CS-SEC-007 · SEC Security, privacy, sovereignty and evidence custody · 153 of 192
Contain hostile payloads and unsafe destinations
Security Engineer · Trigger: An external source supplies untrusted content or a configurable endpoint.
Simulated fixture data. Every record, receipt and timeline entry on this screen is demonstration material. It is never production evidence.
Acceptance
0 of 3 steps satisfiedMalicious-content and destination-escape fixtures will be rejected or isolated with sanitized diagnostics.
Run the remaining steps below. The result is read back from record state — nothing here is a toast.
Normal path
Access is reviewed, excess access is revoked and the credential path is rotated.
Step 1. Complete the periodic access review.
not yet satisfiedOperates onACCE-023M. Tanaka (OT Integration Lead) → RGH Document library E17Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewreviewretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: review = accepted
Step 2. Revoke access that is no longer justified; record the offboarding receipt.
not yet satisfiedOperates onACCE-002R. Mehta (Semantic Steward) → HAL Application API C3Access record· OPTIMON-IND / Nagda Warehouse
stategrantedreviewreviewretentionheld
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: state = revoked
Step 3. Rotate the credential reference exposed by that access.
not yet satisfiedOperates onCONN-009RGH Mobile capture C9 — least-privilege connectionConnection· OPTIMON-IND / Raigarh Melt Shop
reachabilitythrottledcredentialpendingcontainmentstable
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: credential = current
Exception path
Untrusted text will not change prompts, tool permissions, routing or code execution policy.
Alternate path. An investigation is open: apply a legal hold instead of deleting anything.
not yet satisfiedOperates onACCE-023M. Tanaka (OT Integration Lead) → RGH Document library E17Access record· OPTIMON-IND / Halol Packaging Line
staterevokedreviewreviewretentioncurrent
Separation of duties: Integration Engineer may not do this. Act as
Acceptance for this step: retention = held
Workflow as specified
CoreSync will enforce payload limits, safe parsing, malware/archive controls and destination restrictions; embedded instructions will remain data, not operational authority.
Evidence written in this session
Nothing run yet in this session. Record state shown above may already satisfy steps from the seeded fixture history.
Journeys that include it
Not part of a composite journey; exercised through its family views.