Learn · TrustedAIGov® Enterprise Knowledge Platform
Informational Fresh jira_story: GOV-133

Lesson 4 of 7 — Segregation-of-Duties-enforced validation

Governance Workspace Core · Source: Jira Story GOV-133 (5 pts) · Authority: Informational (the Jira story is authoritative).

Purpose

Enforce Segregation of Duties on validation.

Why it matters

Self-validation defeats governance; independent validation is the control.

Where this lives

Runs in the Customer AI Governance platform (components: workspace, invariant). A validation guard blocks owner/uploader; a conflict-free reviewer's approval auto-closes the task. Learn teaches this read-only.

Workflow

  1. Given a task owner or the evidence uploader
  2. When they try to validate
  3. Then SoD blocks them, a conflict-free reviewer validates, and the task auto-closes

Worked example

The person who uploaded the evidence clicks Validate. What happens?

SoD blocks them — validation must come from someone who is neither owner nor uploader.

Acceptance criteria (authoritative — GOV-133)

Given a task owner or the evidence uploader, when they try to validate, then SoD blocks them, a conflict-free reviewer validates, and the task auto-closes.

Common pitfalls

  • Letting the uploader or owner validate their own evidence.

Knowledge check

  • Scenario: The person who uploaded the evidence clicks Validate. What happens?
  • Look for: SoD blocks them — validation must come from someone who is neither owner nor uploader.

Key concepts

  • Segregation of Duties
  • independent validation
  • auto-close

For the AI Tutor

  • Summary: Enforce Segregation of Duties on validation.
  • When to use: teaching or answering questions about "segregation-of-duties-enforced validation".
  • When NOT to use: assigning owners (that is onboarding, GOV-117).
  • Key concepts: Segregation of Duties, independent validation, auto-close.

Completion criteria

Learner passes the scenario knowledge check and can point to the system state that satisfies GOV-133's acceptance criterion.

  • Module: LEARN-MOD-003 (Governance Workspace Core)
  • Provenance: LEARN-MAP-001 · Generation standard: LEARN-STD-002
  • Next: LEARN-LSN-019
← PreviousNext →