Execution checkpoint
Just before anything runs, authority is checked again, and a single-use grant is issued.
- Approved
- Recheck now
- Single-use grant
- Business system
What it stops
- A stale approval running hours later.
- A grant used twice, altered, expired or sent to the wrong bridge.
- An agent holding the system's credential itself.
Not claimed yet: We say Enforced only where a non-bypassable enforcement point is proven. Test results