O-14 Authorization Integrity

Roles distintos no prueban identidades distintas. Una cadena vacía no prueba autorización.

Nueve duties permanecen sin holder y diez vínculos de procedencia permanecen nulos. No existen assignments, firmas, verificaciones, tickets o eventos de ejecución.

Volver al cockpit GA

Separation of Duties Matrix

9 duties sin asignación. 6 incompatibilidades sin evaluar.

La matriz exige identidades humanas estables antes de verificar separación. Un nombre de rol diferente no demuestra una persona diferente.

Roles6Tipos canónicos
Duties9Cero asignados
Constraints6Cero evaluados
Identity refs0Sin verificación
1

Evidence submitter

Holder
null
Role
null
Assigned
NO
Verified
NO
2

Evidence acceptor

Holder
null
Role
null
Assigned
NO
Verified
NO
3

Gate owner

Holder
null
Role
null
Assigned
NO
Verified
NO
4

Independent gate reviewer

Holder
null
Role
null
Assigned
NO
Verified
NO
5

Human review chair

Holder
null
Role
null
Assigned
NO
Verified
NO
6

Final decision signer

Holder
null
Role
null
Assigned
NO
Verified
NO
7

Launch authorizer

Holder
null
Role
null
Assigned
NO
Verified
NO
8

Execution actor

Holder
null
Role
null
Assigned
NO
Verified
NO
9

Rollback authorizer

Holder
null
Role
null
Assigned
NO
Verified
NO

Constraint 1

evidence submitter ≠ evidence acceptor

Evidence submission and acceptance require separate accountable identities.

not evaluated · holders null · evidence null

Constraint 2

gate owner ≠ independent gate reviewer

A gate owner cannot provide the independent gate review.

not evaluated · holders null · evidence null

Constraint 3

independent gate reviewer ≠ final decision signer

Independent review must remain separate from the final decision signature.

not evaluated · holders null · evidence null

Constraint 4

final decision signer ≠ launch authorizer

A final decision is distinct from the separate launch authorization.

not evaluated · holders null · evidence null

Constraint 5

launch authorizer ≠ executor

The launch authorizer cannot be the execution actor.

not evaluated · holders null · evidence null

Constraint 6

rollback authorizer ≠ executor

Rollback authorization must remain separate from rollback execution.

not evaluated · holders null · evidence null

Separation boundary

Role label ≠ stable identity

No se asignan duties, roles, identities, signoffs o authority holders. Tampoco se evalúan conflictos.

Authorization Provenance Preflight

10 vínculos nulos. 5 etapas ausentes.

La procedencia exige candidato, evidencia, revisión humana, decisión firmada, autorización firmada, change ticket y evento observado. Ningún vínculo está presente.

Links10Cero completados
Verified0Sin evidencia
Stages5Cero completas
Execution0Sin efectos
1

Candidate and evidence

  • candidate ref
  • evidence snapshot ref
status absent · completed links 0/2 · stage ref null
2

Human review

  • accepted minutes ref
  • conditions register ref
status absent · completed links 0/2 · stage ref null
3

Final decision

  • decision record ref
  • decision signature ref
status absent · completed links 0/2 · stage ref null
4

Launch authorization

  • launch authorization ref
  • authorization signature ref
status absent · completed links 0/2 · stage ref null
5

Execution

  • change ticket ref
  • execution event ref
status absent · completed links 0/2 · stage ref null

Link 1

Exact release candidate reference

value null · digest null · signature null · verified false

Link 2

Accepted evidence snapshot reference

value null · digest null · signature null · verified false

Link 3

Accepted human review minutes reference

value null · digest null · signature null · verified false

Link 4

Dissent and conditions register reference

value null · digest null · signature null · verified false

Link 5

Final human decision record reference

value null · digest null · signature null · verified false

Link 6

Final human decision signature reference

value null · digest null · signature null · verified false

Link 7

Separate launch authorization reference

value null · digest null · signature null · verified false

Link 8

Launch authorization signature reference

value null · digest null · signature null · verified false

Link 9

Bound change ticket reference

value null · digest null · signature null · verified false

Link 10

Observed execution event reference

value null · digest null · signature null · verified false

Provenance boundary

Matching schema ≠ signed chain

No existe provenance ID, immutable snapshot, digest, firma, authorization record, change ticket o execution event.