Skip to main content
Controlled transitions (approvals, closures, effectiveness verification) require an electronic signature. When you sign, Invariant captures:
  • Signer identity and a re-verification of your credential at the point of signing
  • Timestamp and the meaning of the signature
  • The exact content/version being signed (the signature is bound to a content digest)
  • A linked, hash-chained audit entry
Signature records are append-only. See 21 CFR Part 11 / Annex 11.

​
When a signature is refused

The signing dialog marks the password as wrong only when the password check failed. Other refusals, such as an independence rule, the record’s status or your role, appear as a general message in the dialog. A role refusal names the roles that can perform the action.