The decision record is not a production permission

Lesson map

Lesson 10. Map, example, EX064.

flowchart TD
  D["Decision record filed"] --> O["Option 2: improve, then retest"]
  O --> P{"Does that filing name a live restore?"}
  P -->|No| S["The next run still needs the safe-test rules"]
  P -->|Yes| X["A production verb would be a different page"]

Approving a limit's path is not permission to touch the live portal.

Logical drawing

first exercise
    isolated copy
    outbound mail blocked
    named person able to stop it
    separate credentials
    live portal not touched
decision record
    whether to accept four hours
    option 2 approved
        |
        +-- the record is not a new verb for production
        +-- a later run repeats the safeguards
        +-- opening hours are not waived here

Learning outcomes

After this chapter, you should be able to:

1. Read the decision record as a choice about the four-hour proposal.
2. Refuse to treat that choice as permission to restore over production.
3. Require the same safe-test rules of any later exercise.

10.1 The filed reasoning picks an option. It does not name a live target.

The decision record states the question, the evidence, the options and the recommendation. The question is whether to accept a four-hour interruption limit for the appointment portal. The director approved the path of improvements and a second test. A classmate takes the filed page into the server room and starts a restore of the live database, because the director has "signed." The page does not name that verb or that target. The first exercise used an isolated copy, blocked outbound mail, a person who could stop the work, and separate credentials, and nobody touched the live portal. A later exercise needs those safeguards again. The engineer stops the live attempt. This lesson does not write a new permission line.

10.2 Worked example

Lesson table; scroll horizontally to read all columns →

Synthetic case. The server-room attempt is a teaching refusal. No production system is described as changed.

Errors and limits

Stopping the live attempt does not cancel the booked retest. It keeps the retest inside the rules the first exercise already used.

Apply

• EX064 — Which page was signed? The decision record approves improvements and a second test. A teammate restores the live database because the director signed. What did the signature decide, and which safeguards does a later exercise still need?
  Show marking criteria

  Rubric: 3 = the signature chose the improve-and-retest option, not a live restore; a later exercise still needs an isolated copy, the outbound-mail block, a named stopper and separate credentials; do not touch the live portal on the strength of this record;; 2 = the record is not production permission;; 1 = one of those;; 0 = none.