Question 1

What happens when an action genuinely cannot be undone?

Accepted Answer

It is classified R3 before the call, not after. VOID requires the policy to allow it, spends from the agent daily irreversibility budget, captures an evidence bundle including the approver identity, and marks the ledger entry as terminal.

Question 2

Does VOID slow my agents down?

Accepted Answer

Preflight adds 8 to 40ms depending on how many systems the call touches. Commits are not blocked unless your policy says hold or veto, and read only calls skip the pipeline entirely.

Question 3

Do you see my payloads?

Accepted Answer

In self hosted mode nothing leaves your infrastructure. In managed mode you configure field level redaction before anything enters the ledger, and the signing keys stay in your KMS.

Question 4

Can I run it in shadow mode first?

Accepted Answer

Shadow mode is the recommended first week. It records intent, computes classes and builds compensation plans without holding anything.