Detect
Read the authoritative employment event and its effective date.
Model & govern · HR-driven JML
Let employment events drive access—not a ticket checklist.
Joiner, mover and leaver events become governed proposals with clear downstream consequences. Policies define expected access; reconciliation verifies what actually changed.
What changes
Identity lifecycle
- 01Joiner, mover and leaver flows
- 02Mover retention and validity windows
- 03Structured provisioning failures
- 04Proof that leaver access disappeared
How it works
Three moves.
One governed loop.
Each move leaves a reason behind for the next one.
Propose
Calculate the access consequence before writing anything.
Verify
Reconcile the target and keep the result with the event.
The claim we will defend