Approve immutable content, authorize each execution context.
A useful policy workflow distinguishes a human or automated review decision from permission to execute a specific action on a specific robot configuration.
Request a Shadow AuditApproval stage
- Canonicalize a release manifest and hash the result.
- Record the exact content hash as the approval subject.
- Make approval state explicit and revocable.
- Reject renamed or mutated artifacts that no longer match.
Authorization stage
- Bind release, action, device, and controller configuration.
- Use a short expiry and single-use consumption.
- Re-check bindings locally immediately before dispatch.
- Deny on ambiguity or dependency failure.
Why the separation matters
Approval says that a specific artifact completed a review process. Authorization says that its use is allowed now, in this execution context. Combining them creates stale, overly broad permission.
Continue the architecture review
Ready to map the release path? Request a Shadow Audit.