Access Certification API — Attestation Posture

Privileged access reviews, guest renewals, and signoff posture that stay operator-readable.

This control plane turns synthetic access certification exports into one review surface: privileged-role renewals, sponsor-backed guest reviews, service-account ownership, evidence continuity, and attestation packet completeness before renewal confidence is asserted.

57%

Security Governance

Privileged admin packet

Do not renew until privileged access decisions and supporting evidence are complete.

Break-glass evidence and one reviewer note remain open.
8 hours to the next renewal checkpoint
Status: red

AC-12

63%

IAM Operations

Third-party access packet

Hold renewal and push the packet back through guest and non-human access review.

Vendor guest and service-account decisions are still incomplete.
10 hours to the next renewal checkpoint
Status: red

AC-18

76%

Platform Security

Service-account exception packet

Packet can recover once owner mapping closes inside the next cycle.

Owner evidence is incomplete for one legacy principal.
16 hours to the next renewal checkpoint
Status: yellow

AC-21

73%

Identity Governance

Campaign evidence replay

Signoff posture is recoverable if evidence replay finishes before renewal.

Two decision records need linked ticket evidence before closure.
18 hours to the next renewal checkpoint
Status: yellow

AC-27