VOCE Agent Conformance · ID-04

Environment and trust-domain separation

Are development, test and production identities separated and unable to silently cross trust boundaries?

Identity & workload trustA2+MajorPermanent control URL
Normative wording

ID-04 · Environment and trust-domain separation

Are development, test and production identities separated and unable to silently cross trust boundaries?

DomainIdentity & workload trust
Expected ownerSecurity / Platform
Minimum maturityA2+
CriticalityMajor
Target evidence stateTested
Expected evidence

Expected evidence

  • Trust-domain map
  • Cross-environment negative test
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →