Skip to content

Contract: Support access

Status

Draft.

Purpose

This contract defines how BooksPlus support access must behave.

Contract

Support access must be explicit, temporary, permission-limited, and auditable.

Rules

  • Support access must not be hidden.
  • Support access must not rely on undocumented back doors.
  • Support access must have a purpose.
  • Support access must have a time limit or revocation mechanism.
  • Support access must emit audit events when granted, used, or revoked.
  • Support access must be disableable by company policy.

Acceptance criteria

  • A support identity is distinguishable from ordinary users.
  • Granting support access creates an audit event.
  • Revoking support access creates an audit event.
  • Support access does not automatically grant unrestricted accounting authority.