CS-SEC-003 · SEC Security, privacy, sovereignty and evidence custody · 149 of 192
Enforce processing locality and export boundaries
Data Owner · Trigger: A flow would move data across a site or organizational boundary.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
2 of 3 steps satisfiedRestricted raw data will remain local and approved derived exports will retain their policy lineage.
Run the remaining steps below. The result is read back from record state — nothing here is a toast.
Normal path
Access is reviewed, excess access is revoked and the credential path is rotated.
Step 1. Complete the periodic access review.
satisfiedOperates onACCE-019S. Iyer (Operations Lead) → RGH Mobile capture C9Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Step 2. Revoke access that is no longer justified; record the offboarding receipt.
not yet satisfiedOperates onACCE-026R. Mehta (Semantic Steward) → HAL Application API E23Access record· OPTIMON-IND / Nagda Warehouse
stategrantedreviewreviewretentionheld
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: state = revoked
Step 3. Rotate the credential reference exposed by that access.
satisfiedOperates onCONN-005RGH Relational database E5 — least-privilege connectionConnection· OPTIMON-IND / Raigarh Melt Shop
reachabilityreachablecredentialcurrentcontainmentstable
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Exception path
Cloud availability or convenient routing will not override site restrictions.
Alternate path. An investigation is open: apply a legal hold instead of deleting anything.
not yet satisfiedOperates onACCE-019S. Iyer (Operations Lead) → RGH Mobile capture C9Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: retention = held
Workflow as specified
CoreSync will evaluate approved storage, processing, transit and export locations, permitting only the representations authorized by the locality manifest.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.