Definition
The current status of a system's recorded permission to act, drawn from a closed set: allowed, review_required, suspended, or revoked. Every action is checked against the state in force at the time it is taken, and every transition is recorded with its cause.
It matters because states are what triggers can move. Without an explicit grant state there is nothing for a review trigger to change, and monitoring stays decorative rather than governing.
Tests that show it is in place
- The set of legal states and the legal transitions between them are declared, not implied.
- Every transition record names the trigger, the actor, and the timestamp.
- Replaying the state history reproduces the authorization status at any past moment.
Evidence to keep
- Artifact: A state machine definition for grants, with legal transitions and their triggers.
- Behavior: A grant moving to review_required automatically when a dependency lapses.
- Metric: Share of state transitions with a recorded cause, and median dwell time in review_required.
References
- STD-07 Revisable delegation record · Standard