Emergency elevated access — time-bound, dual-approved, reasoned, and fully enhanced-audited (INC-003, ADR-021).
Every break-glass request, approval and denial is written to the tamper-evident audit chain with enhanced scope. Requesting requires re-authentication (ADR-034); the requester can never approve their own grant — two distinct approvers activate it. Grants expire automatically.
Grants are valid only until their expiry time.