Compliance

Control owners: set a demo role to simulate who may view, prepare reviews, or sign off. Policies below anchor the narrative; use Workflow & review for the live queue and DAG runs.

• AC-RBAC

  Role-based access (demo)

  access control

  Production systems map entitlements to roles; this demo uses a cookie role for viewer / reviewer / admin.

• CC-17A

  Change control for registration statements

  change control

  Material changes to disclosure documents require documented review, approval, and an immutable audit trail before external filing.

• EV-SEC

  Evidence of supervisory review

  evidence

  Approvals must record actor, timestamp, and rationale sufficient to reconstruct who certified what and why.

• RQ-WIP

  Review queue for in-flight versions

  review queue

  Versions in review remain in a controlled queue until workflow completion or explicit escalation.