CS-CON-006 · CON Secure connectivity and source protection · 14 of 192
Protect the source from excessive reads
Source Owner · Trigger: Polling, discovery or backfill competes with operational work.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
3 of 3 steps satisfiedLoad tests will remain within the configured source budget and expose deferred acquisition.
Every step's expected record state is present. This is read back from the records, not asserted by the screen.
Normal path
Connectivity is proven in stages and the credential reference is current — without the secret ever being shown.
Step 1. Run the staged access test: network, authentication, then bounded read.
satisfiedOperates onCONN-027HAL Document library C27 — least-privilege connectionConnection· OPTIMON-IND / Halol Packaging Line
reachabilityreachablecredentialcurrentcontainmentcontained
Moves the record and writes evidence. Permission: test.
Acceptance for this step: reachability = reachable
Step 2. Rotate the credential reference held for the connection.
satisfiedOperates onCONN-006NGD File drop F6 — least-privilege connectionConnection· OPTIMON-IND / Nagda Warehouse
reachabilityreachablecredentialcurrentcontainmentstable
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Step 3. Record the access review covering the principal that holds the credential.
satisfiedOperates onACCE-013P. Nayar (Security Administrator) → RGH Relational database A25Access record· OPTIMON-IND / Raigarh Melt Shop
stategrantedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Exception path
Overload responses or budget exhaustion will reduce or pause work under the declared policy.
Alternate path. Repeated failures: contain the connection so the source is protected.
not yet satisfiedOperates onCONN-027HAL Document library C27 — least-privilege connectionConnection· OPTIMON-IND / Halol Packaging Line
reachabilityreachablecredentialcurrentcontainmentcontained
Moves the record and writes evidence. Permission: remediate.
Acceptance for this step: containment = contained, reachability = unreachable
Workflow as specified
CoreSync will enforce connection, request, payload and read-rate budgets, honoring source maintenance windows and prioritizing operationally important acquisition.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.
Journeys that include it
Not part of a composite journey; exercised through its family views.