Time-Bound Privilege Elevation

Just-in-time access: request, N-eyes approval, active window, automatic expiry

Time-Bound Privilege Elevation Just-in-time access: request, N-eyes approval, active window, automatic expiry 01 / Elevation lifecycle 02 / Terminal exits 03 / Outcomes Requested · just-in-time ask · Elevation lifecycle · audited 01 Requested just-in-time ask audited N-eyes Approved · quorum met · Elevation lifecycle · audited 02 N-eyes Approved quorum met audited Active Window · TTL running · Elevation lifecycle · audited 03 Active Window TTL running audited Auto-Expired · privilege revoked · Elevation lifecycle · least-priv 04 Auto-Expired privilege revoked least-priv Denied · quorum not met · Terminal exits · audited Denied quorum not met audited Revoked Early · manual kill · Terminal exits · audited Revoked Early manual kill audited reject kill switch Legend active state waiting terminal success failure / exit

Grant Path

  • • Access is requested just in time, never standing
  • • N-eyes approval needs a real quorum
  • • The active window is bounded by a TTL

Exits

  • • A failed quorum ends in Denied
  • • An active grant can be killed early
  • • Expiry revokes automatically, no cleanup step

Audit

  • • Every transition is written to the audit log
  • • Entries are hash-chained and tamper-evident
  • • Deny and revoke are recorded like grants

Lifecycle diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export