Maker-Checker Approval

Four-eyes segregation of duties: the maker of a money movement cannot approve it

Maker-Checker Approval Four-eyes segregation of duties: the maker of a money movement cannot approve it 01 / Maker 02 / System of Record 03 / Checker (different person) EX / Outcome Propose Independent review Settle Create Request · payment / limit change · Maker › Propose Create Request payment / limit change Pending · held, no effect · System of Record › Propose · awaiting approval Pending held, no effect awaiting approval Review · inspect request · Checker (different person) › Independent review · maker != checker Review inspect request maker != checker Approval Gate · system-enforced · Checker (different person) › Independent review · four-eyes Approval Gate system-enforced four-eyes Execute · money moves · System of Record › Settle · both actors in audit trail Execute money moves both actors in audit trail Rejected · no effect · Outcome › Settle Rejected no effect submit approved rejected Legend User UI Agent logic Policy Tool action Context / trace

Separation of Duties

  • • The maker who creates a movement can never approve it
  • • The checker is a different, authorized person
  • • Identity separation is enforced by the system, not policy

The Gate

  • • Requests sit in Pending with no financial effect
  • • Approval is the only path to execution
  • • Rejection leaves the ledger unchanged

Evidence

  • • Both maker and checker are recorded in the audit trail
  • • Least-privilege limits who can approve
  • • Every decision is logged for review

Workflow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export