Design principles
We define who can access what, which sources are approved, what the system may do, when it must stop and how a person takes over.
- Least-privilege access
- Approved and traceable sources
- Human review for consequential actions
- Logging, monitoring and exception ownership