17
DraftS05-CON-010v0.1Source imported
Section 80 of 102
79. Approval Gates and Separation of Duties
Stable section ID: S05-CON-010-SECTION-80 · 22 content blocks
Approval Gates shall prevent consequential actions from proceeding until required conditions and authorizations are satisfied.
An approval gate may require:
- Verified identity.
- Required role.
- Evidence package.
- Compiler validation.
- Safety review.
- Cost approval.
- Occupant consent.
- Professional approval.
- Regulatory approval.
- Physical verification.
- Independent second-person confirmation.
- Separation of Duties should be applied where one person or agent should not control the entire process.
Functions that may require separation include:
- Proposing and approving a protected change.
- Compiling and activating a configuration.
- Performing and accepting an inspection.
- Requesting and authorizing payment.
- Diagnosing and certifying a safety condition.
- Granting and using privileged access.
Approval shall apply only to the specific action, scope, configuration, and validity period presented. Material changes after approval shall invalidate or reopen the gate.