CTL-002 · Access and authority
Role is enforced by the server, not the browser
No data interface accepts a role, persona or tenant asserted by the client. All three are derived from the session on the server.
What counts as evidence for this control
Written before the test, so a tester cannot choose the evidence that suits the result
Refusal records produced by replaying an inflated persona claim against the decision interface.
Test history
3 tests on record
| Test | Period | Sample method | Size | Pass | Fail | Result | Tester | Tested |
|---|---|---|---|---|---|---|---|---|
| CT-002-01 | Q3 month 2 2026 | full population | 1680 | 1680 | 0 | Pass | R. Whitfield Internal Audit | Aug 17, 2026 |
| CT-002-02 | Q3 month 1 2026 | full population | 1800 | 1800 | 0 | Pass | S. Nakamura Internal Audit | Jul 18, 2026 |
| CT-002-03 | Q2 2026 | full population | 1000 | 1000 | 0 | Pass | D. Okoye Internal Audit | Jun 18, 2026 |
CT-002-01 · findings
Q3 month 2 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
CT-002-02 · findings
Q3 month 1 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
CT-002-03 · findings
Q2 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
Exceptions raised against this control
None raised
What this page is, and what it is not
Read this before quoting a result
The test results on this page are a modeled test history for a modeled estate. They demonstrate the shape of independent control testing — a named tester outside the operating team, a stated sample method, a sample size, a pass and fail count, and evidence citations that resolve into the chain — not the audited results of a live enterprise.
12 of 12 evidence citations on this control resolve to a record in the evidence spine. Every citation resolves; each one links through to the sealed record it refers to.
A control shown as untested has no result at all. Coverage on this platform counts controls that were actually tested; it never counts a control as passing because it was designed.