved", "Signature Authorized", "Anchoring Proof Available", "Settlement Reference"
• Prohibited: Terms that imply system-made decisions, automatic outcomes, or real-world action taking.

Signature vs Approval Separation

• UI MUST clearly distinguish between contract approval and contract signature.
• UI MUST NOT imply that signature equals approval or vice versa.

Anchoring Presentation Rules

• Anchoring MAY be shown as cryptographic proof only.
• UI MUST NOT present anchoring as approval, signature, or payment.
• Settlement references MUST be informational only.

GDPR / ISO 27001 Overlays

• UI MUST apply role-based visibility for contract and award records.
• UI MUST minimize personal data exposure.
• UI MUST NOT display confidential contract details to unauthorized roles.

Validation Checklist

• UI MUST:
  • Reflect only governance states and transitions
  • Use only allowed terminology
  • Separate approval and signature status
  • Display anchoring as proof only
  • Apply role-based visibility
  • Avoid payment or action-taking language
  • Pass GDPR and ISO 27001 compliance checks

UNDEFINED Items

• Public visibility of contract post-closure: UNDEFINED — ORGANIZATIONAL DECISION REQUIRED
• Handling of contract amendments: UNDEFINED — ORGANIZATIONAL DECISION REQUIRED
• Signature authority escalation: UNDEFINED — ORGANIZATIONAL DECISION REQUIRED

End of Document