Termination access lag
SCN-X02risk/controlStanding at Day-0
HR → ERP/POS/MES
An employee is terminated in HR while their ERP login remains active and an open role grant still applies — operational access has outlived employment.
Condition: HR terminated; operational access still active
Evidence anchors
Evidence
ERP User hr.leaver.live · A
Restricted in this demo persona
Comparison case
ERP User hr.leaver.closed · I
Restricted in this demo persona
An implemented mechanism can clear the Day-0 evidence records
erp.deactivate_erp_user on the live login. The grant has no effective_to, so the clock alone never ends it
Why this is here
Metrolane Day-0 deliberately includes realistic cross-system delays, duplicate source records and event-ordering conditions. They are verified parts of the frozen reference estate, not accidental data corruption.