Day-0 Explorer
General enterprise visibility, with access to the enterprise's general document spaces. No HR or payroll compartment access.Viewing as Enterprise Reader

Termination access lag

SCN-X02risk/controlStanding at Day-0

HR → ERP/POS/MES

An employee is terminated in HR while their ERP login remains active and an open role grant still applies — operational access has outlived employment.

Condition: HR terminated; operational access still active

Evidence anchors

Evidence

Comparison case

An implemented mechanism can clear the Day-0 evidence records
erp.deactivate_erp_user on the live login. The grant has no effective_to, so the clock alone never ends it

Why this is here

Metrolane Day-0 deliberately includes realistic cross-system delays, duplicate source records and event-ordering conditions. They are verified parts of the frozen reference estate, not accidental data corruption.