ARC-AI-003
Actions without valid authorization are denied
Pass
- Objective
- Nothing executed that policy did not permit.
- Assurance
- automated — ARC decides this from its own records
- Frequency
- continuous
- Severity if it fails
- critical
- Enabled
- Yes
- Category
- authorization
Procedure
For every action in the window, assert that a decision exists, and that any execution was preceded by an ALLOW, or by an approval the policy itself demanded and which was recorded as approved. An execution with no decision, or against a DENY, is a control failure of the highest severity.
What a pass does not tell you
- Assesses actions that reached ARC. It cannot see an action that bypassed the gateway entirely — that is ARC-AI-009.
Latest result
- Status
- Pass
- Summary
- All 8 actions in the window executed only under a decision that permitted them.
- Evaluated
- 2026-10-26 09:18:30Z
- Assessment
- arc_asm_b0f1f8…
Covering 2026-09-26 09:18:30Z to 2026-10-26 09:18:30Z — 7 action(s) and 8 evidence record(s) fell in that window. Every status below describes that period and nothing outside it.
History
| Assessment | Status | Evaluated | Summary |
|---|---|---|---|
| arc_asm_b0f1f8… | Pass | 2026-10-26 09:18:30Z | All 8 actions in the window executed only under a decision that permitted them. |