Keep the decision connected to the return.
A review can identify an access change while the source system still needs action. The request, responsible owner and expected return belong to the same piece of work.
This scenario illustrates the handoff; it does not report a completed access change.
Give each person a distinct responsibility.
- System owner
- Return the actual access state.
Keep the source, subject and observation bound to the requested change.
- Evidence record
- Retain what was observed.
Missing access, an unsuccessful action or an unknown result remains visible.
- Separate reviewer
- Assess the source return.
The request and the person reporting execution do not by themselves establish a verified result.
Follow through on the state that came back.
Illustrated behaviorThe owner returns evidence to a separate reviewer.
Outcome boundaryNo revocation or verified customer result is claimed.
A failed or incomplete return needs an explicit follow-up. A retained review decision remains distinct from actual source state.
For a historical investigation with source observations, read the logging field note below.