Authorised Validation boundaries

Authorised Validation is a separate authority control plane for explicit, time-bound, target-specific and technique-specific validation grants.

Authority ladder

• Discovered inventory is not confirmed ownership.
• Confirmed ownership is not Continuous Assessment consent.
• Continuous Assessment consent is not Authorised Validation authority.
• Authorised Validation authority is never inferred from Supplier Assurance relationships.

Safety defaults

• Defaults remain off and fail-closed.
• Live adversarial validation remains disabled unless separately authorised.
• Destructive techniques, credential guessing, persistence and exploit execution are excluded.
• Preflight cannot override absent authority.

Related documentation

• What Cyber Health Score does not do
• Tenant isolation