Separation of duties

approval:
  separationOfDuties:
    enabled: true
    rules:
      - actorCannotApproveOwnAction: true
      - initiatorCannotApprove: true

Example flow: an agent creates a pull request, a developer reviews, security approves, a release manager deploys; each step by a different human. The runtime rejects approvals that violate a rule and records the reason.

Normative text: Separation of duties.

Compliance

AWP provides machine-readable governance primitives that can help organizations implement and enforce their own compliance requirements. Compliance depends on the implementation, organizational controls and applicable regulatory requirements.