Term Kind Topic What it is
Compliance Scope Reduction Scope Minimisation, Descoping pattern Certification Impact on Architecture Designing so that regulated data never touches most of the estate, which removes systems from assessment entirely rather than adding controls to them.
Human in the Loop Design pattern Human-in-the-Loop Design Placing human judgement at the points where automation should not decide alone — with attention to whether the human can actually exercise judgement.
Irreversible Operation Guard Soft Delete Window, Two-Person Destructive Control pattern Segregation of Duties The set of design choices that make a destructive action recoverable by default - a delay before permanence, a type check on the target, and a second approver for bulk effects.
Waiver as Code Machine-Readable Exception, Gate-Readable Waiver pattern Exception & Waiver Management Storing each approved deviation where the enforcement point reads it - rule id, scope, owner, justification, compensating control, expiry - so an exception stops a block automatically and its expiry becomes a …