Glossary

Segregation of duties

Requiring that the person who prepares something is not the person who approves it.

Why it matters

Expresses a rule roles alone cannot capture: may approve unless they prepared it. The predicate depends on the record's own history, which is why plain role-based authorisation is structurally insufficient here.