FINDING TRACE / VIO-01480
Tier vs role coherence
HighResolved
Finding resolved. Audit history remains available below.
Repair receipt
Evaluation: Cleared · Resolved
Record IDs: ENT-00311
Entitlements / ENT-00311
- acceptable roles
- ["customer"] → []
ViolationVIO-01480
RuleENT-Q-03
Detected2026-05-08T23:42:53.999219+00:00
Targetentitlement / ENT-00311
WHY IT FIRED
Issue detail
Tier-1 (Admin) entitlement lists forbidden roles: ['customer']
Recommended action
Update Entitlement Field
CURRENT RECORD
Related context
- Id
- ENT-00311
- Name
- new entitlement ENT-00311
- Pbl Description
- Provides administrator access to a system for authorized users.
- Access Tier
- 1
- Acceptable Roles
- []
- Division
- business_ops
- Linked Resource Ids
- ["RES-00022"]
- Sod Tags
- []
- Created At
- 2026-05-08T23:42:53.948129Z
- Updated At
- 2026-05-08T23:42:53.948129Z
RULE INPUT
Structured evidence
- access_tier
- 1
- acceptable_roles
- ["customer"]
- forbidden_roles
- ["customer"]
PROPOSED OUTCOME
Suggested fix
- acceptable_roles
- []
AUDIT TRAIL
Workflow history
- Open → Pending Approval2026-08-11T20:07:43.332939Z
Public demo · CTADMIN repair submitted for approval.
- Pending Approval → Manual Repair2026-08-11T20:07:43.333013Z
Public demo · CTADMIN manual repair started.
- Manual Repair → Resolved2026-08-11T20:07:43.500248Z
Public demo · CTADMIN repair verified: Update acceptable roles for entitlement ENT-00311.
{ "actor": "Public demo", "changes": [ { "after": { "acceptable_roles": [] }, "before": { "acceptable_roles": [ "customer" ] }, "collection": "entitlements", "record_id": "ENT-00311" } ], "choice": { "acceptable_roles": [] }, "cleared": true, "record_ids": [ "ENT-00311" ], "source": "ctadmin", "summary": "Update acceptable roles for entitlement ENT-00311." }