jevusecases.work

Use case demo

Access requests

Route requests to the right approver; the workflow never grants access.

Synthetic demo Proposed design
Identity Synthetic demo Proposed design
Queue · synthetic items
    RulesPolicy in code
    JevChoice · Score · Noul
    Frontier LLMDraft only
    HumanAccountable action
    Inputs

    Select an item.

    Jev + rules

    Judgments appear here.

    Outputs

    Tickets, drafts, queues.

    Pilot card

    What a first pilot of this decision needs. Proposed design, not a measured result.

    DecisionWhich approval path does an access request need, and is the justification good enough to send on?
    State Jev seesRequest text, resource and its sensitivity tag, requester type, requested duration.
    Questions
    • Choice Which approval path fits: standard, privileged, sensitive data or insufficient detail?
    • Noul Does the request ask for standing admin rights?
    • Score How specific is the business justification (1–5)?
    First action code may takeSend to the right approver, or back to the requester asking for purpose and duration.
    Stays with a personGranting, extending and removing access.
    Measure firstRequests returned for detail before an approver sees them; privileged requests caught in the first pass.
    Microsoft surfaceEntra ID Governance access package request; Logic Apps; approval in Teams.
    Out of scopeGranting access; judging whether a person is trustworthy.