Control Module - VAULT

FV-Validate. The check before the consequence.

Validate is the deliberate pause between asking and acting. It checks whether a request, command or approval should proceed before access is granted, before an action is executed and before a transfer leaves the protected environment.

Pre-action

Checks complete before the consequence is incurred

Multi-factor

Identity, authority, policy and context evaluated together

Recorded

Outcome and rationale captured for every check

Consistent

The same criteria apply regardless of who is asking

"Validate is the moment where good intent meets honest scrutiny, and the system is the better for both."

Pre-action checks

Validation happens before the consequence, not as a retrospective review.

Multi-factor evaluation

Identity, authority, policy and context are weighed together rather than in isolation.

Consistent criteria

The same criteria apply to the same situation regardless of who happens to be asking.

Approval awareness

Where a request requires approval, the presence and validity of that approval is part of the check.

Returned rationale

Outcomes include the rationale so requesters understand why the answer was what it was.

Evidential record

Every check and its rationale are written through Archive on physically separate storage.

Step 1

Identify the consequential actions

List the access, actions and transfers where a check ahead of the consequence is material.

Step 2

Define the criteria

For each, agree the identity, authority, policy and context that should be evaluated.

Step 3

Pilot the check

Place Validate ahead of one workflow end-to-end, with rationale returned and evidence recorded.

Step 4

Extend across the estate

Move further workflows onto Validate, reviewing outcomes through Archive on a regular cadence.