CS-SEC-005 · SEC Security, privacy, sovereignty and evidence custody · 151 of 192
Protect retention, erasure and legal-hold workflows
Governance Administrator · Trigger: A retention deadline, deletion request or hold directive applies.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
2 of 3 steps satisfiedThe disposition report will identify erased, retained-under-policy and unresolved copies or references.
Run the remaining steps below. The result is read back from record state — nothing here is a toast.
Normal path
Access is reviewed, excess access is revoked and the credential path is rotated.
Step 1. Complete the periodic access review.
satisfiedOperates onACCE-021P. Nayar (Security Administrator) → RGH Application API A13Access record· OPTIMON-IND / Raigarh Melt Shop
stategrantedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Step 2. Revoke access that is no longer justified; record the offboarding receipt.
not yet satisfiedOperates onACCE-028D. Fernandes (Release Manager) → HAL Document library C27Access record· NORTHBRIDGE-ALLOY / Sheffield Bar Mill
stateexpiredreviewacceptedretentionarchived
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: state = revoked
Step 3. Rotate the credential reference exposed by that access.
satisfiedOperates onCONN-007HAL Document library A7 — least-privilege connectionConnection· OPTIMON-IND / Halol Packaging Line
reachabilityreachablecredentialcurrentcontainmentcontained
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Exception path
A hold will not be bypassed and retained identifiers or hashes will be assessed under the same privacy policy.
Alternate path. An investigation is open: apply a legal hold instead of deleting anything.
not yet satisfiedOperates onACCE-021P. Nayar (Security Administrator) → RGH Application API A13Access record· OPTIMON-IND / Raigarh Melt Shop
stategrantedreviewacceptedretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: retention = held
Workflow as specified
CoreSync will invoke the owning retention workflow across queues, caches, raw evidence and registered consumers, recording permitted deletion and exceptions.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.