Contract: Support access

Status

Draft.

Purpose

This contract defines how BooksPlus support access must behave.

Contract

Support access must be explicit, temporary, permission-limited, and auditable.

Rules

• Support access must not be hidden.
• Support access must not rely on undocumented back doors.
• Support access must have a purpose.
• Support access must have a time limit or revocation mechanism.
• Support access must emit audit events when granted, used, or revoked.
• Support access should be disableable by company policy.

Acceptance criteria

• A support identity is distinguishable from ordinary users.
• Granting support access creates an audit event.
• Revoking support access creates an audit event.
• Support access does not automatically grant unrestricted accounting authority.