 the automated enforcement of policy based on that evidence from a centralized policy management system, and then immutable attestations that can be used to make go or no-go decisions at the time of deployment, right?