Cognous Governed Exchange | Open Control Stack | Cognous
Open Control Stack/ Components/ Component 13 Cross-cutting · connects the groups

Cognous Governed Exchange

Receiving a message is not the same as being told to act.

An experimental GAX/IMX reference that connects governed messages, recipient assessment, bounded execution and retained evidence. It implements exchange behavior and local transport; the institution and its Alvorada constitution live separately, in Institutional Governance.

View repository All components
The problem
Delivery blurs into permission

Receipt, understanding, acceptance, authorization and execution are different events. Duplicate messages, lost acknowledgements and changed authority make them easy to confuse.

With Governed Exchange
Each state assessed and retained separately

GAX assesses the message, durable transport handles delivery and redelivery, and IMX keeps continuity, so outcomes stay tied to the original artifacts.

What it provides
GAX assessment

message structure, supported profile, identity binding, references, freshness and permitted handling.

Local durable transport

queue, deliver and redeliver messages while keeping their link to recipient outcomes.

Runtime integration

calls the Control Plane and executor with a caller-supplied resolver, policies and trusted time.

Retained artifacts

original Replay, ODES and IMX artifacts exposed with identities and content commitments.

Recovery and continuity

original effects reconciled and derivative lineage retained; loading a successor is never an execution grant.

In the refund workflow

LocalDurableTransport delivers a synthetic refund message to the GAX recipient adapter, which assesses it and routes the Manifest-bound proposal through the trusted runtime. Redelivery of the same message returns the original retained artifacts, with no second effect. If evidence was never retained after an effect, evidence-only recovery creates an explicitly derived record, never a replacement effect.

Try it

Run the transported refund in the reference and compare the first delivery with the artifacts a redelivery returns.

Open the repository →
What it does not claim

A bounded refund profile, not full GAX conformance, a production network or institutional authentication. Message IDs and receipt do not authorize actions. Deferred Governed Exchange PR #2 is excluded from the hub.