# Ariftly High-Consequence Action Control Chain v1.0

The Ariftly High-Consequence Action Control Chain is an authored engineering framework for reviewing one workflow action that can move value or create a difficult-to-reverse operational effect.

It asks eleven questions across request origin, identity, permission, preconditions, consequence limits, independent approval, execution separation, final action validation, live monitoring, outcome verification, and recovery evidence.

## Scope

The framework can be adapted to payments, withdrawals, infrastructure changes, database actions, and AI-operated tools. It is not a security standard, certification, universal minimum, or reconstruction of Binance's systems. It does not prove that a specific control would have prevented the October 2026 Binance incident.

## Construction method

1. Start with one bounded action rather than an entire platform.
2. Identify who or what requests it and the exact delegated authority.
3. Define a consequence budget for value, velocity, scope, destination, time, and reversibility.
4. Separate privileged execution from the component proposing the action where practical.
5. Define permit, step-up, pause, revoke, and block responses.
6. Specify independent completion evidence and an accountable recovery route.
7. Test the controls against normal, malformed, excessive, stale, and compromised requests.

## Limitations

- A second approval can itself be compromised.
- Limits and anomaly rules can create false positives or miss novel attacks.
- Appropriate controls depend on the workflow, assets, regulations, and threat model.
- Public incident reporting may change as investigations progress.

## Citation

Ariftly. “High-Consequence Action Control Chain v1.0.” November 3, 2026. https://www.ariftly.io/research/high-consequence-action-control-chain/README.md

## License

The framework table and CSV are licensed under CC BY 4.0. Ariftly trademarks, logos, article text, and visual assets are excluded.