LensReading which lens this session carries.
All controls

CTL-017 · Change and release

An agent version change is approved before promotion

No model, prompt or policy version reaches the live estate without a recorded approval.

Ineffective
Domain
Change and release
Scope
enterprise
Frequency
per release
Operation
Manual
Control owner
Head of Agent Operations · engineering
Tester of record
internal-audit
Last tested
Aug 02, 2026
Next due
Sep 01, 2026 · in 14d

What counts as evidence for this control

Written before the test, so a tester cannot choose the evidence that suits the result

Version registry entries compared against approval records.

Test history

2 tests on record

60 items sampled
TestPeriodSample methodSizePassFailResultTesterTested
CT-017-01Q3 month 2 2026random attribute sample1596FailS. Nakamura
Internal Audit
Aug 02, 2026
CT-017-02Q2 2026random attribute sample45441Pass with findingsD. Okoye
Internal Audit
May 02, 2026

Exceptions raised against this control

1 still open of 1

EXC-005Agent version changes were promoted without a recorded approvalhighopen · due Sep 01, 2026

Version registry entries exist for changes that carry no matching approval record. The change happened and the approval was not captured, which is indistinguishable from the change being unapproved.

Owner
Head of Agent Operations · engineering
Remediation
Block promotion in the pipeline unless an approval record exists, rather than checking afterwards.

What this page is, and what it is not

Read this before quoting a result

The test results on this page are a modeled test history for a modeled estate. They demonstrate the shape of independent control testing — a named tester outside the operating team, a stated sample method, a sample size, a pass and fail count, and evidence citations that resolve into the chain — not the audited results of a live enterprise.

8 of 8 evidence citations on this control resolve to a record in the evidence spine. Every citation resolves; each one links through to the sealed record it refers to.

A control shown as untested has no result at all. Coverage on this platform counts controls that were actually tested; it never counts a control as passing because it was designed.