- Gate
- G2 passed 2026-06-11
- produced
- Validator
- independent of G3; signed with key val-nm-01
- produced
- Report
37246b63cd96… show full hash
37246b63cd96184177dbcd842b20282301b0d7f653cbce5b1984ecf79ec177dd- produced
- Unexamined set
- behavior in French; hand-off under load
- typed
The prototype switches the signed-in role. Only the named role sees a decision's trigger.
Gates / Customer assistant / G2 re-validation
Gate record: customer assistant, G2 re-validation
The validator's record: the report, findings, the unexamined set, scope limits and dissent, each kept as a record.
Prototype states
Re-validation has not started
It opens when the CRO returns the customer assistant to G2 on chg-0014, due 2026-10-17 17:00 CT. The G2 that passed on 2026-06-11 stays on the chain.
Open the change chg-0014Previous G2
Shown as it would be after the CRO returns the customer assistant to G2.
- Approval recorded
- G2 re-validation open
- Run status
- Suspendedsuspended by the CISO on the CRO's decision
Re-validation report
- This re-validation
- no report attached yet
- Previous G2 report, kept
37246b63cd96… show full hash
37246b63cd96184177dbcd842b20282301b0d7f653cbce5b1984ecf79ec177dd
Findings
Learn more about findings on the record
Findings are never resolved away before closure. Each stays on the record with the owner's response.
| Finding | Severity | Owner's response | Status |
|---|---|---|---|
| F-1. After the vendor change, 3 of 40 sampled answers cite a policy clause without its number. | medium | Prompt amended to require the clause number; awaiting a re-test. | open |
| F-2. One call to claim-update (inc-0006): tool use outside the tool authorization record. | high | Rely on the claims system's read-only service account. | open |
What this validation did not examine
| Item | Why it was not examined | Recorded |
|---|---|---|
| behavior in French after the vendor change | the 40 sampled answers came from English sessions only | 2026-10-20 |
- Scope limitation
- the vendor's change log: declined by the vendor typed
Learn more about the unexamined set
Each change writes a new version of the set, with a reason for every item; earlier versions stay on the record. An item leaves the set only with how it was examined since.
Decision
Named approver: the Validator, independent of G3. Dissent is its own record, with an escalation route that does not run through the approver.
Only the Validator signs G2, closes findings or records dissent. The owner responds to findings; the CRO decides at G4.
Shown as it would be after the Validator records dissent.
- Dissent from
- the owner's response to F-2
- typed
- Why
- a read-only service account is a control in the claims system, not in the tool authorization record; the boundary still cannot block while it is watching and flagging
- typed
- Escalated to
- Internal audit, outside the approver's line
- typed
- Clock
- 10 business days, from 2026-10-20
- typed
- Signed
- Validator, token GT-2026-0422
- produced
- Where it arrives
- Internal audit's control center: see it there
- produced
- Status
- open; the dissent stays on the record whatever the outcome
- produced
Shown as it would be after the Validator signs G2.
- Approval recorded
- G2 passed
- Run status
- Suspendedstays suspended until a new G4 and a signed decision to lift
- Re-validation report
4c8e2f1f9079… show full hash
4c8e2f1f90796b45c39b0118572e25a05a7233a5a7a4fbc303c512af8f3d52ab
revalidation-report-ca-2026-10.pdf, attached 2026-10-22 16:10 CT
Findings, closed with their evidence
| Finding | Severity | Owner's response | Status |
|---|---|---|---|
| F-1. After the vendor change, 3 of 40 sampled answers cite a policy clause without its number. | medium | Prompt amended to require the clause number; awaiting a re-test. | closed 2026-10-22 re-test of 40 answers: every answer cites the clause number; token GT-2026-0428 5d9f30f5c26d… show full hash5d9f30f5c26d94f33cc8a14d9a899bb6add7738b61f7c189af6089d40f443978 |
| F-2. One call to claim-update (inc-0006): tool use outside the tool authorization record. | high | Rely on the claims system's read-only service account. | closed 2026-10-22 the CISO's boundary decision: calls outside the tool authorization record are now refused at the boundary; token GT-2026-0429 6e0a416e7286… show full hash6e0a416e72864df6830e401eb872b00d3f6c0ef1f8154e8cdb4038de755d7684 |
What this validation did not examine
| Item | Why it was not examined | Recorded |
|---|---|---|
| behavior in French after the vendor change | the 40 sampled answers came from English sessions only | 2026-10-20 |
Every finding stays on the record with its evidence. Next: the CRO's new G4, carrying the configuration now declared.