The ADMS is the grid’s decision brain - and an unprotected one. This paper specifies signed-command architecture, command inventory and replay evidence to make ADMS decisions provable.