Changed or withdrawn authority
Valid and invalid requests, altered targets or parameters, stale grants, and permission withdrawn before dispatch.
Technology / Evidence & evaluation
This page sets out the review material available now and the work needed to evaluate the proposed municipal workflow.
Available material
The downloadable package identifies the historical authority-harness source that was inspected, records its hash and dependencies, and sets out requirements for a current evaluation.
The source passed a Python syntax check. Five required runtime modules were unavailable, so the benchmark was not run. There are no current runtime results or pass rates in this package.
Download the inspection brief ZIPProposed municipal evaluation
A clerk searches council minutes and reviews an answer with citations. The proposed follow-on action changes one internal review marker from unreviewed to reviewed, tied to the expected record version. It leaves the official minutes untouched.
The evaluation needs to show both that permitted work can complete and that changes outside the mandate are stopped.
Return information the clerk is permitted to receive, with citations and a useful account of coverage limits. Restricted source details must remain protected.
Bind the request to the principal, record, governing policy, and expected version. A changed condition must be handled under the relevant authorization rules.
Use an authorized read-only path to inspect the target. Compare that evidence with the executor’s report and preserve any unresolved discrepancy.
Identify the build, environment, requested action, authorization, attempt, observations, and supported outcome. Record limitations alongside results.
Test conditions
Valid and invalid requests, altered targets or parameters, stale grants, and permission withdrawn before dispatch.
Concurrent duplicates, interruption around dispatch, lost responses, and recovery without reviving authority that has already been spent.
Confirmed effects, explicit rejection, mismatched readback, and unavailable observation. Exported records must support the outcome they claim.
The comparison should also account for valid work blocked, latency, and recovery effort. A control that prevents an unauthorized action still needs to be evaluated for its cost to legitimate work.