Human authorization
Sensitive-action approval
Bind the approver to the reviewed action details.
Operational journey
- 01Verify
- 02Check context
- 03Evaluate entitlement
- 04Decide
- 05Record evidence
The right person is the start.
The right context is the next requirement.
| Component | Scenario application |
|---|---|
| Actors | User; responsible operator |
| Authoritative identity | IAM / AI workflow |
| Purpose | Bind the approver to the reviewed action details. |
| Trust service | Authorize |
| Decision | ALLOW / STEP_UP_REQUIRED / DENY / HUMAN_REVIEW |
| Policy | Organization-, workflow- and version-specific approved policy. |
| Evidence | Subject; purpose; relying system; policy; decision. |
| Integration | Authorization API |
| Status | Solution scenario - deployment validation required |
Exceptions & alternatives
Start with a controlled PoC.
Define purpose, devices, risks and acceptance criteria before scaling.