RG-21: Feedback, monitoring, and pilot operations

[hedhoud]

Context

Governance controls need production visibility, feedback, and operational ownership to remain effective.

Problem

Without trace-linked feedback, meaningful metrics, alerts, retention reviews, and incident exercises, quality or policy failures can remain unnoticed.

Expected behavior

• User feedback and issue reports link to trace identity.
• Metrics and alerts cover governance coverage, exclusions, safe fallback, trace health, regressions, and revocation lag.
• Dry runs cover expiry, retention, legal hold, unmanaged content, and inactive ownership.
• Incident procedures have named owners.
• A pilot revocation and answer investigation meets agreed service targets.

Delivery dependencies: RG-14, RG-15, RG-19, and RG-20.